Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          5EHmMEPMvnvP+/aK6YXD2eElDcslyqakO61j3k6qFyc=
Subject key identifier:   A1:1F:0D:44:8A:D6:C7:7D:72:EC:BD:5D:2D:F1:89:16:91:89:AA:A7
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          BD
Signing time:             Sun 19 May 2024 06:34:42 +0000
Manifest this update:     Sun 19 May 2024 06:34:42 +0000
Manifest next update:     Sun 26 May 2024 06:34:42 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: ujCzNngmvyBqage2W/kNWeKwsL8q9lU/1nSJtFLw1SM=)
                          2: FD900592D48311EEBDE90527C4F9AE02.roa (hash: lIOCW7Fw9YZNv17dxnRG3SAZ1pN964vukL1FlB4NL4U=)
                          3: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: MYtW7jaPiaX/DhGKIM/d0LjNyF7kYZ3xOiGq3Jbn9nw=)
                          4: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: IfSW9ioeAo445UJXRu1BnE+a/WQJ1kswyRlF9uL7XZc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: May 19 06:34:42 2024 GMT
            Not After : May 26 06:34:42 2024 GMT
        Subject: CN=66499d82-7697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:00:80:80:01:34:58:3a:a0:64:98:51:bf:
                    98:4a:27:da:92:39:cb:e7:4d:c3:24:bb:d1:2a:52:
                    62:bd:0f:99:06:0d:48:75:d6:9c:4d:ce:da:94:d6:
                    32:a3:d1:13:3b:1f:84:83:19:76:72:84:72:30:c6:
                    22:c7:9b:ed:e4:fe:7a:4c:19:d0:60:a7:24:5e:1d:
                    d2:cf:aa:85:97:7a:0b:23:ad:f9:c5:d4:a0:70:88:
                    89:f3:11:97:e4:be:70:c7:30:72:8d:c3:b9:0c:86:
                    7f:3e:7c:b9:3d:da:1a:2b:9c:8c:58:fd:a8:2a:da:
                    a1:f9:9b:b3:74:e3:80:20:b8:e9:21:90:40:1e:6f:
                    33:a7:71:a1:08:f4:cd:2b:3b:c5:c7:5f:b5:64:91:
                    d5:d6:a4:41:53:a7:0f:72:a5:8c:31:fc:ce:db:ed:
                    48:30:95:9e:c5:bd:f9:93:4b:d0:45:a4:68:ec:7e:
                    af:76:03:36:5b:ee:07:ca:c3:be:94:76:d3:21:5a:
                    6e:4f:25:56:e8:d6:86:b9:7f:60:f3:21:5e:b7:ba:
                    a7:37:45:79:46:45:de:44:f2:eb:f6:19:09:85:86:
                    da:08:e2:4e:f1:ca:ae:77:3a:bd:1e:ed:48:49:6a:
                    42:1c:a6:ba:e5:49:31:fd:9f:d6:fe:66:79:1e:67:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:0D:44:8A:D6:C7:7D:72:EC:BD:5D:2D:F1:89:16:91:89:AA:A7
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:8a:4a:6d:49:38:4a:2f:54:22:74:f8:7c:52:87:aa:41:
         44:aa:c7:18:3d:1a:4e:41:74:10:61:e1:00:95:b1:58:e9:35:
         ed:38:bc:83:d5:8b:c4:6a:6a:23:85:8c:ce:ab:63:b3:21:7c:
         a8:ff:a2:b4:e4:79:2d:36:07:d1:dd:15:9d:f8:04:89:b7:b8:
         0e:ff:2e:84:1c:ba:71:25:8d:7b:c5:30:3b:21:ab:6d:85:fa:
         a5:15:97:43:f9:9b:9b:fc:76:27:0c:21:7c:78:50:06:87:c2:
         a8:a8:14:7f:69:bc:62:34:bb:f2:b3:c3:29:8f:d8:3a:e7:be:
         89:2c:a4:21:cf:cd:7a:8d:b5:89:8b:b6:8f:18:26:1a:04:82:
         5c:96:25:ed:93:6d:7a:37:3d:1b:2c:9b:1c:68:19:da:e0:db:
         bd:24:bd:92:d2:fd:b2:1c:95:f0:04:24:25:79:b8:89:31:49:
         25:1e:6c:30:e8:e4:1d:16:ca:ec:21:48:f4:7b:a2:78:2f:01:
         82:e6:b5:10:a1:d1:61:79:90:84:ee:54:b2:30:bc:f3:4a:0d:
         0a:6b:49:bd:92:8e:55:db:78:4f:5a:b4:24:b9:d0:7e:96:4d:
         cc:0a:cb:bd:91:14:ec:7e:08:f6:32:c3:17:40:19:c6:ac:8a:
         c3:4a:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org