Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File:                     u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier:          6bjnzFFowqlW1vYzHkTjjBFSep+d9zUr6xiDhGxsJ5o=
Subject key identifier:   01:9E:E2:12:01:70:3A:56:BA:17:0F:B0:28:EE:43:61:52:D0:AC:91
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0BB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number:          0BAD
Signing time:             Fri 22 Nov 2024 18:39:28 +0000
Manifest this update:     Fri 22 Nov 2024 18:39:27 +0000
Manifest next update:     Fri 29 Nov 2024 18:39:27 +0000
Files and hashes:         1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: KFcnq3IGtzAD3SkTrBeMM2E6G829morkVBxoD9wPpIY=)
                          2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: fVpTiz95zT96q52Sv8C+QJmIZKHHi2b0N2xlEcRtgMo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Nov 22 18:39:27 2024 GMT
            Not After : Nov 29 18:39:27 2024 GMT
        Subject: CN=6740cfdf-d050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2e:8a:d4:2d:52:e7:a5:88:a6:d2:a9:88:27:
                    18:18:30:ba:63:c8:79:26:6f:2b:9b:a6:bb:88:6f:
                    93:31:8b:f3:ed:5d:67:ea:12:db:f1:1c:b3:5c:80:
                    ec:06:88:e9:63:d2:b1:b1:bd:5c:b2:1f:7b:9a:c6:
                    59:75:df:92:09:0c:ee:a3:81:c6:a3:d9:15:7d:2a:
                    16:32:62:19:d7:ac:65:2a:61:38:e1:bf:e3:8e:ea:
                    03:bf:ad:d2:d5:5d:f8:c4:1b:5f:84:50:f5:f2:15:
                    f4:be:7a:4c:ca:55:05:4f:62:c9:2b:e0:33:1d:8e:
                    08:49:de:b7:34:8e:29:92:1e:14:2f:e8:9b:74:a4:
                    af:8a:1e:ac:13:50:63:c0:b1:19:06:f7:67:5d:ba:
                    08:22:47:bf:8a:3a:be:d7:e5:4a:99:73:f7:4e:6d:
                    0f:16:de:70:db:1c:e7:db:e1:2a:0e:ea:0b:cc:ee:
                    57:9f:aa:c6:9f:e2:a1:22:b3:fc:1a:2d:2f:c5:b4:
                    fc:d2:46:81:3a:f3:20:96:92:ec:31:61:ed:d8:f7:
                    58:31:59:5c:71:c4:0d:eb:de:74:ea:01:30:76:07:
                    60:fe:a0:7b:8e:f4:55:dc:55:8e:7b:e9:c3:67:f4:
                    7b:88:c7:29:70:e2:f1:5d:55:d9:76:71:52:58:11:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9E:E2:12:01:70:3A:56:BA:17:0F:B0:28:EE:43:61:52:D0:AC:91
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:b4:6f:64:ca:2d:81:9e:e6:eb:ee:aa:4c:44:5c:41:32:
         50:da:02:c2:8c:db:7b:5e:8f:24:1a:06:4d:94:02:56:e2:bd:
         84:25:00:58:c7:06:89:05:e5:ef:c9:5a:92:3e:aa:60:09:99:
         a5:e3:6c:d4:df:6f:f9:dd:17:7d:8d:13:0e:68:bd:d8:c3:1f:
         6c:fd:d0:b4:e9:88:60:d7:74:4c:16:c7:8a:1c:37:3e:39:dc:
         9e:8b:7a:dc:58:5c:36:6f:e5:32:64:8b:ff:01:92:47:a2:1e:
         31:fb:bc:8d:19:51:9f:2f:ee:3b:eb:8f:02:56:3d:a2:9d:a2:
         03:83:ef:17:24:38:a5:69:a3:a9:3c:2f:58:a0:86:8e:1b:f5:
         f2:30:47:b6:d0:a4:3c:30:50:e1:8a:5a:c5:5b:32:d5:f6:f2:
         f8:96:3c:1d:05:90:02:c5:2c:12:20:e5:15:91:d9:12:70:8a:
         32:d7:58:b9:af:47:c5:53:f6:ac:cc:ed:3f:81:1e:38:2f:41:
         6d:8f:53:e7:9e:f3:16:0b:96:8e:ab:56:5f:1d:56:3b:9c:23:
         2a:1f:22:c2:70:6d:36:c6:b1:34:3d:b8:14:68:fa:23:69:08:
         22:1e:6d:8a:89:56:46:b4:74:77:ba:7d:86:52:31:c8:7c:63:
         95:56:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org