Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File:                     TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier:          K8hTQJ3yfvNpQ7yn5WjIYfTG83ACjPcCRav1ZDor0CE=
Subject key identifier:   BB:11:69:04:C4:04:64:49:74:D4:28:B5:00:8E:60:85:C0:80:D7:B8
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer:       /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number:          06
Signing time:             Sun 24 Nov 2024 08:32:56 +0000
Manifest this update:     Sun 24 Nov 2024 08:32:56 +0000
Manifest next update:     Sun 01 Dec 2024 08:32:56 +0000
Files and hashes:         1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: kzcsGa44I0B/zKkafabulp0pci3snqu/Huxl4TzTXcI=)
                          2: B2117FB0AA3E11EF87579E32C4F9AE02.roa (hash: 7kF38BKL9V3cym2zycV86CcHLcc8wmCLtlkW2XVaQq8=)
                          3: A91F7E90A44711EF9769564FC4F9AE02.roa (hash: cub1I8YYKhHobRxvV7zxolcchqnJ/A+uJu9AWQbVCq0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
        Validity
            Not Before: Nov 24 08:32:56 2024 GMT
            Not After : Dec  1 08:32:56 2024 GMT
        Subject: CN=6742e4b8-c569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:d5:fd:6a:18:ac:90:bc:9e:6e:4b:80:62:
                    55:cc:9b:97:9f:9c:bb:ef:70:a6:0e:d5:44:a5:da:
                    c6:78:cf:43:f2:3d:0b:3f:03:c3:ed:b1:90:bb:bf:
                    49:fe:c5:77:0c:2c:b7:53:b8:47:43:88:6d:0b:98:
                    4c:1c:93:77:e8:f9:5a:ad:0f:f1:a7:db:86:36:c1:
                    d5:19:1c:fe:2d:6d:c3:83:84:f6:4a:23:11:e8:a3:
                    aa:87:59:bf:9e:68:58:ac:cb:ea:04:ec:53:c6:2c:
                    f6:d6:bf:89:99:3a:40:6e:f4:e2:4c:b5:38:a5:86:
                    84:47:c3:26:f1:6e:14:8f:62:a6:9c:0e:dd:7a:2c:
                    2b:30:c5:41:d1:f3:2d:d3:6f:7b:aa:af:7d:b7:98:
                    c8:da:b9:d9:1a:e2:19:3f:58:cf:93:4d:bc:f5:08:
                    c1:e1:9e:2d:2f:0f:fe:32:1f:cf:8c:ab:c6:74:6c:
                    a8:8c:5e:9d:ac:e0:be:34:9e:ad:3c:b1:67:0c:31:
                    1a:e6:3d:85:8c:ed:94:f8:99:6f:88:e8:3e:2d:75:
                    01:dc:70:00:4e:55:16:9b:e7:c0:f3:c0:17:6b:4b:
                    4a:83:ae:fc:6c:fc:af:9d:f6:91:61:99:a2:71:b4:
                    04:90:57:ea:2d:ee:63:55:90:01:32:49:73:65:61:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:11:69:04:C4:04:64:49:74:D4:28:B5:00:8E:60:85:C0:80:D7:B8
            X509v3 Authority Key Identifier:
                keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c4:5a:0c:1d:a8:fd:6d:d4:a4:64:03:a0:9e:89:45:a4:aa:
         86:38:7a:1f:5f:a2:3f:f8:84:8c:2a:2c:11:1a:51:72:21:91:
         9f:d1:1b:2f:73:d5:55:45:c3:53:69:36:63:df:35:e5:54:6b:
         d0:50:b5:17:ea:16:50:7b:b8:b9:f7:0f:0f:03:66:a4:de:e1:
         b4:2e:d9:cf:16:15:40:c3:fe:88:f4:b7:75:13:99:b6:10:ec:
         1f:7d:92:57:2a:0b:48:50:14:3f:58:14:9e:82:3d:a4:2b:14:
         74:de:6e:fc:00:b3:d5:cb:6c:21:23:72:f5:55:82:43:e9:97:
         b8:34:f1:75:c5:64:7b:df:18:de:ee:2d:71:22:a1:db:6b:6a:
         0d:37:ca:30:c3:b7:8e:d7:aa:81:1c:98:fa:96:d6:05:cf:07:
         d5:94:40:47:13:f3:5c:b8:bf:0e:58:b0:7d:01:17:81:f7:4d:
         58:ff:dc:8f:a7:c6:52:46:f9:bd:a1:e8:37:03:4d:b3:62:79:
         ac:a1:77:ed:15:59:dd:25:de:c7:76:8f:6c:c7:cb:ab:70:77:
         09:0a:87:f5:56:bf:90:ae:39:66:4a:d2:e3:4c:56:52:02:b0:
         f7:fd:f1:1f:4d:17:db:cd:d0:3c:33:a6:35:bb:c6:47:cb:9e:
         a2:6e:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:09:21 2024 by rpki-client on console-fra.rpki-client.org