Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File:                     gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier:          niHxVWZdpSrKWLUGs5Qo1/ePKoLLliEuQJe4g6FG4to=
Subject key identifier:   EA:B8:6C:07:BA:F2:33:94:0D:AC:57:64:41:C9:67:1F:CB:D9:8B:9C
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer:       /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial:       0A7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number:          0A77
Signing time:             Sat 18 May 2024 20:16:46 +0000
Manifest this update:     Sat 18 May 2024 20:16:45 +0000
Manifest next update:     Sat 25 May 2024 20:16:45 +0000
Files and hashes:         1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: +lfDeZxPWixFO73aUOqhH0j9w5AHHDMyYOIaSmyOJvY=)
                          2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: ztloz+dHdgosHz2X9DnF4KKOUlzK5tHYHr9IDgICbBo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
                          rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684 (0xa7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
        Validity
            Not Before: May 18 20:16:45 2024 GMT
            Not After : May 25 20:16:45 2024 GMT
        Subject: CN=66490cad-b021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:07:b7:aa:cb:67:45:93:39:26:2d:cf:42:
                    29:fe:8a:30:e3:d9:f0:44:bd:62:bc:c5:3e:98:c3:
                    f6:65:12:95:8c:6b:7a:25:ec:5d:be:5c:e1:06:4c:
                    2d:f4:41:61:91:d9:27:4d:b9:76:db:05:9c:ba:06:
                    19:34:6c:9e:57:66:5f:7a:96:6e:85:9c:01:17:dc:
                    ae:15:b6:ec:8a:b4:0b:3b:ae:c5:f3:e8:94:46:df:
                    c7:7c:47:74:48:92:73:1b:11:1e:09:ca:8a:53:6a:
                    56:51:09:6b:1c:8a:1d:cf:05:4f:18:ce:94:29:a7:
                    47:5b:ef:ef:37:36:2f:ac:e2:7b:ca:10:6d:92:76:
                    83:cd:0e:53:71:76:93:54:84:6d:aa:c9:60:32:2f:
                    c7:d1:10:39:f1:0e:fb:6e:39:1c:05:3b:36:15:4f:
                    97:c6:b7:57:a8:00:b4:31:41:50:01:a8:bd:e6:75:
                    2f:8d:5a:80:69:84:b8:47:fe:01:bf:a5:60:4c:58:
                    a8:fb:44:bc:72:b5:a4:4c:2f:5c:f6:41:01:89:0b:
                    e4:dc:60:4d:4d:9b:97:e6:b2:f7:00:c2:e9:b3:72:
                    d1:7c:8e:63:e8:9e:74:2d:58:9f:25:bc:27:83:42:
                    78:bb:cd:69:32:8a:87:d8:fa:e1:0a:97:f7:19:f4:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:6C:07:BA:F2:33:94:0D:AC:57:64:41:C9:67:1F:CB:D9:8B:9C
            X509v3 Authority Key Identifier:
                keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:aa:69:b2:e5:67:66:c1:43:5b:4a:cb:a8:0b:dd:cb:62:
         a3:d8:85:4e:6b:75:ed:ac:5f:cf:57:27:36:d1:f6:f0:d7:0b:
         0d:f7:c0:75:19:79:fd:6b:91:85:fc:f8:28:82:1f:a2:6c:54:
         a2:8e:4b:a8:05:86:95:30:98:ca:43:3a:71:f3:95:30:32:ff:
         1b:19:db:d9:a7:d5:50:83:64:a5:e2:dd:af:bc:a6:be:c1:90:
         ee:b1:40:14:69:70:bc:d7:6c:e2:73:56:b5:63:85:18:c7:ef:
         86:c2:ee:fe:9b:1d:22:28:2c:dd:e4:0e:ff:41:75:1b:c3:22:
         f9:d4:4c:ed:bd:78:e0:e8:8d:6f:c6:29:00:f0:db:34:80:a5:
         e2:c9:14:05:48:6d:86:f1:e7:bc:13:dc:65:09:8e:23:3b:8b:
         a2:58:0d:11:92:00:8c:83:b9:32:8a:db:1c:02:e5:5e:87:e5:
         c0:df:f4:04:4f:5a:19:e7:a2:6c:5b:c8:f1:ce:c5:32:c1:4e:
         e7:03:bc:50:6b:c3:31:b8:52:0c:b4:af:5c:c4:3d:ee:29:f0:
         8c:c0:ff:d9:ea:38:85:a2:ff:79:93:97:00:88:21:97:85:b3:
         1a:6a:68:af:cf:63:f6:f2:fc:7e:7b:a2:aa:67:ee:00:b3:32:
         d6:71:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org