Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
File:                     6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json)
Hash identifier:          /AMiP9xcumli+0zAcepZAuIfj3Du03wjO6pLIGuZDF0=
Subject key identifier:   3C:0D:13:15:66:61:F6:70:4B:B4:90:CA:A9:1C:D6:5A:56:EF:FC:A8
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Certificate issuer:       /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial:       1851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
Manifest number:          1843
Signing time:             Fri 22 Nov 2024 16:31:00 +0000
Manifest this update:     Fri 22 Nov 2024 16:31:00 +0000
Manifest next update:     Fri 29 Nov 2024 16:31:00 +0000
Files and hashes:         1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: jcr+IYdZJ16APG9MhzojCg+iff4GsgkEV7EbV+J6IpE=)
                          2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: aB/oE2OnnyN0W6HaDv8npp8QZbqOPeG0ULRgF9RjBlg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
                          rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6225 (0x1851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
        Validity
            Not Before: Nov 22 16:31:00 2024 GMT
            Not After : Nov 29 16:31:00 2024 GMT
        Subject: CN=6740b1c4-f6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:61:b7:52:9b:c2:ea:f7:73:00:30:0b:70:25:
                    65:7d:a0:60:f7:30:3c:48:ea:3b:b9:6d:a1:4a:8a:
                    90:2b:84:f4:b1:10:58:22:a0:f8:9c:06:79:e7:d4:
                    70:0c:78:68:89:60:b8:59:68:b9:64:cd:5c:30:1d:
                    c6:6e:55:7a:88:e7:db:ea:36:32:60:8a:46:fe:66:
                    b3:6d:6c:e2:26:67:a5:8d:bf:00:bb:2a:0f:fa:98:
                    d7:9a:b9:4a:98:c7:b7:ac:a8:25:fc:cd:fc:ce:ff:
                    c5:2e:74:6a:18:19:43:f3:7f:c1:09:d5:fd:ee:82:
                    81:cb:9a:d0:f2:28:44:9d:f1:6a:b4:83:32:94:42:
                    47:e6:04:ff:18:32:b5:c8:94:25:a8:02:0d:fd:3f:
                    a1:c4:2c:64:a6:a6:9c:df:04:9f:f5:16:18:d7:80:
                    8f:0d:3b:41:99:a9:30:8c:a5:6a:56:ff:3a:65:94:
                    21:c7:8c:a1:c2:05:b0:dc:f0:ac:1d:5b:aa:32:12:
                    91:cd:71:1d:94:bf:39:0d:8a:a8:19:de:f7:ce:e0:
                    67:4c:e5:d2:f5:d5:13:56:00:86:90:49:1b:9f:20:
                    cb:43:34:34:fa:af:e4:27:8c:69:f3:3a:5f:a7:6f:
                    47:db:65:df:40:5d:1e:06:bd:37:71:33:1d:be:a8:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:13:15:66:61:F6:70:4B:B4:90:CA:A9:1C:D6:5A:56:EF:FC:A8
            X509v3 Authority Key Identifier:
                keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f7:92:5a:da:0e:f9:26:38:36:02:ac:11:45:4e:ff:55:0c:
         66:13:0b:8d:01:50:4d:34:6b:0e:44:4e:95:12:7f:79:55:ca:
         6e:66:12:6d:ad:3d:fb:38:58:30:24:c6:41:c2:11:4f:4b:c1:
         e6:0b:d8:4f:9a:a0:95:28:da:c0:b8:fe:96:dc:2e:bc:ab:53:
         78:71:04:3f:50:af:7d:d5:1f:a1:38:ee:c1:de:6a:fc:44:46:
         a3:11:35:1e:b5:93:b2:1d:c4:41:48:dd:5a:4d:01:9c:a4:c1:
         22:e5:5c:13:bf:d2:16:af:03:dd:8d:47:90:43:d5:28:64:79:
         c7:d4:ff:52:b9:50:33:9a:38:f9:c1:52:c8:5a:10:f9:08:04:
         96:93:21:42:1e:1e:5a:9e:2b:f8:6d:30:a0:fa:36:86:3a:b1:
         2f:9d:23:86:79:eb:9f:6c:b6:d9:7f:89:25:65:f8:be:d4:dc:
         8b:77:58:1f:37:53:d8:39:14:43:bb:a5:9f:fd:b8:43:e9:ce:
         3a:fc:24:77:d5:8d:f6:55:8d:41:16:5f:7b:d4:97:14:9e:ad:
         ad:e2:d8:e6:70:08:e7:0a:35:16:f3:bc:e7:78:b1:12:10:29:
         fb:c5:7b:fd:ff:88:0e:63:dd:f6:3a:76:46:f4:b5:a4:46:85:
         7f:08:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org