Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
File:                     mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json)
Hash identifier:          UeL9r3nM5DTeGbmvcRHLb7nlpeO3zxv3y//chUZrc/c=
Subject key identifier:   AC:10:BC:02:78:45:C1:13:42:DA:D9:A9:92:50:A0:59:86:EC:E1:53
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Certificate issuer:       /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
Manifest number:          EE
Signing time:             Sun 19 May 2024 05:49:52 +0000
Manifest this update:     Sun 19 May 2024 05:49:51 +0000
Manifest next update:     Sun 26 May 2024 05:49:51 +0000
Files and hashes:         1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: 97MxWQ0mFg8fN7sOkYXusJBlnEobBNTUJPlVH4tf2fc=)
                          2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: Y7rwBbYTnchmBAucXdCEl+WBGxzWb608eKIUvJXWeXQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
                          rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
        Validity
            Not Before: May 19 05:49:51 2024 GMT
            Not After : May 26 05:49:51 2024 GMT
        Subject: CN=66499300-eed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:15:9d:58:72:42:7d:9e:57:f7:31:35:29:
                    fc:3b:89:72:40:92:91:6e:63:91:c6:7f:f7:a9:32:
                    f0:2c:79:1d:2f:5b:27:20:9b:54:02:b9:26:15:ef:
                    47:df:e9:90:d0:0c:25:99:e5:da:88:05:3c:73:91:
                    b0:88:f5:4a:06:b7:b6:39:67:3d:81:c5:3e:02:f9:
                    5f:5e:24:ef:4a:6f:fe:56:e6:33:24:3f:37:b7:84:
                    ab:ad:6e:92:01:88:e3:19:45:6f:08:85:f2:8f:88:
                    a7:c2:ea:a2:c4:42:cf:3b:9f:fa:dd:4c:01:14:ec:
                    ab:d7:36:8d:a0:6c:55:95:ef:b9:64:4b:22:a1:f8:
                    7e:d6:3a:d6:49:2f:74:ce:30:3d:e6:d5:c3:0f:ff:
                    17:89:6e:68:0f:5a:b3:20:55:b0:1c:43:19:b7:da:
                    60:c8:cb:c2:83:f5:a7:8c:be:0b:a6:e1:1f:dc:4f:
                    47:db:c4:4d:9d:a8:c1:5b:90:d5:46:53:66:15:cd:
                    71:46:4b:c1:06:fe:6a:d9:f4:fa:05:a4:7d:6d:7f:
                    12:a5:a1:79:0c:f0:b8:ba:e4:15:f5:a9:ab:f4:c2:
                    da:15:de:e5:f5:cb:9f:0f:f8:52:59:2f:7d:95:d1:
                    5c:93:2f:0b:b5:26:a6:99:75:b9:5b:09:4f:f6:5f:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:BC:02:78:45:C1:13:42:DA:D9:A9:92:50:A0:59:86:EC:E1:53
            X509v3 Authority Key Identifier:
                keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:aa:f1:24:a2:88:c1:8e:70:be:37:62:b2:dd:1c:6c:aa:
         28:66:e0:b0:e0:43:ec:42:0a:0f:d5:84:c6:cc:4a:20:0c:5e:
         9b:8a:78:d2:2a:29:c9:41:8b:2b:a6:8e:52:90:e9:7c:a8:b4:
         51:93:69:d8:5c:a6:e3:d2:c5:d1:f7:ed:04:ec:00:b4:bd:8e:
         aa:6a:47:03:5c:be:0f:ed:cc:13:96:1a:d9:af:14:bd:49:e2:
         a3:ea:72:29:3f:ce:3e:74:62:51:fb:31:10:ca:73:97:7c:b3:
         07:93:e8:43:7a:63:6c:f7:0e:14:d4:dc:26:27:ac:07:9f:95:
         65:de:45:bf:8b:a1:64:bd:f7:75:66:f9:2b:39:e6:30:10:47:
         c4:37:e0:f5:fb:d6:72:aa:57:dd:c7:3e:2c:b0:c7:98:cc:ed:
         02:8b:58:65:cb:de:70:bd:50:52:5f:08:e0:59:6d:42:87:02:
         8e:ff:f4:6d:df:f6:d0:7c:4a:48:93:b7:ed:28:00:5c:5a:09:
         a5:38:37:bc:f6:6b:59:60:b2:17:bb:b6:87:68:63:c5:a3:95:
         c9:5e:d4:6d:6d:bd:06:45:cd:1d:58:29:b3:b3:55:ea:3d:74:
         22:c1:d2:72:aa:b5:90:e9:a8:a7:b7:88:55:f0:82:99:a1:af:
         39:99:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org