Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          +MaECi/2USCS2yjPsud8pN2wzVGw8chssCrkemkOBsM=
Subject key identifier:   D3:F7:9E:D3:90:4F:22:D5:39:3F:4F:C4:4E:57:14:7A:16:38:7F:9B
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       09EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          09E2
Signing time:             Fri 22 Nov 2024 19:41:02 +0000
Manifest this update:     Fri 22 Nov 2024 19:41:02 +0000
Manifest next update:     Fri 29 Nov 2024 19:41:02 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: 3c7VfJdgRt0Ev7EPhdVwsEKUpvwXQ1DbFSKuZOR15q0=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: QlXB7lfn1sgpwkVvWpKhkoSXRwHDweeIAsqj1Bq83Co=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Nov 22 19:41:02 2024 GMT
            Not After : Nov 29 19:41:02 2024 GMT
        Subject: CN=6740de4e-ed79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:10:2f:8d:af:ab:82:44:f0:2d:9a:d4:ed:
                    73:78:64:f6:12:5d:9e:55:c3:3e:ae:6b:cc:be:3c:
                    c2:ba:21:f1:1d:0b:11:a4:38:ff:2c:d1:23:ae:a3:
                    18:c8:e1:b8:24:85:5b:10:91:13:cc:22:a5:57:0c:
                    4f:bb:31:c4:5f:8d:8e:ab:21:d8:d0:a8:f0:f9:d0:
                    7f:48:44:1e:dc:f7:b4:ac:6b:d8:38:04:3b:a2:f4:
                    2f:40:37:f5:b9:48:7a:22:9d:fa:a8:9c:b6:62:6b:
                    9c:93:e9:13:a9:88:4a:65:7e:ab:95:a9:de:ac:04:
                    ea:14:e2:c6:7e:3f:61:ab:08:25:cc:8b:f5:3a:f8:
                    da:42:f7:f1:d5:14:da:c1:6e:83:65:ba:6b:d8:89:
                    df:d7:a4:b4:8b:36:39:bf:66:62:59:93:7f:33:55:
                    1d:a8:2f:6e:9f:48:0d:30:d3:1a:82:4c:be:cc:04:
                    6c:2b:63:67:da:9c:c7:be:f6:c4:17:78:00:b0:ad:
                    d6:b9:57:b0:99:06:52:d2:80:05:05:03:63:21:85:
                    64:72:fd:4d:74:3d:55:3c:aa:80:39:9c:a7:b0:a2:
                    3a:e0:30:45:7d:20:4c:c3:fd:93:1c:e4:d6:cc:fb:
                    f0:4e:86:2a:e6:66:ff:ad:58:de:a2:8c:a2:3a:41:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:9E:D3:90:4F:22:D5:39:3F:4F:C4:4E:57:14:7A:16:38:7F:9B
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:90:ef:cd:59:7a:6e:1d:f0:da:da:9f:00:66:77:67:8e:ca:
         1a:9c:69:9c:8c:1f:b6:38:d2:ba:a9:d9:c5:50:ff:80:02:e4:
         61:7e:ff:11:59:06:44:c8:99:6c:0c:04:1a:57:7e:57:f1:ed:
         ed:5e:92:52:7b:e4:79:82:23:76:ad:34:80:40:0a:9a:e2:48:
         c6:11:ef:1c:e4:0e:17:4c:b0:68:e6:5f:9f:d4:e5:82:42:9b:
         85:44:5e:83:53:d7:4a:cd:91:81:24:f4:b1:0d:68:69:be:cb:
         41:92:62:44:9a:15:ab:05:26:aa:30:73:9d:df:f7:e5:ec:3b:
         4e:92:cd:79:07:eb:dd:a9:55:7d:76:bd:f5:ad:fb:60:f8:2b:
         07:0a:f9:68:fb:06:d7:38:61:1b:fa:e8:fe:98:0f:99:e4:ee:
         1e:91:fa:bb:52:ae:b3:f9:9a:3f:72:76:fb:97:3d:45:54:ec:
         2d:96:be:52:45:b8:bd:13:7d:9e:a0:1b:a1:eb:39:56:c8:c5:
         0a:f7:a0:08:4a:26:6a:5e:e4:9c:61:9d:2c:07:a0:a6:ce:37:
         e6:66:36:91:91:79:46:fd:5e:2f:21:02:37:89:6a:9c:11:b8:
         1c:a5:06:e0:92:6b:88:c6:88:7f:07:f0:46:d4:af:a2:bc:14:
         70:38:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org