Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          BZryhcOVaeyjZhiCbSpcJyICwQ93y8q2lzp+sH5Eg9I=
Subject key identifier:   E7:89:D9:85:6C:58:E1:50:74:A8:5C:AB:1D:FF:AB:61:AA:64:DE:60
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0CB6
Signing time:             Fri 22 Nov 2024 18:04:13 +0000
Manifest this update:     Fri 22 Nov 2024 18:04:13 +0000
Manifest next update:     Fri 29 Nov 2024 18:04:13 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: c36wPxDSRGZXc2BRvH1k6nFmq7ChI/+VV2pBSX7aVZw=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Nov 22 18:04:13 2024 GMT
            Not After : Nov 29 18:04:13 2024 GMT
        Subject: CN=6740c79d-918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:42:02:0a:16:0c:47:a9:fd:f1:5e:84:a2:
                    9a:be:9a:f2:20:6c:39:d2:23:aa:23:1d:32:6a:4e:
                    18:d3:58:df:c1:e9:5b:fc:bb:e7:6b:86:30:cc:a7:
                    20:6a:3e:b0:45:a5:17:d1:5f:20:15:ef:a3:51:04:
                    80:3d:31:d7:07:a0:5f:ae:45:0d:ca:e4:b4:0f:2d:
                    df:8e:ff:a5:16:93:c5:e1:89:21:28:f8:db:02:3d:
                    29:44:b6:eb:e1:45:bb:a2:65:fe:dc:9a:62:de:d0:
                    8b:78:6d:44:27:6f:f6:1e:37:f7:e9:48:23:c7:16:
                    f8:6a:f0:6c:4d:65:8a:18:09:b8:86:62:04:9c:1a:
                    30:56:53:0d:22:cd:a9:10:45:5d:2b:c9:4a:cf:76:
                    a7:dc:c5:32:40:2b:77:d4:c5:bf:bc:4c:1f:25:0c:
                    a5:cd:82:55:c0:d1:6b:4c:c2:b6:23:bd:87:76:ec:
                    1b:ff:16:f0:d1:d3:e5:c9:35:db:33:0e:75:27:9c:
                    d1:da:fc:68:4a:34:de:a2:41:75:89:60:be:70:b3:
                    54:96:f9:2a:1f:c0:20:5f:a7:7d:d2:ca:21:ee:97:
                    68:74:bc:51:4d:7c:a7:3f:bf:b4:77:87:eb:0b:bf:
                    02:7b:20:a5:97:d5:68:04:2e:ad:fa:e9:af:d8:e0:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:89:D9:85:6C:58:E1:50:74:A8:5C:AB:1D:FF:AB:61:AA:64:DE:60
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:15:f0:84:44:2f:ad:1d:d8:d2:0c:0b:89:13:eb:72:73:
         b4:ac:ff:6e:51:f6:7b:c3:ae:55:16:e5:94:c4:88:3b:52:da:
         46:30:56:f1:ea:d3:64:40:17:dc:ea:7d:17:14:a3:fc:01:4c:
         19:35:0a:1f:62:6a:53:e3:0c:bf:44:af:cd:34:b9:ac:e5:52:
         0f:44:e0:e7:ab:fa:68:8d:79:cf:7f:14:b6:2a:56:a8:87:13:
         48:77:f6:df:d3:6f:40:22:ba:fa:72:24:a7:74:4e:6f:33:70:
         e1:40:10:37:be:83:62:9e:09:7b:ec:f2:07:aa:c4:61:25:45:
         58:7b:13:d8:5f:2c:58:3c:d2:63:6b:e7:8e:f2:b3:7f:cb:cf:
         d6:4b:ba:d9:ee:fc:7c:a5:c4:0a:bf:4d:73:ae:b9:a4:39:94:
         c5:f7:98:2d:6d:15:05:bb:5a:14:09:15:3d:fa:a3:f3:12:90:
         75:a4:58:f6:07:3d:2f:f7:28:20:48:0c:2a:a6:b9:1a:8b:69:
         51:52:09:7c:f6:be:c4:35:86:02:72:78:fb:8c:44:36:77:ca:
         6d:55:66:96:3c:d8:cf:79:bf:06:bc:31:ce:22:87:0c:1a:0e:
         d2:51:ff:df:fb:32:32:9f:1d:29:b2:0f:72:96:6e:0e:a8:51:
         91:73:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org