Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          LwHjAV07MswEBIDcU5o3CX8XuTwKvXRGfNui93kJ1tU=
Subject key identifier:   99:60:D5:BA:A7:AD:07:29:E4:86:21:46:68:05:A4:04:A4:EC:41:7C
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          06C7
Signing time:             Wed 20 Nov 2024 21:42:12 +0000
Manifest this update:     Wed 20 Nov 2024 21:42:12 +0000
Manifest next update:     Wed 27 Nov 2024 21:42:12 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: K93jcc490J3YDcfgL+s5lR76oFtdvjHH5el9bvMT7oU=)
                          2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: Cr86pDAeYBNOH/f3Ffkig2n8Xta7VZxs/ZGTP0dC2Ds=)
                          3: BB684734816B11EFA4D23930C4F9AE02.roa (hash: yDEfQxbpM8/45yk57WWqW8Bt+VgNvfcfxMhi33lEx40=)
                          4: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: lV6jMb5h9nbmgpZPjhxFVRMKMVNkKVjEOjsDZ14+HCA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: Nov 20 21:42:12 2024 GMT
            Not After : Nov 27 21:42:12 2024 GMT
        Subject: CN=673e57b4-fc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:0a:3c:89:a4:cb:49:3e:b4:15:01:38:f7:
                    01:93:33:3f:2a:bc:da:dc:42:f8:86:96:83:d1:cc:
                    b2:8d:11:1c:ba:64:e4:a3:4d:ca:e2:2b:c2:27:bb:
                    91:a5:ae:b8:b7:d5:e3:03:f4:6f:15:71:cd:44:e4:
                    ca:a6:7e:df:95:8a:96:42:d7:21:59:10:00:e8:b7:
                    34:22:bd:11:eb:26:c3:32:f6:91:39:16:96:68:28:
                    09:80:28:67:35:ef:21:d2:7e:95:ad:c5:68:e6:bc:
                    7b:79:36:81:07:7a:27:ff:7d:a6:37:ae:5e:95:72:
                    75:27:ee:69:13:7e:cf:f0:85:9d:34:43:df:28:fa:
                    e6:c1:33:7f:93:8d:c0:37:c9:af:84:d8:5d:a9:fb:
                    e7:76:bf:b6:89:04:5c:27:ec:36:45:38:84:69:f9:
                    f3:14:03:ab:c7:cc:3e:80:9e:57:5d:ef:c0:aa:87:
                    8f:de:1f:21:3e:dd:da:2c:50:4e:9f:21:31:c0:5a:
                    25:ae:fa:42:3c:f6:77:e0:91:de:27:65:ee:ec:fe:
                    d4:50:97:db:4f:0e:45:24:d5:8f:13:92:45:ed:cd:
                    af:f4:22:1a:32:8f:3b:9f:e9:49:c0:c6:82:cc:2f:
                    25:ae:02:3e:e8:a9:50:d6:f7:4a:bd:52:c6:c0:bd:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:D5:BA:A7:AD:07:29:E4:86:21:46:68:05:A4:04:A4:EC:41:7C
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:33:42:69:66:5c:02:b7:df:2a:ed:17:93:46:bd:86:0c:
         1e:15:ee:8e:bc:98:62:ef:83:5b:0f:7b:0c:91:89:cd:27:89:
         07:28:39:db:94:33:32:69:20:d3:c1:9f:3d:a3:21:5a:28:e4:
         d9:11:1c:b0:56:15:62:dd:14:b9:21:83:d7:80:f8:ea:8e:d1:
         5c:1c:df:f0:cf:19:a4:0c:66:06:22:71:3d:7f:47:4c:2a:c9:
         fb:46:38:e6:bc:2a:f0:b2:b9:ac:4f:65:ce:27:9d:7d:3f:7a:
         ba:45:34:da:8d:28:72:58:e6:4b:60:ce:76:5a:97:d0:82:7d:
         ef:8c:a0:92:00:4c:6e:06:5e:81:dd:f1:d2:92:4c:d1:7f:5a:
         98:9f:6e:3d:de:78:18:74:3d:2b:63:15:e1:7e:79:94:db:52:
         24:04:2d:9c:db:52:5e:ad:42:2d:48:0d:76:74:90:8f:a6:56:
         ca:84:f3:5d:17:24:9f:6a:9f:6e:da:ca:3c:99:c6:d2:d6:c0:
         ba:6c:10:62:ef:fa:2f:e9:9f:2c:9b:45:1b:37:ba:64:dc:2d:
         d0:91:57:aa:da:6a:8d:4d:54:af:ae:a6:68:ff:f4:5e:67:2c:
         7a:df:7a:64:4d:0a:79:19:b5:c8:9f:cd:d0:1c:30:c2:f3:88:
         3f:5c:e3:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExMzgxMTAvBgNVBAUTKEU4ODlEREQ1NTQyQzZEMkM5REM3NDBFMTI0NkE5RTc0
OEU3NTEzNTIwHhcNMjQxMTIwMjE0MjEyWhcNMjQxMTI3MjE0MjEyWjAYMRYwFAYD
VQQDEw02NzNlNTdiNC1mYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2IKPImky0k+tBUBOPcBkzM/Krza3EL4hpaD0cyyjREcumTko03K4ivCJ7uR
pa64t9XjA/RvFXHNROTKpn7flYqWQtchWRAA6Lc0Ir0R6ybDMvaRORaWaCgJgChn
Ne8h0n6VrcVo5rx7eTaBB3on/32mN65elXJ1J+5pE37P8IWdNEPfKPrmwTN/k43A
N8mvhNhdqfvndr+2iQRcJ+w2RTiEafnzFAOrx8w+gJ5XXe/AqoeP3h8hPt3aLFBO
nyExwFolrvpCPPZ34JHeJ2Xu7P7UUJfbTw5FJNWPE5JF7c2v9CIaMo87n+lJwMaC
zC8lrgI+6KlQ1vdKvVLGwL1cMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlg1bqn
rQcp5IYhRmgFpASk7EF8MB8GA1UdIwQYMBaAFOiJ3dVULG0sncdA4SRqnnSOdRNS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzOC9CQjA2QjMzODM5
MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JTeWR4MERoSkdxZWRJNTFF
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJbmQxVlFzYlN5ZHgwRGhKR3FlZEk1MUUxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTEzOC9CQjA2QjMzODM5MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JT
eWR4MERoSkdxZWRJNTFFMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3IDNCaWZcArffKu0Xk0a9hgweFe6OvJhi74NbD3sMkYnNJ4kHKDnb
lDMyaSDTwZ89oyFaKOTZERywVhVi3RS5IYPXgPjqjtFcHN/wzxmkDGYGInE9f0dM
Ksn7RjjmvCrwsrmsT2XOJ519P3q6RTTajShyWOZLYM52WpfQgn3vjKCSAExuBl6B
3fHSkkzRf1qYn2493ngYdD0rYxXhfnmU21IkBC2c21JerUItSA12dJCPplbKhPNd
FySfap9u2so8mcbS1sC6bBBi7/ov6Z8sm0UbN7pk3C3QkVeq2mqNTVSvrqZo//Re
Zyx633pkTQp5GbXIn83QHDDC84g/XOPQ
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:43 2024 by rpki-client on console-fra.rpki-client.org