Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File:                     Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier:          Ry9VTziU5sQDUFADJ5y+7/lhXkFgiMX+0U7TVTyxZfA=
Subject key identifier:   6B:CE:65:F2:DC:E2:FC:C5:20:D2:BD:CD:8B:4B:43:C2:11:DC:C6:9D
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       03D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number:          03D3
Signing time:             Sun 19 May 2024 02:23:13 +0000
Manifest this update:     Sun 19 May 2024 02:23:12 +0000
Manifest next update:     Sun 26 May 2024 02:23:12 +0000
Files and hashes:         1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: s0D72Yw9Epc4ptD67Lzrvv9THQ7h6r3A6PuTeGwabpw=)
                          2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: oIR6C0jzyNR6DapcVvpryMcQz3JNQD8hTZfy++IEFqg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: May 19 02:23:12 2024 GMT
            Not After : May 26 02:23:12 2024 GMT
        Subject: CN=66496290-7f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c7:bd:1e:63:99:f4:f6:65:d2:60:14:dd:00:
                    72:b6:74:1a:33:0e:4a:fc:3a:72:b1:5d:f5:b6:08:
                    0c:ef:09:01:53:b5:ef:ff:ab:8a:f8:83:e3:7a:5c:
                    26:46:00:71:c2:62:fb:43:e1:3d:24:a3:20:43:b5:
                    53:ba:5b:50:d1:80:55:4f:78:8e:aa:be:1a:43:84:
                    99:79:0b:13:88:4d:ed:35:63:9e:ea:10:a5:de:01:
                    19:85:5b:71:1b:d1:43:a0:7d:a8:04:87:b3:65:e3:
                    dc:85:4d:1d:07:43:34:1d:c9:f7:e4:7e:11:44:6e:
                    4d:14:6e:ba:3f:43:96:c9:83:99:d5:53:e9:84:80:
                    04:c4:f5:5f:c5:05:cd:4f:23:4f:ec:1a:5b:85:e0:
                    f5:ea:ca:29:b8:82:57:78:0e:86:f8:d0:f2:9b:35:
                    dc:fb:25:5f:5e:f9:08:d5:20:13:54:e5:07:40:15:
                    05:17:f5:1a:1b:d2:81:a1:4c:5a:33:74:84:3a:6f:
                    78:b3:62:4c:0c:06:a1:47:34:a7:0c:f9:19:03:02:
                    67:11:6a:3c:7c:08:50:4b:f4:51:8a:35:4b:4f:f7:
                    8c:0a:85:14:8e:eb:b1:47:8d:4a:07:17:8b:09:a2:
                    ed:ae:7a:69:6c:43:7e:50:ec:b6:df:68:cc:57:1e:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CE:65:F2:DC:E2:FC:C5:20:D2:BD:CD:8B:4B:43:C2:11:DC:C6:9D
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:4e:cd:23:a2:f3:57:fc:72:77:68:07:49:68:3b:0c:8b:
         02:a5:88:cc:e3:12:f4:8e:e6:eb:41:99:a5:55:35:b5:7d:a2:
         6a:a4:fc:49:ea:de:53:06:50:7d:22:14:c9:84:ba:e0:85:ec:
         5a:bb:af:dd:79:f0:31:e6:77:a0:79:35:f4:0d:ae:bb:17:7f:
         bd:7d:e7:80:bb:f2:2a:e2:d3:be:a3:79:77:b5:2a:ad:93:23:
         4e:3f:fd:6a:4a:40:bd:8a:38:6e:69:fb:24:dd:70:fb:8c:86:
         6c:cd:b8:0d:58:f9:01:31:7c:c3:40:53:0e:38:a6:4d:3d:6f:
         e3:be:e9:b7:7f:6a:a9:f2:1c:fa:7b:4a:bc:35:90:db:77:a2:
         7c:2c:94:b7:fe:a8:e8:85:b7:fa:3c:4a:ab:b6:57:4b:be:93:
         52:6b:e0:11:b2:25:8b:38:64:6e:de:2b:a5:f7:10:83:be:21:
         8a:6d:ea:83:fb:0d:eb:4b:4e:ec:ba:87:be:f4:c5:3b:f2:12:
         9a:9a:18:89:de:2d:c1:b7:a0:b1:d5:c7:28:e0:86:7e:98:ca:
         7e:6a:f4:01:3e:7e:2c:63:9f:a7:57:26:ec:6d:91:a4:5c:c1:
         c9:5a:b8:50:27:0b:cd:47:c3:c0:ed:21:9c:a5:65:54:ff:da:
         45:32:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org