Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          QW8kfmyKemY2YFcXtzk9zi8TKAv//n1tmoIZBWEDzYY=
Subject key identifier:   CE:47:26:72:2E:F7:08:14:DD:2B:02:01:37:BA:D6:72:F4:05:1D:0D
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       05E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          05A5
Signing time:             Sun 19 May 2024 00:44:15 +0000
Manifest this update:     Sun 19 May 2024 00:44:14 +0000
Manifest next update:     Sun 26 May 2024 00:44:14 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: /obKIyHJ/oSmQmD9mwjgxBi2VZRQg/zDMd/yHQz0dc8=)
                          2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: ImKwB/9i7zC4SulkNS0V0K2Y4dtluGwCFfX377ZAOBo=)
                          3: DA1FAC58A19011EBAA68DE2EC4F9AE02.roa (hash: f4GbG2cwuMx6aHcaTw2AMR25/MASNLaicolXwsZ5js4=)
                          4: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: L5HhGa/7Bohxoa/abrfTvc6lWXlIabMsvk31fKX6G9M=)
                          5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: V08W++GItVQJtupzRq0Un7PAFXQUxEvHx8HXvaaLg4o=)
                          6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: g2vv7AHTfE7hgVuhQQ+LRP82Za1gQekByhs+A7odt4o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: May 19 00:44:14 2024 GMT
            Not After : May 26 00:44:14 2024 GMT
        Subject: CN=66494b5f-45cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:6c:ef:21:e8:03:c2:b0:50:93:c6:d4:bc:
                    42:c6:9a:60:f7:25:c9:af:ef:17:3a:c2:c3:f8:54:
                    bd:bd:d3:57:0b:40:bf:14:7d:46:e9:4e:88:01:4a:
                    33:12:9c:d2:69:a0:d6:09:da:45:92:14:bc:c5:fa:
                    75:9e:da:57:43:c1:2d:61:6a:60:66:94:a3:70:09:
                    59:c6:bd:d0:e2:2e:cb:e0:ee:cc:49:e3:c8:8e:07:
                    31:e4:9f:94:9a:54:2b:ef:27:9b:d5:62:46:52:3d:
                    85:6a:cc:a4:65:fe:0d:64:fd:15:29:d7:c4:12:9a:
                    ef:bb:46:31:2d:2c:23:31:84:f0:0d:07:24:ea:76:
                    be:47:37:12:6e:59:7a:28:1c:d4:6b:03:41:ff:db:
                    f9:61:f2:95:a4:f4:46:ae:2f:c6:7a:d5:11:ab:03:
                    c1:56:e4:11:62:c2:7a:aa:7a:12:af:ac:ac:3f:27:
                    b0:ab:eb:f7:64:28:e1:0b:c1:c8:7f:ac:07:18:3a:
                    7b:ed:ac:b7:cc:1d:22:b6:18:b6:cf:e2:4d:e6:ba:
                    e1:3f:e7:d5:3c:8e:08:cd:1b:38:5a:5e:a5:38:3b:
                    fe:fc:63:2f:e2:3a:40:3d:98:26:6e:9a:e1:35:32:
                    02:92:ab:41:4f:45:f1:9d:35:26:59:10:3a:2b:c3:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:26:72:2E:F7:08:14:DD:2B:02:01:37:BA:D6:72:F4:05:1D:0D
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:1c:6c:8b:14:7f:c2:30:1e:a1:60:77:41:a2:9c:1c:de:
         9d:7f:dc:63:05:a9:04:fb:8d:f8:9f:34:83:fb:ca:01:6f:fa:
         86:96:d3:2b:0b:23:cb:83:77:a6:70:d2:0f:8b:43:21:c9:94:
         e0:c7:9e:41:7a:dd:9c:b5:05:c2:9d:10:cf:2e:83:d6:23:87:
         80:aa:7b:8e:b4:da:24:22:a1:be:db:0e:ff:c7:87:eb:c6:65:
         9d:96:01:dd:81:04:42:20:06:a5:e9:d3:a2:70:f3:71:30:29:
         f3:85:6b:41:3e:88:52:f8:94:23:e8:af:d9:50:64:65:8c:f7:
         49:82:a3:ed:74:bf:04:65:25:5c:6c:6c:4b:1b:b6:4c:c0:ff:
         b0:7e:55:e8:70:c2:f8:2d:2a:2c:85:b5:bf:f4:ef:7d:b3:e5:
         20:bf:04:14:77:04:4e:62:51:38:21:63:77:17:bc:1d:c0:77:
         b5:86:14:bb:ef:b2:59:de:1d:ef:d1:42:b8:e2:33:d4:44:de:
         be:52:30:3e:ba:3d:8c:91:6e:48:c9:c7:4f:f7:6c:0f:6e:ee:
         33:52:00:32:e4:73:69:87:51:94:4c:f2:f9:d1:0a:0a:c3:58:
         ad:84:28:14:a9:4d:51:e1:a5:9c:db:fe:2b:b7:c1:ee:54:88:
         fd:ed:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org