Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
File:                     6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json)
Hash identifier:          gxomdE3H87FKkYA5JLd97HkcUTWa518RXHjAj243VEM=
Subject key identifier:   54:DE:21:43:0C:EA:4D:EA:18:38:36:DE:81:C9:FA:73:E1:52:34:73
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
Manifest number:          0244
Signing time:             Thu 21 Nov 2024 01:21:07 +0000
Manifest this update:     Thu 21 Nov 2024 01:21:06 +0000
Manifest next update:     Thu 28 Nov 2024 01:21:06 +0000
Files and hashes:         1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: sSnZlZOCi8cQybXmrYE2Tw6f8NSD/f+/niTvBUyMecs=)
                          2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Nov 21 01:21:06 2024 GMT
            Not After : Nov 28 01:21:06 2024 GMT
        Subject: CN=673e8b03-e74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:d3:f2:67:12:1c:89:2d:6e:dd:18:13:09:
                    a0:f0:8c:d1:75:29:68:e3:5e:88:ba:ea:c9:9f:ee:
                    ae:5e:3a:be:21:60:a1:71:84:6e:6b:e7:32:86:42:
                    bc:da:88:13:2c:b2:02:bc:c0:e2:64:a9:92:d8:d0:
                    54:ca:e3:df:5b:24:13:6e:02:25:b6:a2:1c:47:a7:
                    f2:73:f0:99:19:57:fc:d4:66:f9:d3:0e:be:e6:88:
                    40:22:d1:b9:b2:b0:0a:81:fc:48:ab:b5:2a:ef:18:
                    ed:dd:08:28:e9:b6:d7:45:2e:eb:9b:05:e2:b6:3e:
                    d8:eb:b1:5b:f8:b1:7d:3c:10:d7:32:8a:65:a3:57:
                    e2:d2:bd:30:e7:5c:1c:b9:1b:92:98:82:70:07:c9:
                    15:94:8d:3d:9b:99:1e:43:2d:90:87:76:e7:a0:ae:
                    80:c6:c7:e6:1f:b0:81:12:11:1b:4f:21:5e:50:6c:
                    9e:d5:89:1f:aa:da:50:95:da:34:be:57:cc:62:67:
                    fb:d8:8a:65:e4:bd:c6:01:fc:cb:87:f4:bf:e9:59:
                    a6:34:10:22:ed:24:fd:5c:de:a8:a4:29:81:50:62:
                    c3:f5:60:f8:db:57:0a:34:24:2a:40:de:07:bc:0b:
                    44:5e:52:ac:4d:da:48:c1:cf:cb:85:aa:84:2c:5d:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:21:43:0C:EA:4D:EA:18:38:36:DE:81:C9:FA:73:E1:52:34:73
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:cb:9c:fb:3c:db:c2:b1:b9:df:58:74:c8:cf:5a:6f:e5:
         fc:de:47:40:05:c8:5c:12:ee:64:f8:f1:3c:2d:11:5e:de:c6:
         d9:f8:48:c2:57:2d:88:84:45:05:dc:1f:cf:f0:03:80:a4:e3:
         38:b7:de:95:0e:d8:d8:9d:41:12:ad:61:b6:59:5b:7c:6a:6b:
         1e:31:c7:55:1a:aa:60:f7:2c:b5:38:85:12:37:ac:b9:62:c3:
         77:17:34:08:4e:82:17:f4:39:f4:8c:09:14:39:4e:4c:cd:f7:
         03:dc:8b:81:14:db:67:a3:ad:ea:06:e1:eb:56:d4:c0:78:35:
         ab:3b:89:6f:a3:23:ed:3e:4a:29:49:bd:e2:dc:33:6e:60:70:
         f6:56:33:64:7b:da:60:0a:d4:e0:9d:bb:95:05:cb:28:ea:cd:
         db:fb:67:e3:ba:38:77:40:da:16:34:00:93:4a:81:9e:83:96:
         c6:15:e2:15:71:3e:ec:42:e5:bb:c6:1f:41:18:e0:2e:70:cd:
         65:a5:c5:55:bd:4a:de:4f:37:29:fc:c7:f0:65:22:5d:88:b6:
         dc:67:63:99:4e:d7:a9:c6:da:53:ec:c1:22:e1:dc:d5:47:e4:
         a3:04:92:e6:79:90:fe:83:27:a3:43:bd:4c:4c:9f:77:90:c4:
         e2:29:e3:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI3NTExMTAvBgNVBAUTKEU4MTFGNjM3RDZERDg2M0U1Qzc0RjMyRTI5QkNFMjc4
RkFCMjU4RjcwHhcNMjQxMTIxMDEyMTA2WhcNMjQxMTI4MDEyMTA2WjAYMRYwFAYD
VQQDEw02NzNlOGIwMy1lNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7JDT8mcSHIktbt0YEwmg8IzRdSlo416IuurJn+6uXjq+IWChcYRua+cyhkK8
2ogTLLICvMDiZKmS2NBUyuPfWyQTbgIltqIcR6fyc/CZGVf81Gb50w6+5ohAItG5
srAKgfxIq7Uq7xjt3Qgo6bbXRS7rmwXitj7Y67Fb+LF9PBDXMoplo1fi0r0w51wc
uRuSmIJwB8kVlI09m5keQy2Qh3bnoK6AxsfmH7CBEhEbTyFeUGye1YkfqtpQldo0
vlfMYmf72Ipl5L3GAfzLh/S/6VmmNBAi7ST9XN6opCmBUGLD9WD421cKNCQqQN4H
vAtEXlKsTdpIwc/LhaqELF3WQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTeIUMM
6k3qGDg23oHJ+nPhUjRzMB8GA1UdIwQYMBaAFOgR9jfW3YY+XHTzLim84nj6slj3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1MS83MkQ3RDhCNEZE
RDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhqNWNkUE11S2J6aWVQcXlX
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZCSDJOOWJkaGo1Y2RQTXVLYnppZVBxeVdQYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qjc1MS83MkQ3RDhCNEZERDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhq
NWNkUE11S2J6aWVQcXlXUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKP8uc+zzbwrG531h0yM9ab+X83kdABchcEu5k+PE8LRFe3sbZ+EjC
Vy2IhEUF3B/P8AOApOM4t96VDtjYnUESrWG2WVt8amseMcdVGqpg9yy1OIUSN6y5
YsN3FzQIToIX9Dn0jAkUOU5MzfcD3IuBFNtno63qBuHrVtTAeDWrO4lvoyPtPkop
Sb3i3DNuYHD2VjNke9pgCtTgnbuVBcso6s3b+2fjujh3QNoWNACTSoGeg5bGFeIV
cT7sQuW7xh9BGOAucM1lpcVVvUreTzcp/MfwZSJdiLbcZ2OZTtepxtpT7MEi4dzV
R+SjBJLmeZD+gyejQ71MTJ93kMTiKeMV
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:33 2024 by rpki-client on console-ams.rpki-client.org