Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File:                     K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier:          LZNC1OqUztLONZ0vfE5FrHNVf+sfkNs+wTI92eT5Fes=
Subject key identifier:   54:BF:00:79:C2:A3:56:BF:4E:F2:CD:A0:5F:BB:40:23:81:AE:E9:9A
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number:          6A
Signing time:             Sat 23 Nov 2024 04:54:02 +0000
Manifest this update:     Sat 23 Nov 2024 04:54:01 +0000
Manifest next update:     Sat 30 Nov 2024 04:54:01 +0000
Files and hashes:         1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: Eij5JnumjSMUzFzc6xtUFlWjDGkgCHwyznZvwFHX10k=)
                          2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0K8hINvXeShf8i/9Td57E0NI0Gsp8mk0fOg1+44K/Pk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: Nov 23 04:54:01 2024 GMT
            Not After : Nov 30 04:54:01 2024 GMT
        Subject: CN=67415fea-8dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:fc:7a:ef:40:5c:41:6f:cf:52:99:47:e2:
                    53:2f:d3:9f:c3:9d:5e:e0:e1:f8:e4:af:4f:a1:63:
                    08:b9:35:23:f0:e6:03:df:96:55:14:73:15:ca:6b:
                    d3:b1:70:4a:cf:a3:e9:8c:d1:77:0f:c4:7f:34:11:
                    47:01:e8:e6:79:d1:af:31:c7:10:ec:ec:47:ab:ec:
                    29:49:50:33:05:40:82:1a:fa:82:ce:8f:79:fe:6e:
                    e2:3d:a3:3c:5d:2e:80:2c:41:42:21:3b:4c:bc:a1:
                    df:05:50:0c:a6:65:56:b0:36:ca:47:51:9f:aa:8e:
                    7b:0f:43:d2:a4:1d:7d:15:e5:26:d4:e3:f0:59:4b:
                    26:63:62:7c:2a:e5:82:db:07:68:a5:dc:31:1c:df:
                    32:19:30:db:63:be:55:b6:84:8e:ea:75:69:27:ec:
                    83:0d:05:7a:6a:42:fb:a5:77:1c:da:76:6b:c9:3b:
                    0c:66:5f:62:58:96:c6:d0:7c:32:b3:05:e3:6e:ba:
                    6c:da:44:32:55:ec:06:b9:b1:9e:8d:42:48:96:67:
                    35:59:b6:b0:3e:e7:a6:e8:1b:09:7c:34:7d:f7:f1:
                    0c:41:89:5b:c5:76:5b:9b:84:a5:57:33:e7:1a:bf:
                    76:a9:f3:87:14:7e:a0:84:ea:82:1b:ee:6a:56:0d:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:00:79:C2:A3:56:BF:4E:F2:CD:A0:5F:BB:40:23:81:AE:E9:9A
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:98:6a:71:a7:b2:89:0b:40:35:0d:17:80:6e:21:2f:08:2d:
         60:07:c5:dd:41:91:1a:61:e6:fd:30:40:ba:9f:e8:4b:08:a7:
         b6:16:c1:c1:34:62:82:1b:ed:9d:fe:78:e5:f1:45:3f:e0:2d:
         81:8f:b4:e5:0c:c0:b2:70:6f:41:fb:b3:7f:2d:a3:ce:4a:ea:
         89:cf:3d:55:43:6e:90:2a:ba:98:03:25:e2:7e:2b:38:43:d2:
         df:f0:6f:5c:8a:89:30:69:07:58:0d:b7:fe:f4:96:c9:7d:8e:
         91:cf:9d:cf:5c:d3:f7:ad:f2:75:95:ac:66:19:91:4b:23:a4:
         e8:c1:b7:0d:a7:23:43:bd:43:97:db:23:77:cf:e2:39:80:e0:
         f5:5f:15:61:e5:65:32:e4:33:b2:6d:ba:01:3e:42:f5:c3:a0:
         65:58:af:8d:09:7e:ef:2c:65:0d:8b:03:a3:90:e0:56:fe:d0:
         16:a9:3a:f9:6e:02:b2:86:34:d9:3c:b4:f3:98:95:e2:26:c5:
         4f:31:57:61:db:6e:6e:36:4d:c4:89:0d:59:34:8b:ff:57:0a:
         33:d0:a1:4b:16:5e:9d:5f:47:88:36:3c:b5:5e:74:be:d8:8c:
         a5:63:d8:2b:60:bb:64:a2:00:ee:fb:ff:5b:d6:da:3f:b7:f0:
         39:35:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org