Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
File:                     C6dUacYtJZIFuou2XbmdAze6130.mft (raw, json)
Hash identifier:          +HCCYjBN8t6HmU9Gg+cmxtyvcgNhkRmSQJVA4RuOzvQ=
Subject key identifier:   C4:BF:BA:3A:76:94:4E:C2:C1:57:8C:9F:01:6F:57:11:46:8A:C5:CF
Authority key identifier: 0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
Certificate issuer:       /CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Certificate serial:       0D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
Manifest number:          0D8A
Signing time:             Fri 22 Nov 2024 17:53:44 +0000
Manifest this update:     Fri 22 Nov 2024 17:53:43 +0000
Manifest next update:     Fri 29 Nov 2024 17:53:43 +0000
Files and hashes:         1: C6dUacYtJZIFuou2XbmdAze6130.crl (hash: 5WX/HXrK9x17l11M4jCNYNxdsru2gAbWOwpRQClC7Sg=)
                          2: ACE45EC4C5AE11E998CC136CC4F9AE02.roa (hash: Kzik/mEOxMnkFUJ+qgd/pL/HBPAnoQURi3fpQC5rQoQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
                          rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
        Validity
            Not Before: Nov 22 17:53:43 2024 GMT
            Not After : Nov 29 17:53:43 2024 GMT
        Subject: CN=6740c527-8638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:e4:59:67:d6:60:83:19:97:07:61:30:27:
                    1b:88:66:db:2e:10:9e:c5:46:1c:76:ae:55:5f:f0:
                    fc:f8:43:01:03:23:c1:43:fe:b4:27:b5:84:59:8b:
                    2d:64:86:fc:df:00:4b:29:29:03:29:f2:f4:04:f0:
                    15:93:c4:89:7d:5d:29:96:21:19:c8:2a:b2:d6:06:
                    55:83:b2:70:43:b9:3a:05:1a:31:46:e5:d2:fc:5f:
                    f1:b3:75:59:a9:89:b8:27:a2:8b:16:d3:ea:4b:bd:
                    f4:0d:6b:38:b7:9c:c1:47:66:eb:43:bf:f4:b8:39:
                    37:59:3b:cc:c9:5f:54:02:fd:78:3a:49:37:73:4c:
                    ad:55:63:dc:73:33:49:5d:b5:1a:1d:31:6a:78:52:
                    c1:58:bb:50:b9:bd:cf:71:11:cf:6d:2a:18:c2:40:
                    84:1a:f0:51:09:73:e7:af:67:dc:80:d8:e9:ec:bc:
                    e2:24:91:68:aa:c0:1b:38:41:75:04:b0:fb:64:cc:
                    08:83:f0:49:39:49:d1:ae:62:0a:87:95:b5:69:a2:
                    46:67:db:8b:b7:92:62:09:58:36:c3:6d:51:bb:fc:
                    da:9c:95:0c:3a:39:f9:68:db:79:60:be:ed:be:bc:
                    02:26:7c:ec:2f:71:5c:53:e2:9e:64:cd:05:dd:2b:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:BA:3A:76:94:4E:C2:C1:57:8C:9F:01:6F:57:11:46:8A:C5:CF
            X509v3 Authority Key Identifier:
                keyid:0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:75:71:be:0d:65:95:ee:a2:65:80:21:83:41:f2:80:16:6f:
         b0:ad:9f:d6:6e:49:4b:9c:15:4c:1c:2c:c1:f0:78:05:47:e0:
         2c:ca:5b:21:85:97:38:a0:c9:f7:54:3f:f0:8c:27:68:1b:e7:
         41:9e:80:ce:f7:89:f6:bf:5c:51:15:e0:33:20:aa:5f:85:35:
         af:e0:65:2e:83:50:32:b6:d8:03:8f:e4:60:9d:94:e3:e2:57:
         62:c2:aa:0c:e8:e2:3c:de:53:33:53:5e:67:46:6e:7c:88:4c:
         9d:ef:37:97:00:30:7e:af:5c:2a:37:ad:74:de:0d:db:4a:a1:
         cb:66:cb:d9:32:e7:c3:bb:23:76:fd:48:26:de:a8:8f:bd:14:
         fc:96:0d:f2:da:3d:4b:3a:b1:af:84:fb:86:a7:bd:e5:da:52:
         90:a4:7c:83:4f:94:75:1f:77:47:0b:d0:31:b3:1a:0c:69:d2:
         38:72:9c:c1:2e:d2:c3:3e:31:fd:25:8c:14:45:2d:36:d7:d8:
         dc:dd:31:cb:1d:16:43:80:b0:60:e6:64:b3:aa:78:f5:e9:8b:
         7f:66:66:29:86:54:b5:77:41:1d:46:b4:4d:98:30:38:82:ee:
         71:2e:31:09:b1:09:de:6f:6a:84:0e:af:84:5e:59:6b:33:be:
         f9:e2:2a:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM1MzIxMTAvBgNVBAUTKDBCQTc1NDY5QzYyRDI1OTIwNUJBOEJCNjVEQjk5RDAz
MzdCQUQ3N0QwHhcNMjQxMTIyMTc1MzQzWhcNMjQxMTI5MTc1MzQzWjAYMRYwFAYD
VQQDEw02NzQwYzUyNy04NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlPkWWfWYIMZlwdhMCcbiGbbLhCexUYcdq5VX/D8+EMBAyPBQ/60J7WEWYst
ZIb83wBLKSkDKfL0BPAVk8SJfV0pliEZyCqy1gZVg7JwQ7k6BRoxRuXS/F/xs3VZ
qYm4J6KLFtPqS730DWs4t5zBR2brQ7/0uDk3WTvMyV9UAv14Okk3c0ytVWPcczNJ
XbUaHTFqeFLBWLtQub3PcRHPbSoYwkCEGvBRCXPnr2fcgNjp7LziJJFoqsAbOEF1
BLD7ZMwIg/BJOUnRrmIKh5W1aaJGZ9uLt5JiCVg2w21Ru/zanJUMOjn5aNt5YL7t
vrwCJnzsL3FcU+KeZM0F3SseAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS/ujp2
lE7CwVeMnwFvVxFGisXPMB8GA1UdIwQYMBaAFAunVGnGLSWSBbqLtl25nQM3utd9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzUzMi9CNDJCN0QyMkIy
MTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpaSUZ1b3UyWGJtZEF6ZTYx
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2ZFVhY1l0SlpJRnVvdTJYYm1kQXplNjEzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzUzMi9CNDJCN0QyMkIyMTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpa
SUZ1b3UyWGJtZEF6ZTYxMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApdXG+DWWV7qJlgCGDQfKAFm+wrZ/WbklLnBVMHCzB8HgFR+Asylsh
hZc4oMn3VD/wjCdoG+dBnoDO94n2v1xRFeAzIKpfhTWv4GUug1AyttgDj+RgnZTj
4ldiwqoM6OI83lMzU15nRm58iEyd7zeXADB+r1wqN6103g3bSqHLZsvZMufDuyN2
/Ugm3qiPvRT8lg3y2j1LOrGvhPuGp73l2lKQpHyDT5R1H3dHC9AxsxoMadI4cpzB
LtLDPjH9JYwURS0219jc3THLHRZDgLBg5mSzqnj16Yt/ZmYphlS1d0EdRrRNmDA4
gu5xLjEJsQneb2qEDq+EXllrM7754ioW
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org