Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
File:                     k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json)
Hash identifier:          4hEXDATlZPnQr8+9eecyFEXiuvEWwJIEUD3/HEQiwho=
Subject key identifier:   59:FE:2E:31:F1:8A:1A:3E:9A:C2:65:8C:5C:6F:88:11:DE:D5:A7:1B
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
Manifest number:          0B58
Signing time:             Mon 06 May 2024 19:44:53 +0000
Manifest this update:     Mon 06 May 2024 19:44:52 +0000
Manifest next update:     Mon 13 May 2024 19:44:52 +0000
Files and hashes:         1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: eylzBiJE+XBJVdK/EQiMsrYVHx9ncuo/ZDxypf0VC7Y=)
                          2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: gZdNP+RE7k8BhJfs16xou13p3ORyQ6GDTOx2roYBxjc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 19:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: May  6 19:44:52 2024 GMT
            Not After : May 13 19:44:52 2024 GMT
        Subject: CN=66393335-e8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:1e:4d:38:a2:4f:df:60:8a:e9:5b:af:f6:
                    27:86:0b:28:d3:52:31:15:75:f4:65:5f:bc:58:20:
                    8c:e3:00:c2:5d:61:4b:af:5d:5b:3a:5e:bc:2f:4b:
                    52:55:f7:8a:33:5c:7d:48:c8:a0:9c:10:20:81:6f:
                    52:b6:49:65:e3:df:73:88:ba:47:d2:35:42:e9:d6:
                    f2:f2:db:ac:8a:3c:92:6d:62:b1:b2:d6:63:4a:32:
                    69:e8:b1:d4:d0:4d:0b:a1:8e:bd:a7:de:ea:ba:29:
                    3f:9c:e4:d5:d7:1d:e0:1a:2f:10:ad:80:09:96:6e:
                    94:f8:61:ad:9b:52:ee:76:1d:c8:c7:96:fc:f6:30:
                    be:c2:21:ca:f9:8b:40:1c:ab:f9:dc:78:60:46:54:
                    66:c8:07:f2:13:cd:0a:a4:36:00:81:9a:28:bc:5e:
                    c2:5d:03:f4:fe:d4:3d:29:70:aa:46:b1:29:49:74:
                    78:0a:b3:d0:4c:2f:43:71:c9:33:bc:b0:f0:57:2b:
                    62:9b:a6:ea:76:dc:f0:ee:ee:8c:85:63:78:e9:68:
                    fb:9f:5e:56:0c:4f:37:a7:1d:99:69:7d:96:d2:13:
                    13:a2:87:73:12:a8:17:ea:14:e9:5e:0c:6d:29:ff:
                    b8:70:4d:9d:4c:a4:cc:88:55:a0:c6:d7:30:0a:3d:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:2E:31:F1:8A:1A:3E:9A:C2:65:8C:5C:6F:88:11:DE:D5:A7:1B
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:f0:16:58:ae:91:4c:1f:68:d3:07:89:18:5b:1b:5f:61:
         26:28:52:35:11:5b:ad:34:33:86:88:ee:4f:ad:2b:9c:36:fd:
         1b:81:72:ff:d1:fc:cc:f6:55:18:22:30:d3:53:d0:cc:39:e6:
         1f:0e:1b:02:cb:df:39:d0:66:a2:a4:b6:51:cc:ad:36:a2:d8:
         30:4f:32:62:ae:e6:2e:00:a6:71:95:32:ce:c6:f5:d2:06:ea:
         ed:9e:f9:84:ff:66:7e:42:87:71:7a:ea:d8:eb:8f:29:02:92:
         1f:5e:f3:33:0c:ca:ec:0a:6d:d5:a6:a7:ab:ba:5c:d9:6e:3e:
         1c:35:40:49:ad:32:2b:5c:ca:9d:64:63:18:af:a6:99:75:5b:
         79:6f:00:9e:ec:3c:40:e8:84:d1:80:f5:bb:22:4c:cb:16:2d:
         82:5d:e7:d3:11:a7:ae:dd:11:2d:b5:37:f0:9a:7f:cd:19:42:
         f8:37:5e:c2:c1:f7:50:cf:14:fa:20:07:ba:1f:74:37:54:4e:
         3c:30:76:10:4a:ba:b3:1c:74:91:88:80:76:a3:c9:10:5c:c8:
         a7:f8:35:dd:12:3a:f2:39:6d:0c:f0:d3:ef:39:41:bf:c8:b5:
         2e:3a:9d:00:8c:bc:c2:1e:b2:5e:2e:a0:c7:67:bc:a5:11:ac:
         82:44:9e:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxM0ExMTAvBgNVBAUTKDkzQTRDOTZENjI5ODE2OUFFMDU1RDRFQTI2NjgyQjEw
NzJGQjk1MDIwHhcNMjQwNTA2MTk0NDUyWhcNMjQwNTEzMTk0NDUyWjAYMRYwFAYD
VQQDEw02NjM5MzMzNS1lOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVgeTTiiT99giulbr/Ynhgso01IxFXX0ZV+8WCCM4wDCXWFLr11bOl68L0tS
VfeKM1x9SMignBAggW9Stkll499ziLpH0jVC6dby8tusijySbWKxstZjSjJp6LHU
0E0LoY69p97quik/nOTV1x3gGi8QrYAJlm6U+GGtm1Ludh3Ix5b89jC+wiHK+YtA
HKv53HhgRlRmyAfyE80KpDYAgZoovF7CXQP0/tQ9KXCqRrEpSXR4CrPQTC9Dcckz
vLDwVytim6bqdtzw7u6MhWN46Wj7n15WDE83px2ZaX2W0hMToodzEqgX6hTpXgxt
Kf+4cE2dTKTMiFWgxtcwCj3bdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn+LjHx
iho+msJljFxviBHe1acbMB8GA1UdIwQYMBaAFJOkyW1imBaa4FXU6iZoKxBy+5UC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzQS9GM0U0RDJDRTBD
MUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZwcmdWZFRxSm1nckVITDds
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s2VEpiV0tZRnByZ1ZkVHFKbWdyRUhMN2xRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjEzQS9GM0U0RDJDRTBDMUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZw
cmdWZFRxSm1nckVITDdsUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoufAWWK6RTB9o0weJGFsbX2EmKFI1EVutNDOGiO5PrSucNv0bgXL/
0fzM9lUYIjDTU9DMOeYfDhsCy9850GaipLZRzK02otgwTzJiruYuAKZxlTLOxvXS
BurtnvmE/2Z+QodxeurY648pApIfXvMzDMrsCm3VpqerulzZbj4cNUBJrTIrXMqd
ZGMYr6aZdVt5bwCe7DxA6ITRgPW7IkzLFi2CXefTEaeu3REttTfwmn/NGUL4N17C
wfdQzxT6IAe6H3Q3VE48MHYQSrqzHHSRiIB2o8kQXMin+DXdEjryOW0M8NPvOUG/
yLUuOp0AjLzCHrJeLqDHZ7ylEayCRJ53
-----END CERTIFICATE-----
Generated at Mon May 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org