Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          ZGvbRuSgj1HwDD68hBZTAnBTNHIpDC71mhONSTieq98=
Subject key identifier:   59:00:5C:4E:0C:DF:AF:EC:E7:1C:92:EF:C9:1B:4E:EE:AF:04:CA:A7
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       0325
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          0323
Signing time:             Sat 23 Nov 2024 00:43:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:43:18 +0000
Manifest next update:     Sat 30 Nov 2024 00:43:18 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: HyD22Qzv1Y8qAF+9a34G0qRUBpP2xhKWtGG/524OCNc=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Nov 23 00:43:18 2024 GMT
            Not After : Nov 30 00:43:18 2024 GMT
        Subject: CN=67412526-5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:2b:e6:b6:05:52:9b:b0:41:85:d4:9f:83:
                    33:61:b8:43:1e:fb:49:cf:18:f8:45:3a:ed:b9:3f:
                    98:3e:dd:82:f9:3a:c8:00:72:d5:eb:7e:2a:44:54:
                    ac:7f:4b:d1:d9:54:6e:2a:9d:a2:b7:90:d3:d0:e5:
                    60:82:13:ad:18:88:d4:57:00:83:dd:ef:49:16:99:
                    40:ea:50:b3:4f:64:4d:2e:d3:82:dc:8c:02:76:c8:
                    25:40:37:7e:81:fa:ac:44:63:6b:3d:22:e5:01:1d:
                    75:54:5d:bf:ad:9a:8a:4d:96:14:5b:70:74:34:67:
                    e8:5b:34:d7:8a:5b:d5:fe:3a:40:4d:bd:33:5c:cf:
                    ec:65:0a:10:2b:bb:1a:a7:e5:f5:93:2f:05:41:99:
                    04:9c:fe:3d:03:32:90:b7:27:44:6b:d6:61:f3:e6:
                    d0:aa:55:ec:f5:c0:ba:e6:ae:bd:f9:cb:70:ee:12:
                    ac:5b:86:ac:a7:9f:4e:ee:a2:6f:d7:f0:2b:67:f1:
                    e1:3f:d4:4f:bf:77:11:74:99:b4:02:15:20:4e:2c:
                    f1:c6:6c:8b:b8:0a:74:e0:29:29:83:11:74:54:71:
                    26:3f:40:31:de:98:d0:63:6e:14:59:18:f5:5a:84:
                    29:53:4e:1c:86:96:c8:b0:df:aa:ab:73:e8:5f:14:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:5C:4E:0C:DF:AF:EC:E7:1C:92:EF:C9:1B:4E:EE:AF:04:CA:A7
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:45:57:5d:81:df:f0:dc:98:af:36:d5:93:85:8a:30:96:
         54:46:2d:a6:5f:41:52:ea:9d:aa:1a:dc:a6:dd:05:8d:91:25:
         ac:81:75:a8:b1:95:19:fe:36:aa:fe:44:f9:50:1f:24:87:50:
         97:10:25:e9:50:e2:c2:60:95:6c:fe:96:b7:18:f5:92:30:f0:
         70:c2:5a:1c:f6:5d:59:fc:b8:87:57:e9:fb:fe:33:fa:d2:09:
         fc:af:5b:88:5a:87:6f:7e:e5:4d:bb:91:8e:02:25:aa:9e:d0:
         0e:bc:87:e6:f2:05:24:ac:92:78:84:35:bf:65:23:b0:92:c8:
         86:1c:ad:e9:72:a2:11:b7:69:35:05:c9:c8:70:aa:04:27:31:
         7e:f1:bf:18:9c:32:e1:89:b3:4d:48:b2:fe:28:d0:f9:1a:bd:
         4e:89:65:a0:2d:47:90:1a:4b:37:d7:48:f9:eb:fb:58:0e:76:
         fb:13:00:85:41:b8:fa:55:75:0f:b3:77:2e:0c:e7:c0:2d:c1:
         4c:54:f3:80:df:aa:18:38:71:ca:92:dd:9c:22:a2:9d:7c:b2:
         a0:af:5f:28:d1:7d:ad:e7:d1:db:4a:1b:02:c2:4b:a0:d6:a7:
         69:8e:5b:04:ec:6e:d0:90:c6:76:37:da:ce:29:e3:67:be:26:
         45:75:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org