Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
File:                     6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json)
Hash identifier:          dwglUgt7uZ7JX3o4ppwQ2wnnMLtp6p19na93FNcltP8=
Subject key identifier:   CE:00:CE:61:34:CA:F8:49:2C:37:59:8B:1C:C0:0A:90:EE:65:45:FC
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Certificate issuer:       /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
Manifest number:          0C0D
Signing time:             Fri 22 Nov 2024 18:18:43 +0000
Manifest this update:     Fri 22 Nov 2024 18:18:43 +0000
Manifest next update:     Fri 29 Nov 2024 18:18:43 +0000
Files and hashes:         1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: SQ/XRFTVjiwCnfQxKyehx8msPeiUjpK4cto2E5EHHRI=)
                          2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: BvjqspRO5HaHZk8MDrrn9sDV9WNZa1iIeNw3qkNnjXQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
                          rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
        Validity
            Not Before: Nov 22 18:18:43 2024 GMT
            Not After : Nov 29 18:18:43 2024 GMT
        Subject: CN=6740cb03-2a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:0a:bf:fd:55:83:c4:af:ed:2f:14:1a:5b:
                    d6:88:ac:e8:3a:8f:f7:e1:5d:62:c4:96:e0:8e:9d:
                    04:ca:19:17:47:37:18:e5:b6:de:ac:43:aa:d4:d5:
                    1c:ec:ad:fc:3d:30:d7:f1:42:0c:be:18:18:b7:42:
                    c9:59:83:15:67:3f:b3:59:59:a2:20:04:8b:85:4d:
                    6f:4f:b4:80:7d:7c:96:73:b5:1a:b8:ce:e2:6f:05:
                    1b:39:cd:ff:7c:2e:73:ae:2d:28:23:fe:fa:39:27:
                    9a:11:0a:e9:6e:1e:51:db:55:b5:71:dc:9b:7b:e7:
                    83:74:99:5e:49:aa:e8:a0:3a:cf:4a:f6:86:a0:4c:
                    32:bb:be:73:55:13:f6:39:b4:48:2e:3d:cf:53:0f:
                    10:31:d6:96:18:2f:94:08:f2:55:d3:9e:43:b0:2a:
                    8b:7f:73:e1:f2:fa:e1:f6:49:8d:ee:31:d9:8a:ec:
                    67:2d:c7:e7:6e:8c:50:c2:8d:71:19:53:7b:e8:15:
                    c0:84:bc:1c:f8:b8:ab:54:e9:79:a5:04:04:5b:4c:
                    52:88:78:7f:38:87:9c:50:6f:9e:53:d3:c4:75:7c:
                    5b:fc:84:1f:6d:d8:72:62:ae:ca:f3:ae:94:e9:13:
                    b5:60:3f:14:e6:31:53:83:b3:1f:81:ed:0c:37:9a:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:CE:61:34:CA:F8:49:2C:37:59:8B:1C:C0:0A:90:EE:65:45:FC
            X509v3 Authority Key Identifier:
                keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:2a:82:b6:fa:06:25:01:e3:3a:1d:d1:da:6f:c1:5f:51:
         1b:3f:08:03:21:fd:fd:b8:e1:55:29:6c:74:1a:7b:8f:b3:6a:
         d1:c9:13:73:36:90:f7:3b:66:97:22:2f:2f:6f:be:3a:e6:ea:
         87:f4:91:08:22:6e:3a:aa:08:98:bd:0e:59:8f:a4:ca:46:3c:
         26:b1:c9:aa:5c:05:4c:a0:f8:f1:b9:e8:03:7f:16:7a:97:56:
         78:c4:88:e5:92:b3:42:28:eb:79:2e:30:4a:ef:71:a9:d7:c6:
         d1:60:04:cb:33:80:f4:ba:a2:65:2a:be:47:50:59:00:d6:04:
         eb:ad:19:34:92:f0:90:dd:2f:46:d3:1d:53:12:c5:ce:22:3d:
         0d:11:c6:28:ad:8a:23:dc:99:67:f5:6f:37:df:7c:48:4e:f1:
         bc:39:35:2f:b8:9a:c8:ba:cf:7d:90:64:d7:8e:93:77:ce:79:
         3d:a6:30:2a:7d:8b:b2:79:fa:0a:10:c8:51:fb:df:90:b7:68:
         ce:0d:1d:05:a4:80:9f:7a:67:e7:72:e8:bf:0d:31:b0:c6:8f:
         3a:6e:d2:d6:89:0f:34:2a:51:b8:9b:a9:d1:b7:1c:aa:1e:a0:
         f1:ab:7c:ea:06:22:3b:73:ae:d0:70:65:04:06:be:46:1d:fb:
         67:c6:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org