Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File:                     4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier:          ev9+SihfNxSAUcl7m7ie8yYNAQ4Qe4+Lyh3Vg/PJ1y8=
Subject key identifier:   7C:62:F4:53:B5:83:90:1B:BC:A2:58:38:60:F4:E7:5E:0B:13:AF:33
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer:       /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial:       0B75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number:          0B57
Signing time:             Fri 31 May 2024 20:22:19 +0000
Manifest this update:     Fri 31 May 2024 20:22:18 +0000
Manifest next update:     Fri 07 Jun 2024 20:22:18 +0000
Files and hashes:         1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: S8UQ7K5arexFaSWUaR3AtLIc1N26GhL3usHZ1VY+nXY=)
                          2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: T/McJ5En79O5emQR3B04RpPV6mswqcUCGzmxSn4YxJs=)
                          3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: CNGsqoztjTbrkhU2KUlENyCvY9hpR0eOtsVpUByDXno=)
                          4: 140E693613BF11ECA64D821AC4F9AE02.roa (hash: xm/w/oPJ3AzyQi0qyiNFGzq6ZLvojh9/dJGPYUqz8nw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
                          rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
        Validity
            Not Before: May 31 20:22:18 2024 GMT
            Not After : Jun  7 20:22:18 2024 GMT
        Subject: CN=665a317b-3e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:6f:66:ae:66:98:b7:b5:b5:25:1c:ea:22:
                    5f:ea:1e:de:24:3d:57:27:e1:d7:3b:ec:7d:9c:35:
                    83:91:88:f2:e0:32:91:56:fe:17:08:76:c1:b3:ee:
                    3a:ee:c6:6f:15:e8:a4:8d:99:36:99:d7:5b:f9:e3:
                    a0:6f:d9:c1:0c:58:b6:f0:63:1f:88:ed:7f:b7:fc:
                    33:4d:86:5a:b5:41:91:3c:83:11:7e:ff:af:b5:6c:
                    7b:a4:a8:ad:6f:9c:35:dd:2a:f5:f9:07:04:94:8c:
                    0f:88:38:3c:33:20:0f:9a:7e:a4:b4:8a:e3:b0:b7:
                    a3:9f:e6:ca:0c:f9:d2:93:ea:13:d0:b6:25:c2:df:
                    50:42:60:95:10:e7:ce:03:d6:14:0d:f3:bc:e2:0e:
                    61:27:d0:38:d1:b7:19:d0:04:4e:7b:43:2d:dc:7c:
                    82:30:95:37:c2:b0:d1:2d:bf:9a:53:a3:26:c0:39:
                    6c:a8:55:41:20:c1:8a:4a:58:f0:30:ca:23:5c:97:
                    91:ff:2c:b8:5d:e1:77:08:a4:16:26:02:fa:6a:44:
                    4c:f7:3d:79:00:5d:2b:79:ca:64:a1:6d:38:a9:57:
                    24:63:05:a4:f3:af:88:86:97:5c:e0:94:b9:58:10:
                    24:16:0e:3d:e6:24:c2:e4:94:51:8f:0f:f5:0a:89:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:F4:53:B5:83:90:1B:BC:A2:58:38:60:F4:E7:5E:0B:13:AF:33
            X509v3 Authority Key Identifier:
                keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:b8:75:a0:e0:6a:b7:d6:e7:a4:35:e9:3e:84:12:99:a3:
         78:b9:7a:69:ee:3a:8f:b1:16:75:98:12:1a:21:c8:e2:19:4e:
         3a:b9:b0:8d:9f:79:a4:45:5f:91:39:ad:14:3c:33:73:1e:1f:
         3f:86:7c:bd:20:2f:30:55:47:a2:ad:54:6a:ad:5d:15:f1:cd:
         cb:e9:22:e1:16:a7:1f:5a:2a:2a:ca:85:cd:b8:2f:9e:4c:62:
         64:28:ff:f1:4a:5a:c8:d6:65:22:16:48:bf:97:1a:e9:3c:f7:
         e0:5b:a4:32:0f:2e:0d:d8:f7:45:c9:d5:d8:9a:74:c5:da:7f:
         be:03:c4:13:c7:d7:a0:0b:63:e7:be:47:c9:ef:72:f7:b7:15:
         ad:c3:d7:f4:73:76:04:58:2a:e4:39:24:17:63:88:c2:17:da:
         79:61:5a:2b:28:a9:9c:71:10:ae:05:50:9f:8d:4b:0d:cd:fe:
         f3:07:4c:b7:dc:a3:87:15:35:0c:14:46:80:94:d1:90:ec:35:
         af:f7:ba:09:bd:2a:80:01:43:bc:2a:97:f4:43:f8:ad:1e:85:
         2c:74:42:7d:a4:50:02:f2:d3:8d:a2:03:93:60:a5:11:93:00:
         33:78:ee:a3:fc:af:f6:b5:d5:9c:b5:93:93:41:bb:fc:0a:fc:
         fd:b6:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:13 2024 by rpki-client on console-ams.rpki-client.org