Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          TQZdu7Yr194kTG0RyZC3xipRGH1gHf3EdQ11kpltsqM=
Subject key identifier:   3E:97:6D:32:C4:42:CC:69:46:46:49:68:FC:92:28:40:8C:93:56:84
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       06D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          06D0
Signing time:             Sat 18 May 2024 22:57:50 +0000
Manifest this update:     Sat 18 May 2024 22:57:50 +0000
Manifest next update:     Sat 25 May 2024 22:57:50 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: ZEQFwY0lmAYwgT4jV5+cRzIyQYmlDmscchRDJCyxCeI=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: lQuYTmzbWqVTipV5dBAW6RtYN+NeD8PEIlyhiPdwE1I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: May 18 22:57:50 2024 GMT
            Not After : May 25 22:57:50 2024 GMT
        Subject: CN=6649326e-8308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:36:df:8a:b4:0c:73:82:94:7c:93:f1:d9:
                    e4:5a:8d:0c:ad:46:79:21:07:26:c3:e3:69:65:78:
                    00:03:ef:79:35:d3:56:fd:a7:cf:2f:5e:59:1b:9b:
                    48:51:e5:c4:b5:16:54:7f:fe:03:80:1b:62:3e:6c:
                    e8:57:6b:36:41:fa:bd:85:62:2d:6c:76:a7:d3:d2:
                    44:87:d4:44:e9:b3:f3:bc:f4:ee:cd:d6:52:b2:30:
                    05:a1:0e:b3:19:fd:f9:6d:98:16:16:04:b5:e6:91:
                    7f:c8:28:7c:03:f1:44:74:5d:4e:e1:c5:b0:1e:f8:
                    a3:5e:48:33:78:e9:35:56:0f:52:23:60:96:a0:1d:
                    24:aa:5f:3f:89:98:e1:d6:fe:56:db:49:10:9f:82:
                    a7:3f:52:6e:d4:6d:0b:ab:66:3d:0d:f1:75:0f:c3:
                    37:74:4d:39:7c:7f:c2:24:2c:36:e7:3e:05:12:62:
                    4c:58:d2:82:9d:33:6b:ab:76:76:73:50:06:16:90:
                    e4:a1:19:9e:d5:fb:00:45:8a:c2:2f:2e:b6:ff:50:
                    3f:eb:d6:77:01:22:d6:82:f2:00:61:69:81:15:e6:
                    3e:d5:84:35:42:67:09:72:6f:b0:9b:35:35:c8:60:
                    5d:7c:db:88:fb:6b:9a:d6:26:84:15:ef:66:d8:15:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:6D:32:C4:42:CC:69:46:46:49:68:FC:92:28:40:8C:93:56:84
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:28:97:0d:6c:a7:68:32:48:1d:82:61:f0:2e:ac:f3:1d:57:
         83:ec:9f:ec:5c:8a:81:e8:b8:bf:d9:21:62:cb:76:9b:cd:b6:
         76:0e:aa:02:1f:02:a3:a3:74:e3:53:50:41:f8:3d:c7:04:33:
         f0:fd:11:87:eb:39:75:5f:b5:e7:8f:e0:11:7d:dc:72:f0:36:
         09:07:1b:d4:05:e5:b4:68:47:1d:fe:22:c7:48:e8:3b:61:57:
         3b:f7:ad:a2:99:25:85:f4:d6:58:6f:09:42:26:50:fd:97:f0:
         8f:5d:7c:d0:a4:13:42:1a:0d:68:f2:e4:39:72:47:23:4e:6c:
         32:ed:f5:ca:bd:06:7d:a3:f9:d4:f0:1d:ca:20:3f:7b:3b:71:
         31:fc:1c:03:c4:40:70:1a:88:60:fe:98:0f:1a:06:b1:a4:6a:
         a3:4a:e9:f9:19:fb:62:7d:c1:7e:33:a9:74:2c:0c:58:bb:69:
         98:7e:29:4d:09:46:2f:06:36:91:b7:37:af:9a:54:f8:3e:1f:
         a2:9e:30:b4:97:ce:f3:2e:be:6b:3c:e4:64:f4:f2:75:4f:34:
         eb:de:ad:ea:a7:00:2c:f0:78:d2:58:5e:ff:b5:ea:1d:66:43:
         d8:10:bc:5c:6f:3a:cc:23:a1:fe:b3:57:48:84:2e:45:ff:e8:
         b0:48:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org