Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
File:                     b6MnfND3RvILaYm150QQZcbD0eE.mft (raw, json)
Hash identifier:          c/B+4MhXB6dqhy7OQ4ATB2XdIkMVrrJFXbois/5MDXw=
Subject key identifier:   80:89:69:0A:75:DE:62:39:8A:7E:BF:28:1F:1A:7B:E0:11:8E:55:28
Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1
Certificate issuer:       /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
Certificate serial:       0B75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
Manifest number:          0B6D
Signing time:             Fri 22 Nov 2024 18:50:17 +0000
Manifest this update:     Fri 22 Nov 2024 18:50:17 +0000
Manifest next update:     Fri 29 Nov 2024 18:50:17 +0000
Files and hashes:         1: b6MnfND3RvILaYm150QQZcbD0eE.crl (hash: DxvPvOCohnoSOJPVE/xnFb8q8FiPAy7tn8Wm8yl9tdY=)
                          2: 5B89EDAC1C1911EA905C7109C4F9AE02.roa (hash: yFbcE2/zh5W+jYTCtbp+al/Ly/eMMC6ALp6S0V30Zsc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl
                          rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
        Validity
            Not Before: Nov 22 18:50:17 2024 GMT
            Not After : Nov 29 18:50:17 2024 GMT
        Subject: CN=6740d269-e34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:38:05:61:ff:c3:4f:80:8a:55:48:4c:c8:
                    6a:d0:8d:bd:3c:2a:2d:71:45:9b:80:d7:72:38:76:
                    44:6c:f2:6b:13:8d:79:bf:64:41:fe:85:10:a2:8d:
                    2c:02:d7:83:62:c4:0d:2d:15:ea:f0:ba:af:ba:d9:
                    0d:a9:6e:26:39:1a:a6:58:cc:f6:20:7e:5a:c8:e7:
                    bb:e3:07:07:6f:e3:f0:75:76:ec:86:26:0c:c1:b6:
                    3e:14:dd:f8:16:7f:4c:f8:6c:56:53:f6:08:65:a7:
                    c0:50:d6:24:b7:76:1c:66:d1:88:ab:9f:ea:e9:a5:
                    70:0c:2f:bf:a3:46:f7:86:cb:cf:cb:0e:f9:15:3e:
                    a0:6d:86:4d:d9:54:09:75:3a:5b:87:be:20:ff:6d:
                    3e:a9:8e:77:52:df:20:e6:ad:5b:76:4a:b4:2b:12:
                    e0:c8:d1:25:88:2e:51:92:27:dd:fa:ec:6a:33:f5:
                    06:6d:73:fc:bf:4b:47:0d:ad:36:98:36:87:e8:6e:
                    7e:24:8d:aa:31:b5:0e:24:da:12:91:bb:39:33:e1:
                    8d:9f:63:11:0f:6b:aa:f5:6c:c1:fd:7d:82:8f:da:
                    ab:72:a0:13:a4:75:f4:96:aa:c8:08:3e:b0:a6:f9:
                    05:a4:c1:8e:e2:c7:54:e3:51:28:b6:46:af:8d:5e:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:89:69:0A:75:DE:62:39:8A:7E:BF:28:1F:1A:7B:E0:11:8E:55:28
            X509v3 Authority Key Identifier:
                keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:53:44:8d:8c:f2:17:15:d6:70:00:72:88:c9:8d:71:b7:37:
         ae:a2:07:51:3b:23:41:e2:7d:fb:d4:0b:2a:33:8f:57:ca:32:
         6a:be:5d:04:52:d2:25:d6:0a:b9:ac:dc:9a:0f:05:30:3f:8b:
         c7:8e:92:8b:3c:c1:8f:2b:5c:9f:79:f1:1a:61:b8:27:07:e4:
         de:22:85:b0:60:92:5d:c7:fd:69:a5:ae:23:89:73:d7:ee:a4:
         11:fb:28:e0:df:44:7a:98:5a:db:91:92:c8:1e:d3:d1:f2:0b:
         4f:2a:62:e5:27:ed:29:9f:d8:6b:a9:b0:4d:dd:47:8d:4b:21:
         65:1f:53:fb:21:b5:b6:85:ad:45:a7:ed:85:a7:7d:d9:eb:cf:
         ae:43:c5:89:2f:7c:4d:da:3e:df:01:19:5e:86:07:62:3d:c4:
         68:91:d6:63:7c:52:6c:f4:d7:d4:1e:75:f7:f1:3c:57:45:51:
         35:64:c9:11:7a:f0:9a:b6:99:d3:0a:cb:43:5f:6b:49:43:b1:
         b9:40:14:86:87:b2:7a:f8:14:ef:68:cf:34:39:16:5f:e2:c3:
         a1:d4:d3:be:7d:ac:75:11:71:87:52:4c:15:23:c3:85:6b:30:
         ae:64:bb:83:08:24:c9:49:dc:7a:4f:fa:0a:95:dd:1b:b0:26:
         be:cd:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org