Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
File:                     6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json)
Hash identifier:          cySX7pQjN07DLYF/NvT7GxG/bLcZQRxFU0kHy9sUUm4=
Subject key identifier:   C0:4C:57:B8:95:9B:0F:DA:32:4C:8D:F8:30:F4:61:F6:EF:AC:A2:CA
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Certificate issuer:       /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
Manifest number:          B8
Signing time:             Sat 23 Nov 2024 04:05:32 +0000
Manifest this update:     Sat 23 Nov 2024 04:05:32 +0000
Manifest next update:     Sat 30 Nov 2024 04:05:32 +0000
Files and hashes:         1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: xcsDRQwXOMa35mWnyGae5GkxorTRXy+DvC0um4hpSeY=)
                          2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: jdKNkbE0ibPB2nvtmodu1J/dZdyn7ruEv14OUToJSQ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
        Validity
            Not Before: Nov 23 04:05:32 2024 GMT
            Not After : Nov 30 04:05:32 2024 GMT
        Subject: CN=6741548c-85df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:b7:52:b9:e8:db:96:5c:14:66:a7:be:60:
                    23:bc:28:92:9b:22:a3:7b:88:ef:71:22:c1:e6:66:
                    a0:b3:6f:26:5c:96:b8:1c:b4:a0:87:2b:36:54:43:
                    d1:2b:63:c9:15:27:69:c6:3e:dc:7c:eb:bf:97:08:
                    02:42:b5:48:84:8e:b4:a7:d1:af:17:fe:84:cd:43:
                    d7:a2:16:52:05:8a:9e:39:5c:43:eb:68:6a:2b:b2:
                    0b:4d:7c:53:1d:5c:50:56:92:cb:42:5c:1f:e1:b8:
                    14:5a:84:f7:09:3f:84:1c:23:fb:56:03:e3:87:6a:
                    2f:d2:09:a5:b2:91:2a:32:72:4b:d6:f1:20:fb:68:
                    91:c2:7a:c5:20:b6:c8:d1:7d:2b:f8:ae:bc:71:82:
                    39:e7:5a:1c:6c:22:92:69:5f:f6:87:81:21:4a:3d:
                    cd:4d:08:b0:0a:1b:ee:9e:d5:e6:2e:83:26:41:fd:
                    21:b5:33:b4:93:18:e8:9a:c7:0a:a8:c5:a0:99:a2:
                    cf:ff:a3:99:93:28:5e:a3:9b:75:f0:68:b6:5e:c2:
                    b2:49:d9:5e:36:22:a1:d8:56:30:2e:52:19:46:b5:
                    7e:0c:13:cc:c7:3b:07:4e:29:c2:b0:c0:04:6c:7e:
                    6f:e8:5c:90:e8:76:75:01:36:71:d4:74:0b:e6:ac:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4C:57:B8:95:9B:0F:DA:32:4C:8D:F8:30:F4:61:F6:EF:AC:A2:CA
            X509v3 Authority Key Identifier:
                keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:9f:f8:4f:96:2b:9f:ac:29:87:4c:56:a7:1d:56:11:23:
         b8:2b:00:06:c7:ef:62:75:34:dd:f4:f8:e1:23:76:f7:d9:bd:
         7a:39:05:b0:a3:b0:f3:15:9d:67:bd:8a:e1:72:cd:51:a7:b2:
         1e:14:f4:fe:9b:62:64:c4:de:05:21:38:96:3c:e6:a1:fd:fd:
         00:24:a3:e4:1d:87:09:2d:af:5e:35:af:85:d1:3b:b6:05:d5:
         75:77:43:d2:54:6d:1a:8b:f6:1a:7b:c4:19:29:5a:93:44:c1:
         57:84:27:31:2b:aa:29:de:19:3e:d8:7f:d6:f3:af:48:ea:64:
         50:b5:84:17:38:0e:ed:c6:61:86:e2:a3:58:06:57:df:7f:29:
         eb:0e:f5:57:5f:61:7c:62:a7:0a:35:d3:8e:0a:fa:59:50:cd:
         ba:b8:8a:8e:0b:4b:7f:c3:00:be:f0:02:d9:8e:00:bc:d5:f5:
         64:29:f2:fd:8f:38:3c:d5:b7:7d:e0:7c:67:57:9f:10:8c:db:
         0e:4f:1e:53:e0:03:fb:24:fc:f0:3b:ef:ac:3f:15:c4:85:ab:
         28:35:21:67:8f:a8:2d:58:e1:92:83:c8:5f:63:1f:3e:68:f6:
         5e:1f:c5:cc:f0:47:56:7d:65:88:4e:37:1c:2a:d1:8f:6a:22:
         f4:88:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org