Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
File:                     6_vUy5tYrAgtPzgph6WXpYyWupE.mft (raw, json)
Hash identifier:          cEvpoqqiGytVEiNcpnZcQTQVUJb82MXSQkmJwPUHn8w=
Subject key identifier:   5A:9A:17:C1:6A:E2:49:63:98:96:21:F4:FA:B5:F3:53:BF:A4:51:DF
Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
Certificate issuer:       /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
Manifest number:          0D
Signing time:             Wed 23 Oct 2024 07:53:53 +0000
Manifest this update:     Wed 23 Oct 2024 07:53:52 +0000
Manifest next update:     Wed 30 Oct 2024 07:53:52 +0000
Files and hashes:         1: 6_vUy5tYrAgtPzgph6WXpYyWupE.crl (hash: ADebRJfmcVs5bGo8VUbBrre2NnK0z9/ORFB3GXa6TqY=)
                          2: F042F19A911311EF9A1A7F54C4F9AE02.roa (hash: hBFHKnjfNPkSPQ8LFBtT/taQcDMk7/Q7iyGIaAxoH34=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl
                          rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
        Validity
            Not Before: Oct 23 07:53:52 2024 GMT
            Not After : Oct 30 07:53:52 2024 GMT
        Subject: CN=6718ab90-11c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:f4:ab:3d:8f:21:76:65:b7:81:02:19:7d:
                    52:49:2a:5b:92:99:d1:bd:08:50:72:9d:a6:f5:86:
                    ab:09:bb:d3:2c:73:91:2e:b5:6b:cc:7a:7b:ad:1a:
                    79:c3:71:5a:62:bd:f6:e1:0e:6e:91:a0:7a:04:45:
                    28:93:27:31:40:06:1d:e6:75:20:49:c5:69:dd:20:
                    d8:52:7f:7c:86:91:28:a9:96:69:19:a0:31:15:02:
                    84:e7:16:3f:3a:a6:d9:87:02:37:83:07:a4:fc:f4:
                    8d:70:90:00:ad:e9:11:4f:3f:69:fc:c2:7c:0b:99:
                    21:bf:c2:dc:20:b8:a5:b4:8d:91:a2:59:5f:1d:64:
                    2f:95:05:b7:45:b5:53:a7:18:6b:53:d6:04:5e:3c:
                    d5:eb:29:4a:18:69:e5:fe:8e:2f:b5:0f:e9:bf:1f:
                    39:13:e1:d3:29:21:52:37:e4:d4:af:90:2e:64:00:
                    aa:1b:62:08:ef:4a:85:77:68:f1:05:45:dd:2f:b1:
                    63:52:1d:7f:41:69:21:2a:0c:2c:2f:b9:0b:35:dd:
                    3e:f0:b4:55:e2:56:d4:d4:1a:5e:87:92:7a:5c:d9:
                    08:74:16:52:fd:b2:d2:ac:aa:f6:1e:cb:4b:4b:38:
                    98:66:6b:f6:e0:52:19:1f:cf:91:f5:e9:7d:ce:ab:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:17:C1:6A:E2:49:63:98:96:21:F4:FA:B5:F3:53:BF:A4:51:DF
            X509v3 Authority Key Identifier:
                keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:79:fe:6a:86:27:d7:35:9c:05:0f:97:36:79:9d:55:cf:a2:
         cd:41:5a:72:6c:dd:d1:98:a5:dd:df:1a:a8:f0:ad:7d:2f:be:
         34:f2:a4:3f:ed:bb:b1:15:aa:f5:7c:d9:6d:27:2b:7b:0f:24:
         56:0d:f6:e0:fa:4d:a1:41:1b:74:16:68:d1:9b:9d:bb:4e:48:
         b6:81:91:79:c6:dd:06:ee:be:1b:06:e6:b0:8d:e9:4b:0c:a8:
         26:aa:ea:e4:37:9f:15:b8:32:29:f2:16:58:df:7c:fa:dd:8f:
         fa:c7:6f:44:9c:64:4f:83:b6:b4:89:52:5b:95:6a:88:9f:ac:
         ee:c3:de:5f:4c:59:c0:92:fb:50:dd:64:e8:b0:5c:92:03:99:
         d4:72:50:85:07:c1:24:cf:3f:21:b6:95:92:3b:dd:81:4c:15:
         47:aa:5f:b2:3a:4b:77:ae:73:11:5a:ca:f1:ad:1e:1e:a5:ec:
         db:31:6a:31:52:4f:fd:3e:68:45:21:ec:b8:66:61:04:8b:e0:
         c7:49:ed:5a:58:6c:82:39:a1:3e:fd:91:c1:38:f9:5a:25:17:
         84:14:98:62:db:87:81:91:3b:a4:20:ef:8a:c4:6e:96:e6:c2:
         08:58:38:7f:95:5c:35:df:c0:05:02:97:9f:1f:26:e2:34:bb:
         c4:80:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 09:59:05 2024 by rpki-client on console-ams.rpki-client.org