Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
File:                     6mEYPX8HHa7UVWQxG4oadb3OcNY.mft (raw, json)
Hash identifier:          TYwApa7PavOluXGECpcAgGZoP8NCfdCeqmVo+J9Rhc0=
Subject key identifier:   A7:2A:76:C9:1E:AA:75:ED:25:B5:D6:25:D9:BB:C8:FB:B5:92:F0:DF
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
Manifest number:          28
Signing time:             Sun 15 Sep 2024 10:12:44 +0000
Manifest this update:     Sun 15 Sep 2024 10:12:43 +0000
Manifest next update:     Sun 22 Sep 2024 10:12:43 +0000
Files and hashes:         1: 6mEYPX8HHa7UVWQxG4oadb3OcNY.crl (hash: c7Ah1p3Nko9CzZXXJIHtDcdtS0/vztWmAMiD5F+Djn4=)
                          2: CB54BF04390611EF93BAC362C4F9AE02.roa (hash: fo4GXuN7O8uYGc5UdBuNP0Ja0GAivlcbKEYSiRLp828=)
                          3: 5AFDCA16390611EF9290C361C4F9AE02.roa (hash: 4k7Wpo9Aaw6PXG9ws+iY+Olsll069lbNbaTcR7YIY9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: Sep 15 10:12:43 2024 GMT
            Not After : Sep 22 10:12:43 2024 GMT
        Subject: CN=66e6b31b-751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:b8:6c:0f:eb:f1:2b:13:1b:f6:df:3e:f5:
                    51:b8:f5:1d:e6:51:1b:f6:50:ec:7b:bd:8a:14:89:
                    93:58:70:e4:7d:61:e1:81:13:5f:f2:c0:18:d8:6b:
                    72:6d:29:e6:26:cb:56:b5:f1:5c:42:24:40:d8:fb:
                    35:e0:01:4a:67:02:c2:c1:79:ff:25:76:f0:08:6b:
                    65:3d:7c:40:72:03:88:43:ae:0b:af:28:31:12:e8:
                    d4:81:6e:29:48:27:99:74:aa:a2:5f:ea:de:80:e9:
                    5a:bc:a7:59:90:6b:f3:5f:d3:ef:04:37:52:c7:0e:
                    a9:80:cc:0c:06:d9:4e:e0:af:c5:58:a1:ea:c2:3d:
                    3a:6e:88:c9:2c:fa:70:44:36:d4:95:5e:ea:0e:7d:
                    e7:09:a4:ca:d2:a6:ce:2f:31:b4:bb:8d:00:ef:85:
                    05:4e:68:e5:16:fd:01:c2:00:a6:27:4a:b2:a0:fa:
                    c0:81:4e:5e:58:c5:cb:45:d1:b1:be:7d:a3:f8:83:
                    13:ec:37:45:da:97:a1:c1:a9:3d:2d:ae:f5:a9:40:
                    5c:6c:79:74:89:f8:80:6d:ed:5d:c4:59:a0:e6:2a:
                    5f:fb:e6:95:df:e5:ea:70:3f:e4:33:4c:41:f9:6c:
                    c0:98:e0:46:40:b8:42:b7:75:2b:03:0a:5a:4c:e2:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2A:76:C9:1E:AA:75:ED:25:B5:D6:25:D9:BB:C8:FB:B5:92:F0:DF
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:f9:83:6d:8f:9c:14:2e:89:78:ee:25:0f:b2:71:cc:cf:
         ce:70:11:00:8a:54:8f:18:ac:b1:c0:25:ba:8f:34:84:3c:92:
         4e:1b:04:08:08:d9:8f:16:3a:8e:de:93:1e:04:6f:10:e2:9b:
         af:e2:1a:c7:72:58:75:28:b3:83:80:12:50:bc:dc:2b:92:e7:
         f7:0a:a1:c0:d7:4e:76:4d:af:03:83:9f:39:62:48:46:ba:1c:
         72:c3:23:e6:59:90:37:7f:a2:6b:69:fe:02:47:fe:2d:d4:95:
         1a:30:84:05:ac:31:e4:5a:e2:87:79:e6:71:d5:a6:a4:3d:30:
         d4:e8:aa:61:64:97:32:c5:39:48:9a:c6:2a:cb:42:00:23:c2:
         a9:5e:c3:95:10:9e:fe:b9:40:75:24:24:b1:ed:77:e5:6e:c3:
         f8:1a:ad:72:78:4e:72:40:5c:88:38:e9:16:5f:d5:dc:24:3d:
         9e:d3:51:ef:64:65:5e:ac:f8:31:cb:0a:d8:b5:0d:75:f4:f4:
         7f:c6:35:14:6c:3d:31:7d:55:a5:32:f6:4f:4e:3d:a8:b0:14:
         34:e0:ea:d4:1f:88:13:84:36:68:76:ba:87:21:5a:2f:c4:90:
         86:ca:44:d1:da:57:44:a7:75:43:5c:28:fe:ba:c9:7a:5f:71:
         6a:06:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 13:42:43 2024 by rpki-client on console-fra.rpki-client.org