Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          AQKjAei2QrG/X3H9ZAiEVQifHZ+x79L+GqhCC0+39Ac=
Subject key identifier:   31:94:3B:FB:B7:06:0F:A4:C7:CA:19:EC:50:5A:16:D3:88:FD:A1:66
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          99
Signing time:             Sun 19 May 2024 06:55:24 +0000
Manifest this update:     Sun 19 May 2024 06:55:23 +0000
Manifest next update:     Sun 26 May 2024 06:55:23 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 1+dFY31C0fI/V+En/hku9LGUhXJZMCmLleOmEEvNESk=)
                          2: 26F0D1C6328D11EEA04CD046C4F9AE02.roa (hash: abfqQV0s4z8RiwN1WmYH7XQJ0kzx0TA1S9FP7en+qbk=)
                          3: 4A7E507AC98F11EEB5F1645FC4F9AE02.roa (hash: 101Ub2UYlIGao1SGoVWwa+ZQdjC/nRpCQGv37d0yEIU=)
                          4: 2782423C328D11EEA04CD046C4F9AE02.roa (hash: Z09F5AzY1XvKD6n1eQLWNeIL3huNLLqxKKeU6qs2LwY=)
                          5: 47C21286E20311EEA9823814C4F9AE02.roa (hash: BO/9R4eeaU0uOGug16rEBmKzUDWP8siqXjtwv3CtjEg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: May 19 06:55:23 2024 GMT
            Not After : May 26 06:55:23 2024 GMT
        Subject: CN=6649a25c-16d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:9a:9f:0b:86:6a:9f:4d:2c:a0:91:c8:ed:
                    c3:59:ce:bd:1f:56:44:43:c4:62:fa:06:54:5b:87:
                    92:1a:ca:59:c9:dd:8a:f7:4f:64:0b:cb:b5:f5:39:
                    7c:4c:8c:72:73:6a:85:fc:52:4c:9f:e6:68:8f:e7:
                    39:19:f7:d3:41:fa:02:e2:6e:0a:3b:56:c0:50:49:
                    55:12:21:28:4d:7d:56:cc:37:7b:f8:67:4d:95:ca:
                    c7:98:40:1d:8d:8a:62:a8:51:e3:16:5e:37:97:ca:
                    2a:fa:53:d3:94:3d:15:7b:07:46:25:f2:40:34:e6:
                    cb:f8:b6:0a:92:87:17:7c:e2:30:3f:57:63:9a:08:
                    f8:a5:e4:58:66:b0:0a:f5:af:a9:0c:5c:7c:13:f8:
                    96:b4:54:f9:26:30:db:e8:b6:ef:25:7e:e9:01:36:
                    72:92:d5:c5:13:32:e4:3e:19:b4:74:e9:51:4b:1c:
                    ae:23:9a:fb:78:4e:3d:a8:75:4e:2e:53:9c:87:f7:
                    05:69:02:cf:36:2e:8b:2c:c2:5a:82:2b:22:5c:ad:
                    86:04:2b:39:09:e4:19:24:ac:0d:b2:86:0d:1c:b8:
                    ec:23:4f:a7:08:f9:80:f2:54:81:31:75:dd:9c:d5:
                    a1:2d:df:29:87:4c:e3:83:0b:0b:fa:7b:ee:48:78:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:3B:FB:B7:06:0F:A4:C7:CA:19:EC:50:5A:16:D3:88:FD:A1:66
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:2b:ed:56:f3:e9:97:19:43:e0:42:57:27:5c:bd:eb:6a:
         2b:b9:76:17:99:c6:ff:b2:93:01:83:15:0b:84:68:56:14:5d:
         ea:01:e3:f0:cd:ba:0d:f1:29:ea:3e:53:d6:98:59:59:90:e9:
         61:42:7c:ad:ba:89:3a:03:69:24:10:fc:c7:bc:0c:4b:1a:ca:
         a7:78:60:44:75:bc:cc:e9:ac:ae:14:a8:68:f3:92:e6:73:02:
         2b:38:3f:80:b0:48:87:82:6d:95:b4:89:9f:dd:b3:e3:0c:7c:
         89:00:a9:e5:43:3e:d6:9e:87:a7:47:8f:4c:cc:a2:25:a0:27:
         b3:80:89:d3:e5:ae:09:87:49:46:02:f9:ac:a1:b6:bc:da:84:
         73:ef:80:55:af:bf:2a:b9:c0:af:ab:8c:21:80:b2:88:1a:cf:
         0d:34:72:93:0f:21:2d:2e:7e:08:35:e2:e5:b0:0a:c6:19:74:
         e1:bb:eb:79:0b:33:6e:25:da:31:53:fc:9a:ab:a0:79:2b:45:
         a8:2f:af:63:10:b9:7b:97:7e:a3:32:9a:d3:e2:b7:ab:93:b4:
         e5:76:12:ee:be:07:6b:ae:d6:44:c0:5e:be:be:77:02:93:81:
         16:df:6d:12:5c:e2:7c:e8:22:15:f0:87:4b:04:ae:08:7e:68:
         bc:8b:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org