Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File:                     K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier:          p8kCzawEZ/7zk6kYQ57HffFRnakqsFW8MuG9mcAcz+Q=
Subject key identifier:   0E:05:1E:FA:09:23:87:C7:3C:36:3C:0C:AD:13:E4:02:CC:EE:17:0E
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer:       /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number:          C0
Signing time:             Sat 15 Feb 2025 06:58:52 +0000
Manifest this update:     Sat 15 Feb 2025 06:58:52 +0000
Manifest next update:     Sat 22 Feb 2025 06:58:52 +0000
Files and hashes:         1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: LDrp0/UBwotOen2tp2IlXUCxKkjPRdeJrToeu9SY964=)
                          2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: E6pVE8DvjoGcz1F0AEh1i7js+Z0pbdB5Na01TO4wqGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
                          rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65C7
        Validity
            Not Before: Feb 15 06:58:52 2025 GMT
            Not After : Feb 22 06:58:52 2025 GMT
        Subject: CN=67b03b2c-68c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:ae:ec:50:2b:b1:a8:72:e5:07:c6:e9:79:
                    c2:fe:60:f5:d1:a0:60:92:1a:52:82:d5:c2:d4:00:
                    3d:ac:2e:88:10:fa:e4:33:0d:ca:cb:bf:1d:5d:38:
                    a4:5d:b7:07:7c:98:c8:60:cd:69:c9:19:59:81:cc:
                    98:ef:2d:98:53:e0:12:3b:d6:47:43:ee:c6:c9:c4:
                    96:40:97:43:3c:e7:ca:29:24:16:b8:02:5b:b9:aa:
                    cf:b5:03:30:1d:13:a2:26:49:a3:69:ae:fc:1a:1c:
                    6f:02:ea:b9:95:44:f0:84:00:96:d2:09:39:bc:bf:
                    95:ca:e9:e0:be:37:89:1d:a7:23:ec:df:5b:04:45:
                    f4:75:09:03:31:25:ec:8e:69:10:94:9c:72:45:56:
                    ac:ba:3e:5b:48:30:89:81:e7:cd:bc:20:13:ce:ec:
                    f8:57:ed:bf:ea:03:ed:91:fe:25:4b:23:0b:b8:81:
                    77:fd:74:d7:ce:68:b2:04:22:c1:12:75:98:01:20:
                    e0:fc:ef:f5:47:65:cd:54:d9:c0:b5:06:19:4b:f6:
                    51:2f:33:4a:d4:63:6a:72:32:06:b6:ad:56:01:48:
                    25:96:95:66:96:c5:f0:a7:12:05:89:bf:db:16:3c:
                    21:11:f0:1d:f0:3f:a8:2b:23:c3:2a:dd:bf:ac:2d:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:1E:FA:09:23:87:C7:3C:36:3C:0C:AD:13:E4:02:CC:EE:17:0E
            X509v3 Authority Key Identifier:
                keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:4d:9d:30:6d:3c:10:38:be:e4:4f:14:2f:45:c3:60:b7:
         2f:e9:f6:20:ed:99:72:e8:49:03:a0:84:21:aa:27:6a:ec:d0:
         de:8e:01:85:30:96:61:00:b4:cb:45:61:6a:24:8a:4d:2d:bb:
         2d:75:c8:88:75:8f:bf:03:f9:f0:2a:9d:53:cb:50:65:9c:9a:
         8f:f9:5c:88:9a:cc:87:0e:52:3c:fa:47:f2:39:bc:bd:f7:b9:
         c8:e7:86:9d:88:0f:60:9c:ea:e2:84:ae:5a:7d:78:ab:b7:11:
         a3:5f:9c:42:dd:d7:45:f2:4e:8e:b3:01:55:71:b3:1a:84:22:
         00:79:be:17:a2:6a:62:1a:10:ea:6d:5d:62:f8:4a:f3:47:15:
         a3:18:c3:8d:ef:87:f4:d6:6d:4d:c3:7b:de:01:ec:35:f2:22:
         39:28:e6:59:16:0c:05:81:68:be:0b:7c:c5:4d:be:a0:ff:f5:
         89:aa:1a:5b:9e:c9:d5:fe:e0:cf:8e:c2:03:0d:06:68:8c:dd:
         bd:46:bf:ac:07:97:d3:13:90:6c:f5:3d:b5:7a:6e:3c:63:21:
         2a:fa:f5:17:c4:61:d6:9c:bb:d6:7b:ec:1e:aa:c7:53:e6:8f:
         2b:e0:ab:e9:4b:3f:20:66:98:6c:16:9d:22:a0:b2:d3:68:2f:
         9a:7b:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:45 2025 by rpki-client