Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File:                     1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier:          aeUKhBDDYtjnqGCfq6nTQWPk3M3ON0pi8Ed7CaKlj50=
Subject key identifier:   9F:20:2E:F8:92:70:4F:6C:43:E0:F2:AC:62:E0:84:65:21:6E:D0:BD
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer:       /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number:          0191
Signing time:             Sun 19 May 2024 04:42:09 +0000
Manifest this update:     Sun 19 May 2024 04:42:09 +0000
Manifest next update:     Sun 26 May 2024 04:42:09 +0000
Files and hashes:         1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: q39DDlxuLS/dFzqphYUAm3H4PocgX8fo963cCAuM6WI=)
                          2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
        Validity
            Not Before: May 19 04:42:09 2024 GMT
            Not After : May 26 04:42:09 2024 GMT
        Subject: CN=66498321-f08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:ea:38:5f:2d:86:31:50:05:e2:e5:9b:02:
                    01:84:65:c9:12:2a:ef:c1:7e:15:2e:a3:12:32:07:
                    1f:d2:2c:aa:34:1a:c1:56:24:4d:e8:2e:7b:5f:04:
                    06:69:ab:17:08:13:b3:6d:a7:8a:be:94:d3:23:47:
                    86:01:89:0a:82:35:a9:38:6e:25:53:ef:58:d5:52:
                    93:e3:95:1c:57:ad:05:9f:60:f7:f7:8a:ae:5f:5b:
                    66:e1:74:e2:f8:ae:25:d1:78:33:19:ff:36:8f:07:
                    c1:f0:78:f4:d4:f7:0c:fd:99:25:57:bf:f8:6c:b1:
                    86:c7:c4:fa:67:aa:0c:97:af:3b:14:15:1b:f8:97:
                    7c:b3:ac:af:24:01:39:92:d4:38:44:f3:07:52:ac:
                    8a:c8:cc:95:5d:27:bd:10:71:b0:0a:78:58:b6:e5:
                    18:03:37:78:08:0a:82:db:e9:30:10:8f:9e:01:04:
                    af:f6:57:d1:48:8a:ef:5f:6c:b7:e9:f1:06:ee:03:
                    6f:e4:66:42:fe:82:f4:09:e7:59:71:46:d3:1b:b2:
                    aa:3c:c6:59:a5:ba:5e:1f:81:07:b2:15:4c:2d:05:
                    1f:50:ca:e8:52:49:f7:66:5f:04:5f:71:fd:33:a5:
                    05:78:80:41:78:aa:25:68:0a:b6:43:c4:41:69:68:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:20:2E:F8:92:70:4F:6C:43:E0:F2:AC:62:E0:84:65:21:6E:D0:BD
            X509v3 Authority Key Identifier:
                keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:47:ba:e6:01:12:82:a5:ce:ba:00:4b:02:12:84:9a:60:3c:
         4d:a4:b1:39:18:81:ed:de:c4:f4:88:63:ec:5f:a7:7e:02:29:
         b8:4c:82:e4:97:c4:c9:c7:7d:62:14:76:67:47:59:57:a3:ed:
         57:c9:9c:03:a0:ce:7c:26:26:00:fd:02:db:53:02:cc:9b:29:
         45:07:36:28:7a:be:c9:d4:f5:fd:8f:1f:74:e8:a3:31:5d:06:
         72:94:ae:18:33:48:de:cd:aa:46:27:61:cf:a2:75:60:e2:c4:
         d1:3d:c7:9f:79:b1:bd:43:ef:17:92:9a:28:29:95:98:89:7b:
         99:16:0f:45:2d:bc:87:27:4e:d2:2a:4c:8b:e2:1e:29:d7:e5:
         c5:a5:f2:e4:de:c8:53:26:97:4f:5b:f2:6d:96:df:79:5e:dd:
         9a:0e:f1:3d:d3:8b:be:de:2d:4d:a3:06:db:ec:78:5b:af:a9:
         a2:f7:41:7f:8d:55:3b:31:9c:c0:dd:a0:15:2e:97:de:98:3b:
         6b:db:e6:a6:61:4e:9e:52:43:90:ac:58:ce:7d:01:ba:f5:89:
         f2:b9:6b:4c:bc:dd:d9:22:95:e0:c6:ee:7e:9d:1c:e0:11:46:
         7d:36:02:50:de:b1:d8:6b:10:6b:ad:a8:bf:5e:04:d4:98:4a:
         85:5c:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org