Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          g43SJmG288ewXg1Khnv4xZLAgbUGNfGgWj9B610V8CY=
Subject key identifier:   2B:34:C8:74:45:D0:FA:3F:69:A3:57:5A:8E:77:92:14:C6:EE:F3:4E
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0A49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0A37
Signing time:             Fri 22 Nov 2024 19:32:16 +0000
Manifest this update:     Fri 22 Nov 2024 19:32:16 +0000
Manifest next update:     Fri 29 Nov 2024 19:32:16 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: NQSoAfHXMhZrgtnx6DhOswJMMVUbsGsZhdSWvE/qLB0=)
                          2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: WUQ9oV5ylba1WYvMvi8YcfDIyI4Ea0WkGe2gC4D2+pc=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: L9FXc866DgpJUjP8X+4KuPnyfrF1JFS1NUYDRCmwLNQ=)
                          4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: WzZq3RkznJMH5nxTQuLLQSDrsNKq3jGJzyKHb8w1naI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Nov 22 19:32:16 2024 GMT
            Not After : Nov 29 19:32:16 2024 GMT
        Subject: CN=6740dc40-e581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:4b:05:b8:af:d5:73:bd:59:fb:6f:fd:4e:
                    d4:45:c9:55:ab:03:cd:d3:9b:9f:fd:2e:4a:63:73:
                    45:0d:d3:f5:5d:4d:53:e8:03:23:c5:65:a1:6e:e3:
                    bc:b1:cd:be:57:aa:5d:62:87:d6:3e:cb:63:62:7a:
                    2e:35:69:24:60:8c:ec:94:04:b5:1a:cf:a3:fc:30:
                    c0:d0:88:ca:95:5f:dc:cc:e1:68:12:9b:bf:8d:44:
                    51:19:9d:ed:12:63:49:b1:b1:96:c0:88:01:6d:45:
                    6e:93:1f:9a:16:01:e9:7b:e0:e0:51:bf:dc:46:da:
                    9d:49:d3:be:8e:31:45:ac:6e:22:35:77:8b:79:88:
                    9c:4b:bd:e0:42:37:b6:48:3a:25:97:d1:f6:4d:c4:
                    55:3e:51:b9:3b:aa:16:83:69:8e:49:59:61:28:3a:
                    1a:29:ca:0e:73:22:79:07:6a:d2:39:5a:d3:db:1c:
                    08:ab:be:1a:40:fb:28:65:6c:80:d2:3c:77:65:de:
                    b0:2b:f6:52:81:a3:4c:ce:46:da:06:85:f8:48:e6:
                    a1:6b:c5:89:0f:9a:cd:ed:37:54:50:87:51:0b:97:
                    67:63:7a:12:eb:56:ab:99:c1:cd:f2:82:4b:bb:30:
                    aa:d9:50:7d:8b:c7:28:30:b2:b3:1a:b4:a8:5a:c9:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:C8:74:45:D0:FA:3F:69:A3:57:5A:8E:77:92:14:C6:EE:F3:4E
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:7d:7e:9f:30:16:37:e0:37:1b:13:b9:8b:9d:44:fd:6f:
         17:3b:61:17:4b:ea:1a:72:30:67:e2:d7:bb:3d:b6:e6:fe:81:
         ce:a8:f5:95:27:25:be:b6:13:74:7b:12:d9:8e:a6:6f:3f:35:
         fa:80:80:60:09:dc:6f:92:24:c7:49:9a:50:1d:83:8c:7a:a4:
         39:31:5a:56:0e:a9:56:6b:34:64:e5:1a:15:14:f8:ac:40:e2:
         6e:2e:85:65:65:79:a4:11:31:2b:9e:82:db:47:aa:3c:05:4b:
         eb:22:cf:59:70:b0:80:45:30:a2:6c:56:6b:4d:34:86:48:1d:
         61:f7:b9:64:da:f3:da:e0:0f:ff:41:15:22:4a:b1:25:ee:56:
         a5:48:8b:99:84:da:ae:1c:e9:82:9f:77:89:d3:35:f4:07:9b:
         13:55:a0:90:75:d7:83:ef:21:94:a9:e5:de:89:27:30:3f:28:
         de:73:5e:ec:46:43:87:95:15:66:13:b4:2b:98:8b:23:46:b4:
         96:ae:05:36:67:44:23:84:88:df:c5:4f:1e:c3:12:59:33:68:
         83:85:3a:e1:7e:c9:ce:36:77:1c:c4:5a:af:94:3d:e8:57:29:
         18:88:bc:d3:77:ff:27:0e:bb:51:8a:82:a5:a0:95:f5:7a:2f:
         e6:b0:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org