Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
File:                     6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json)
Hash identifier:          xgyW7FJqFpPmzwiVU3uhf/rNyu8DYngeQDR3dDwFkRM=
Subject key identifier:   65:1D:62:A7:69:E9:6D:3D:53:96:80:B9:4C:7A:C5:83:38:E3:9C:F0
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Certificate issuer:       /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
Manifest number:          19
Signing time:             Sun 19 May 2024 08:41:38 +0000
Manifest this update:     Sun 19 May 2024 08:41:37 +0000
Manifest next update:     Sun 26 May 2024 08:41:37 +0000
Files and hashes:         1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: OJcIniHGzfwz1++l0oB/nnVWeGIb/zou8iWw7ZNGrJQ=)
                          2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: s6P4CG/Z0X/yIq3+GVwhH8LKJhuD7YhzpQtQWWAe748=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
                          rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
        Validity
            Not Before: May 19 08:41:37 2024 GMT
            Not After : May 26 08:41:37 2024 GMT
        Subject: CN=6649bb42-9f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:3d:cc:0a:5a:8a:88:06:b3:cd:7e:9a:33:
                    5b:d4:7b:22:7c:84:b7:a8:8b:aa:5a:54:84:66:3a:
                    1f:8a:a3:ac:70:4b:2e:69:29:cb:2d:22:07:74:21:
                    77:57:32:bf:62:b7:ef:f1:ae:6f:0a:15:f2:f2:94:
                    ed:f7:65:08:c4:0a:e6:ab:2c:11:1b:5e:66:e7:d5:
                    3a:44:c0:39:ef:f5:31:87:8b:de:e9:d3:6d:e4:a0:
                    f9:c7:9a:44:7c:f1:92:02:77:ea:2f:ae:7d:8d:27:
                    7b:21:f7:83:ae:03:d7:eb:18:cf:e4:29:cc:ee:d1:
                    87:17:56:c2:26:69:7c:6c:59:40:ef:cb:c3:2c:0d:
                    6a:5f:c1:dc:e7:2b:30:05:ab:3d:e3:d0:6d:56:84:
                    d5:a1:e6:82:8a:36:ac:c2:8b:b0:57:06:94:1e:cf:
                    a4:ae:36:11:a3:c2:f7:f3:e1:2b:86:8c:d1:ff:84:
                    ce:77:13:85:60:70:25:e1:68:85:1f:e9:4b:55:37:
                    6e:f9:9c:8f:e6:e5:e5:72:7a:6d:33:8d:0e:58:71:
                    4e:a0:89:9b:73:be:ef:3e:03:86:bb:51:6a:ba:16:
                    47:39:7f:94:cf:a4:aa:48:3a:8b:b3:e2:95:31:0b:
                    bd:81:12:eb:70:5f:96:2d:b1:2f:5d:fa:81:df:1a:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:62:A7:69:E9:6D:3D:53:96:80:B9:4C:7A:C5:83:38:E3:9C:F0
            X509v3 Authority Key Identifier:
                keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:48:8d:fa:ee:3e:12:03:8e:fb:82:2a:ba:cf:20:99:e3:
         f3:9d:b1:b7:2d:c7:f0:bf:17:f6:8c:59:a5:74:c0:82:12:df:
         97:1c:5f:83:39:6e:1e:f3:63:06:e2:7a:06:fb:2d:7d:7d:00:
         37:90:dc:75:02:90:e0:0a:bb:59:af:26:60:d3:5f:da:ff:69:
         10:a0:01:d1:d4:68:ed:61:e9:04:9d:5d:c5:4d:4d:87:93:04:
         6f:c4:86:b4:00:90:72:ca:44:23:ad:c5:cf:d2:56:b1:4d:ea:
         0e:81:19:28:d5:56:b0:43:2d:9a:76:f4:d2:f2:99:54:4c:93:
         a4:94:eb:de:ed:d1:bf:0f:0a:0d:40:eb:35:48:ec:12:98:0d:
         b9:19:2e:73:5b:39:8e:5f:9f:9f:b8:42:aa:84:36:5f:6f:ce:
         c7:05:cf:33:37:f2:4b:7f:44:e2:43:53:43:e5:22:7f:c8:6f:
         b0:3e:a1:b6:67:e8:38:03:7f:a8:d7:0c:24:5e:c5:68:cf:c4:
         ad:b4:e9:6d:57:72:da:db:33:c9:f5:8f:83:3e:8d:95:8b:6d:
         da:ad:35:85:80:4c:07:55:72:f4:c8:56:da:fa:11:0b:d9:45:
         84:0b:79:39:9a:f4:93:b3:ce:5b:b2:9d:de:a8:6d:ca:93:91:
         22:d4:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org