Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File:                     Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier:          RLwiLWE4DYh63G6bT4hU7HjBA+7M5o37K6Y9ZlwvQuA=
Subject key identifier:   51:FB:A8:3D:56:07:19:6D:96:02:E0:59:BD:6E:C6:A3:A7:22:A5:5A
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer:       /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial:       109E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number:          103C
Signing time:             Fri 22 Nov 2024 17:23:14 +0000
Manifest this update:     Fri 22 Nov 2024 17:23:14 +0000
Manifest next update:     Fri 29 Nov 2024 17:23:14 +0000
Files and hashes:         1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: JmMWlfAyxGstZ4m/QZQl8plFrWM4lqElVdzIZTCxEoQ=)
                          2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 6F8MZepb4YKIzRX/VIlir5UqD3bAL/MGaiUqh38H4VM=)
                          3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: pa1Fyj4rJ9wsQhHKUYwleZnXaMszFSBEcPoalFBKpsk=)
                          4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: pFWyJjF088oOGw4nNl0g4YWTqxbuE3QpkV5M07utSjo=)
                          5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: nCG2ItoYRYsNw2ltluT/NhcDchTRJwPgu00JBArVHNU=)
                          6: 52685F222E9111E999636910C4F9AE02.roa (hash: syk5eLA6QE1f9vtOv8vWj023d03Vzooyr78RlQmdrWU=)
                          7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: bboRKjRgAmNIyMUD8F0R6YlK8KxKhJJ94gWMf5xkK7c=)
                          8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: qkUQDs49KFim2MLHAjsJwTxoBoVgmCtXt1u3Zkv+Xtw=)
                          9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: qlkxrtDkdB7rHBdwPP73Uk43WLSuezxmGhVTKZPNFac=)
                          10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: uqBg3EfYSkP8xrpkIoXRk79rOz8VHiKa+sc7sMHbX+4=)
                          11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: 7HqOnLpZm+A/vwRmSQHLC5scxprHPl3diogTB/9e/W0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
                          rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4254 (0x109e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
        Validity
            Not Before: Nov 22 17:23:14 2024 GMT
            Not After : Nov 29 17:23:14 2024 GMT
        Subject: CN=6740be02-57f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:2e:6d:d2:b6:c6:ab:13:77:75:7c:ab:e9:
                    15:85:b1:d3:a8:7b:a7:39:3c:8a:46:ec:be:ba:40:
                    65:af:99:88:e7:a9:b1:18:df:71:83:39:5f:4c:cd:
                    a6:92:8b:af:56:3b:52:07:96:60:ea:d4:10:47:77:
                    59:3c:c9:20:e6:7d:a1:46:eb:d3:08:71:d0:7d:27:
                    e4:78:31:bb:ed:02:06:d4:d4:2a:62:8f:bc:71:7b:
                    3c:10:85:2c:f1:0a:ce:68:03:e3:14:ef:8e:e0:48:
                    c5:c7:7c:fa:07:d8:45:f5:d4:cd:52:9d:d8:43:e4:
                    12:60:1a:c8:73:e4:21:51:7c:5a:66:27:be:cf:40:
                    b3:32:46:68:0e:49:a7:ef:ee:26:59:d1:18:f2:e7:
                    9d:4b:9a:21:83:f6:ed:95:c4:7f:3e:a2:1a:d0:cb:
                    c8:0b:11:44:c3:e6:1f:bc:93:e4:63:36:72:46:5e:
                    f5:3b:01:a8:c5:07:0c:bc:8b:87:a8:34:c8:a0:e5:
                    63:eb:da:bc:14:ec:c3:4e:4a:66:ff:3c:90:ec:bc:
                    56:08:05:49:cd:f8:f7:c4:b9:d1:56:91:3f:78:59:
                    be:3e:cc:ab:78:86:22:d5:a7:d0:27:60:fd:16:f4:
                    17:27:c4:62:85:95:ae:24:6a:00:de:65:4c:62:92:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FB:A8:3D:56:07:19:6D:96:02:E0:59:BD:6E:C6:A3:A7:22:A5:5A
            X509v3 Authority Key Identifier:
                keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:fd:be:ba:18:24:7f:00:0c:cc:71:95:4c:03:0b:67:91:
         c0:c5:74:39:ec:ba:2f:fb:12:d8:da:ff:cb:bf:4b:bc:0a:cf:
         d6:d4:85:20:94:a3:4f:1a:c0:b6:ee:80:04:7c:f2:8f:4d:ba:
         92:c3:0e:98:70:c8:6a:31:4e:4f:df:1e:c2:da:e3:ef:4c:17:
         e3:55:19:3e:17:26:82:b3:8e:87:11:db:45:9a:b2:c4:9d:fc:
         aa:82:fc:0a:4a:0d:d3:83:d5:e7:ff:40:4e:01:b0:4a:c4:71:
         43:8d:55:7a:b8:89:d0:c9:6d:72:50:82:a3:a9:9b:98:06:e6:
         52:8a:4f:f4:1a:4e:80:71:d1:12:62:a1:e1:d7:a2:07:3a:6b:
         be:69:6d:61:49:a8:b8:de:da:aa:6f:e5:eb:e5:96:ba:0b:21:
         c1:88:a9:7e:79:0a:6a:fc:36:09:48:b3:ce:6e:76:7b:37:d0:
         2b:2a:8c:39:64:b8:4f:61:16:7d:4f:f0:53:06:f9:35:80:d3:
         34:47:0d:d7:ba:e0:27:f3:11:cd:32:76:26:bc:6e:d1:8e:2c:
         3c:7e:59:b5:ac:3c:b5:74:31:14:5d:bc:89:01:f7:61:26:33:
         09:8e:8a:a1:68:50:f3:ea:6f:e5:ab:1b:c4:7c:d2:b1:22:3b:
         dd:65:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org