Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File:                     Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier:          5P0H1E2AA9QF3X4mK41cys9Eigywjnyd2eopGvNhnsw=
Subject key identifier:   6A:B2:C9:17:54:E4:84:D0:ED:D7:6F:4A:90:4C:CC:BF:79:5E:55:EC
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number:          6F
Signing time:             Sat 23 Nov 2024 04:55:26 +0000
Manifest this update:     Sat 23 Nov 2024 04:55:25 +0000
Manifest next update:     Sat 30 Nov 2024 04:55:25 +0000
Files and hashes:         1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: 8iydsZ7uKWiKUYks/QM4iArmJ3W993GrPdGmk640v7k=)
                          2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=)
                          3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Nov 23 04:55:25 2024 GMT
            Not After : Nov 30 04:55:25 2024 GMT
        Subject: CN=6741603e-7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:f0:be:53:97:1c:8b:e0:2d:5d:1f:1f:6f:
                    eb:f4:dd:13:b6:4f:67:09:52:43:66:12:cd:91:61:
                    96:33:eb:ca:94:a9:4f:04:a2:31:d9:fd:37:e8:69:
                    bc:9a:2c:f3:b1:73:66:ad:ca:50:62:d0:9e:64:da:
                    82:63:8e:ff:e7:d1:15:32:a5:57:ec:54:47:09:55:
                    6d:f3:c8:6f:0b:75:50:a2:29:99:65:40:5e:15:7b:
                    f4:32:2d:7b:45:ee:41:6f:f6:86:ca:39:0b:8a:66:
                    e0:2e:57:84:e7:4a:48:a6:e3:5d:19:64:cf:69:3f:
                    66:9f:2e:36:4d:85:e5:fa:60:ba:7c:93:c2:b7:56:
                    1e:72:0c:c7:26:e8:89:5d:44:ab:fd:e3:52:a9:03:
                    bb:07:af:7e:28:38:0b:70:cc:84:73:b1:56:68:fe:
                    67:69:ac:27:1d:47:03:0d:2e:26:9a:4e:66:ef:7a:
                    f0:41:f2:93:50:e8:73:fc:4c:74:4c:e7:dc:b9:6f:
                    26:79:82:d4:df:86:9f:69:06:5c:73:1f:ad:cd:86:
                    de:30:98:b1:eb:93:16:04:20:e4:8d:7f:02:2e:c5:
                    6b:98:a2:e2:d0:15:bb:cd:99:79:4b:a4:d9:e3:93:
                    49:44:98:3c:9e:c0:97:08:2d:c4:71:92:bf:d7:3a:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:C9:17:54:E4:84:D0:ED:D7:6F:4A:90:4C:CC:BF:79:5E:55:EC
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:ac:7a:41:92:02:ff:0d:25:cd:a8:c8:84:7b:ea:fa:9a:
         21:3f:dd:2e:1d:7b:da:5f:b6:3f:ca:c8:b8:44:1d:f7:4c:fa:
         8a:72:f4:3e:a4:90:13:8e:d2:89:24:dc:a2:e2:16:b0:d5:43:
         e2:7f:d1:ec:4e:de:39:fa:ba:7f:ab:d9:c2:5f:17:62:61:50:
         6c:66:89:0e:85:80:b6:14:56:21:71:ef:80:21:0c:aa:01:64:
         8f:78:40:4c:d6:6e:77:14:89:6f:cd:b5:73:4b:d6:70:3d:ec:
         0e:1f:02:bf:4f:20:68:ed:1a:f7:d7:1e:a8:7d:6d:3f:66:e6:
         a2:1a:f2:cc:93:4d:d4:6b:28:20:1a:e4:f9:e7:db:2d:96:e2:
         51:75:5c:fb:40:05:bb:ee:fa:19:e9:3e:bb:00:f8:ce:88:33:
         fc:70:f1:a8:d8:4f:80:c7:bc:24:15:d5:d8:4c:36:e4:7a:f8:
         7f:b4:ef:24:f0:ce:6b:cd:96:96:40:d8:16:b5:22:51:ed:3a:
         d9:84:16:a1:e5:89:5a:d4:9e:58:9e:9d:69:d3:1f:1d:c4:b1:
         89:05:43:c6:80:43:36:ef:8c:81:fa:10:c8:72:0d:99:33:a5:
         63:44:be:f7:41:40:d5:fb:86:d5:17:19:8f:85:70:36:ef:81:
         0e:46:98:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjI0MTExMC8GA1UEBRMoMjlDRDhERjg4MDZFMTE2NzRDQkM1RjlERjREQkY4RDIz
RTBDMjI4MzAeFw0yNDExMjMwNDU1MjVaFw0yNDExMzAwNDU1MjVaMBgxFjAUBgNV
BAMTDTY3NDE2MDNlLTc5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyRPC+U5cci+AtXR8fb+v03RO2T2cJUkNmEs2RYZYz68qUqU8EojHZ/Tfoabya
LPOxc2atylBi0J5k2oJjjv/n0RUypVfsVEcJVW3zyG8LdVCiKZllQF4Ve/QyLXtF
7kFv9obKOQuKZuAuV4TnSkim410ZZM9pP2afLjZNheX6YLp8k8K3Vh5yDMcm6Ild
RKv941KpA7sHr34oOAtwzIRzsVZo/mdprCcdRwMNLiaaTmbvevBB8pNQ6HP8THRM
59y5byZ5gtTfhp9pBlxzH63Nht4wmLHrkxYEIOSNfwIuxWuYouLQFbvNmXlLpNnj
k0lEmDyewJcILcRxkr/XOoQtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUarLJF1Tk
hNDt129KkEzMv3leVewwHwYDVR0jBBgwFoAUKc2N+IBuEWdMvF+d9Nv40j4MIoMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMjQxL0VCMjEzNjg4MEJG
NjExRUY5Q0E5QzE1MUM0RjlBRTAyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlv
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS2MyTi1JQnVFV2RNdkYtZDlOdjQwajRNSW9NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
MjQxL0VCMjEzNjg4MEJGNjExRUY5Q0E5QzE1MUM0RjlBRTAyL0tjMk4tSUJ1RVdk
TXZGLWQ5TnY0MGo0TUlvTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFoZrHpBkgL/DSXNqMiEe+r6miE/3S4de9pftj/KyLhEHfdM+opy9D6k
kBOO0okk3KLiFrDVQ+J/0exO3jn6un+r2cJfF2JhUGxmiQ6FgLYUViFx74AhDKoB
ZI94QEzWbncUiW/NtXNL1nA97A4fAr9PIGjtGvfXHqh9bT9m5qIa8syTTdRrKCAa
5Pnn2y2W4lF1XPtABbvu+hnpPrsA+M6IM/xw8ajYT4DHvCQV1dhMNuR6+H+07yTw
zmvNlpZA2Ba1IlHtOtmEFqHliVrUnlienWnTHx3EsYkFQ8aAQzbvjIH6EMhyDZkz
pWNEvvdBQNX7htUXGY+FcDbvgQ5GmD0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org