Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File:                     R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier:          ayZhRSyVy9vS4ynxUkZBjaPSrMWgnEjVNqfU4QvqAPo=
Subject key identifier:   33:67:CB:07:57:FA:BD:22:FB:B6:ED:68:44:D0:12:BE:D2:FA:2C:EF
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number:          1D02
Signing time:             Fri 22 Nov 2024 16:09:15 +0000
Manifest this update:     Fri 22 Nov 2024 16:09:15 +0000
Manifest next update:     Fri 29 Nov 2024 16:09:15 +0000
Files and hashes:         1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: r5BhZam9LC0wIxg/+V3zZ3kVv+3wEBumnb9vegTnvWM=)
                          2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7441 (0x1d11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Nov 22 16:09:15 2024 GMT
            Not After : Nov 29 16:09:15 2024 GMT
        Subject: CN=6740acab-e96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:fe:04:4f:80:e7:6b:f8:28:65:bd:0c:c0:
                    63:0d:ed:0d:a0:e8:c1:bf:ff:aa:54:9b:3c:07:25:
                    58:d4:84:d4:86:0f:56:33:73:e7:0a:5c:e6:05:fe:
                    b0:e0:31:a7:a5:2c:be:88:bb:3d:76:fa:21:51:6d:
                    a8:e3:26:c3:7a:34:6f:32:fe:ff:be:96:00:61:08:
                    34:e1:da:b1:32:c2:4c:b7:3b:31:50:d5:b4:37:d3:
                    b7:39:13:c9:a6:8b:9e:3f:ec:c8:b8:3b:78:a9:53:
                    7c:16:bd:df:f0:1f:38:46:8b:ee:b9:29:25:bc:12:
                    6b:f3:80:f8:d9:64:4b:fd:3d:38:91:07:dd:40:bd:
                    18:a6:e0:8f:14:32:fa:a0:37:2c:12:19:ba:27:24:
                    91:b0:00:26:ae:d4:3d:12:e1:32:fb:13:43:27:93:
                    28:fc:79:35:70:41:cc:1d:a5:a8:c9:6e:2f:b8:4e:
                    57:92:88:f5:e3:4d:2e:88:4d:22:c6:c8:b4:76:95:
                    0a:ae:29:9d:3d:1a:60:ad:ab:10:c8:70:3d:bd:cd:
                    92:0c:79:39:cd:7a:f1:ae:e3:3d:f3:17:c3:9e:21:
                    7c:c4:a5:62:b3:6a:67:6a:5b:00:6b:b4:30:69:85:
                    89:42:ef:14:c6:b4:11:44:e3:6e:00:53:a2:13:1b:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:67:CB:07:57:FA:BD:22:FB:B6:ED:68:44:D0:12:BE:D2:FA:2C:EF
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:ea:86:94:f5:32:78:2d:5a:d5:36:5f:36:f1:3d:3e:1e:
         79:15:a8:ed:f5:cb:9e:67:95:7f:c0:3a:7c:9a:aa:0d:0f:53:
         0a:8b:4b:f8:b8:79:cc:36:b0:ef:5e:66:b0:e5:3c:0b:cd:e2:
         a5:13:1d:46:fd:3f:7b:33:0b:17:72:a4:fa:b0:67:17:1c:3a:
         82:87:80:d8:da:14:43:56:fd:80:53:31:13:08:01:ac:94:96:
         0d:0e:50:bd:e4:39:da:c2:cb:8d:35:9f:71:c3:f7:b7:15:76:
         85:c8:0f:7a:a4:27:03:07:1f:33:ae:26:d9:7d:ff:d3:9a:bb:
         3e:0e:3c:9a:d6:42:8e:59:ea:da:7b:d3:e2:f0:bf:ed:18:d1:
         4c:7a:f5:da:97:31:41:8a:a2:17:0e:0e:ba:42:f8:ce:da:bb:
         f7:7c:75:91:29:15:fe:ba:f4:ae:50:ce:f1:50:6d:5d:70:d9:
         86:f6:97:e8:fc:f2:1e:7a:2d:7b:b4:84:8d:41:bb:dd:93:f8:
         23:db:fd:f0:0c:a8:ef:a5:d9:1d:31:a9:d7:26:b3:a8:61:a6:
         9f:ce:6b:86:3a:48:a2:43:3a:6b:26:df:28:3d:bd:4b:db:5b:
         6e:52:08:76:13:2b:b4:e3:ee:68:e7:28:d6:74:c9:84:1b:f8:
         f6:ee:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org