Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          VmoOGxNLfPDPQAHfafccDUDSUKV7u9qA7ow96VNclZI=
Subject key identifier:   C3:4B:02:F0:7B:F8:F7:48:1E:9E:94:7A:C8:7C:6F:F6:66:54:D1:57
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       0618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          0614
Signing time:             Sat 18 May 2024 23:48:14 +0000
Manifest this update:     Sat 18 May 2024 23:48:13 +0000
Manifest next update:     Sat 25 May 2024 23:48:13 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: UhvaiMXA2jW8chi2vspH0vGB6RF+rWq0guYStufYGUs=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: T4vuLCrTzCjBiEjhthajjtBBQ8Q106LX1BqHkvFmGc0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: May 18 23:48:13 2024 GMT
            Not After : May 25 23:48:13 2024 GMT
        Subject: CN=66493e3e-06b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:85:f6:36:dd:3a:6c:65:2c:58:a7:6d:66:
                    2d:4a:ac:53:77:c7:7b:0b:d4:cd:8e:7d:5a:4d:e5:
                    fc:0b:19:c2:89:ae:db:6e:38:b0:cf:40:a5:5b:a1:
                    38:b0:d4:71:1d:53:fe:5d:65:a7:b0:d5:fd:b7:31:
                    5f:b4:6c:9b:c7:6f:c8:18:9f:a0:d7:e2:51:22:11:
                    33:7d:8a:f3:14:ad:82:06:50:ec:b4:8b:13:b2:a8:
                    20:3d:be:0f:27:2a:58:9d:94:9a:03:4e:1b:fe:7c:
                    45:fe:4a:d5:fd:9b:91:64:f4:cd:5d:7c:7e:2d:08:
                    c7:8d:29:97:28:2c:80:cd:db:56:8f:66:59:12:47:
                    2b:98:c7:6f:0c:5c:b1:20:20:b5:dc:a3:87:25:58:
                    58:78:e9:13:41:2e:37:77:b7:c1:9f:42:48:bb:66:
                    5d:81:18:c8:8b:da:6a:be:7b:d7:83:1e:5f:8f:b6:
                    82:b0:d6:4d:c0:52:e8:b7:7d:2f:37:3f:87:bb:33:
                    73:e8:c0:63:4c:18:e4:07:56:99:ed:24:5c:c1:e5:
                    dc:ec:d9:e0:ab:e1:49:f7:25:8c:0e:97:a2:3f:fe:
                    08:09:b6:33:7f:3b:47:44:cc:d8:2b:ef:1d:8d:5e:
                    09:4d:89:fc:8c:cb:c0:59:3a:a6:0f:31:14:c1:8f:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4B:02:F0:7B:F8:F7:48:1E:9E:94:7A:C8:7C:6F:F6:66:54:D1:57
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:08:fb:2e:e6:71:e9:55:c3:14:73:59:8f:17:38:6c:74:9c:
         4c:e3:82:e7:45:db:96:c8:87:49:dc:a6:2d:5a:18:e4:38:08:
         48:03:91:d7:8d:2c:b2:3a:3b:c4:13:01:2c:e3:8e:62:79:36:
         14:67:1b:5c:93:8e:3e:91:b1:c0:de:93:8f:60:11:20:30:d7:
         e6:ab:c9:83:a9:a6:51:90:9e:47:84:49:22:a3:bb:45:ea:81:
         17:91:8f:0b:c3:fd:9e:79:88:89:6a:9a:c5:f3:93:f4:b0:de:
         70:6e:cd:ac:be:b5:ac:92:2a:ae:2e:0c:f7:89:eb:66:76:9f:
         fb:cd:89:f5:f9:4e:3c:7c:b2:14:ce:be:74:5d:0e:f7:ee:b5:
         c7:5b:65:d4:0e:31:94:d7:74:3b:13:0e:03:25:1e:a8:1c:9e:
         b9:b4:17:af:42:68:61:09:2f:2d:0c:37:fd:df:fc:50:87:99:
         3a:9c:cf:f4:dd:13:bf:4b:3d:48:43:10:48:ad:f3:7f:31:09:
         60:67:5e:92:bc:e9:fd:2a:15:d9:ee:0f:2f:93:1e:46:4c:06:
         34:31:6c:6e:4c:c1:8e:e4:da:69:f2:86:0d:23:4a:2e:38:08:
         9a:4b:b4:2b:2b:2d:1a:7c:61:34:ca:0e:4a:37:14:cf:45:5f:
         94:b1:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org