Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File:                     k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier:          A4vGbfTJJRtXIPZDHVx5tEKYdtd5itLXq8JsskQU32o=
Subject key identifier:   39:40:F7:B2:37:1E:93:20:50:A2:6C:4A:8B:D9:F6:1D:C8:C1:B1:2E
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer:       /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number:          06B9
Signing time:             Sat 18 May 2024 23:06:14 +0000
Manifest this update:     Sat 18 May 2024 23:06:13 +0000
Manifest next update:     Sat 25 May 2024 23:06:13 +0000
Files and hashes:         1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: Jw/6p8APFgpQyRBNhJHzkhR3XqmLdZ5NFHPYxnvpl8E=)
                          2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: tCi4sTNWdGhkYKvcMojd+h98Zj7+c+j3I4OkdxfUUVM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
                          rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
        Validity
            Not Before: May 18 23:06:13 2024 GMT
            Not After : May 25 23:06:13 2024 GMT
        Subject: CN=66493465-2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:d0:0f:83:f8:f2:3c:3c:a3:a8:97:39:32:
                    1b:7c:20:52:94:90:88:6f:c3:83:ba:49:55:bd:af:
                    e1:4b:7b:83:8c:34:c7:f7:8b:e8:cb:15:b3:ca:f2:
                    a7:ac:1c:61:21:4c:5b:9b:f2:a9:f9:f8:b7:af:51:
                    c5:a1:7b:b9:0f:4a:03:7e:63:3a:a5:05:3c:e4:92:
                    49:44:4d:75:52:7f:ae:70:cd:ba:fb:f8:00:7f:ba:
                    83:22:79:7e:9f:9c:1b:16:21:5a:a8:a3:c6:21:1e:
                    59:1c:7f:de:e6:94:12:10:32:5c:8d:0e:4b:e9:0d:
                    ff:62:62:1d:98:e3:56:dd:57:8e:fd:0c:12:94:4d:
                    af:3f:d8:c0:fc:ff:04:38:dc:a6:21:72:c9:ed:f1:
                    26:47:ec:c6:57:b6:c3:40:6a:ae:ea:f4:5e:09:84:
                    25:62:2c:fb:17:bc:73:68:bd:8a:0e:83:64:29:a6:
                    e7:a7:8d:10:ca:7b:7f:66:30:7e:63:6d:18:33:fc:
                    aa:b5:40:fc:65:a2:bc:65:99:fa:26:5d:fe:60:83:
                    6c:de:10:3f:9a:19:30:44:31:c0:e4:53:69:0d:8d:
                    a1:0d:de:81:20:e1:82:82:0d:c7:e2:9c:a7:e8:59:
                    28:d5:62:00:50:11:81:b2:b0:f4:72:90:67:a2:10:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:F7:B2:37:1E:93:20:50:A2:6C:4A:8B:D9:F6:1D:C8:C1:B1:2E
            X509v3 Authority Key Identifier:
                keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:62:14:dd:72:c2:ee:c4:a8:c6:bf:33:1a:ae:c1:f4:e1:09:
         cb:36:64:7b:e9:61:9b:ec:b5:c9:f3:8b:f4:da:34:7c:77:f0:
         b0:f0:8b:d5:e8:15:c1:64:18:ce:80:e2:63:21:df:70:6c:56:
         a1:32:8d:5a:e9:86:2e:31:5f:8e:4e:27:94:b5:bd:1a:9c:0f:
         29:22:89:5a:3e:d7:5d:3a:7a:8f:54:d0:56:0a:c5:2b:b9:9b:
         ff:9e:21:bf:fa:cf:60:db:3f:3f:63:fc:2a:fb:2a:38:6c:13:
         92:cf:a6:52:0f:3b:02:47:ab:d2:cb:bf:d3:7d:01:72:76:59:
         34:f0:24:b5:81:de:0f:ff:a1:98:68:dc:59:eb:42:85:75:f3:
         f4:81:b3:83:c0:8b:9b:29:c9:2a:d5:32:79:97:57:8e:25:60:
         e3:fa:5d:05:b2:05:8e:fa:e2:ed:1a:71:71:0a:57:f1:d5:5c:
         5e:7a:2a:ec:6b:bd:f4:df:c3:92:50:37:51:37:ac:bf:3b:cc:
         16:d9:6f:fc:d7:1d:c3:af:b1:18:2a:99:94:93:d7:93:06:f4:
         47:bf:c6:aa:e9:cb:94:c1:78:6a:32:c6:74:36:69:3f:5b:8d:
         bb:32:b0:57:e6:8b:fa:a9:c2:c8:35:93:98:71:1f:a9:cc:3d:
         50:00:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org