Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          JYrYgVJVyn5ZxqFU+9jkjmxr2U+mAuUPRCLVGvD0upE=
Subject key identifier:   E4:7C:D0:B5:71:DE:B7:12:49:84:C1:F6:2A:DF:F9:F2:14:FC:B2:ED
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1C3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1BF8
Signing time:             Thu 30 May 2024 16:51:54 +0000
Manifest this update:     Thu 30 May 2024 16:51:53 +0000
Manifest next update:     Thu 06 Jun 2024 16:51:53 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: yA8puRswV9i7FkMMrKrqSHxcxCUsQBp0tLaeukpMflU=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: ccsih6dIuGpMmIzHTnKQ4PHzVF7wOjrx1SxnIsoMw9g=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: V4196ZhhCxsgU9zTQc0AU9DRoJSebxB0m+8UFFMd4zo=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: 6QyrLiYdmPVKVZ04ZM/uROUMIymbGXKsJrVxO9cCM4c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 16:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7228 (0x1c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: May 30 16:51:53 2024 GMT
            Not After : Jun  6 16:51:53 2024 GMT
        Subject: CN=6658aeaa-3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:29:b9:c1:a6:13:33:55:21:ee:4f:8e:53:
                    3d:d0:4a:44:1b:f4:c9:52:04:02:5c:89:d3:f4:95:
                    b7:5f:10:73:06:24:da:57:33:76:5c:e8:d8:d3:6d:
                    4b:91:ac:65:cc:cb:f2:e6:eb:ee:c2:e9:c3:2f:63:
                    fb:f9:13:08:2a:f0:2a:29:c5:58:6e:57:03:8d:bd:
                    74:14:79:da:47:19:e9:4e:f9:ae:0d:7d:bc:7b:21:
                    46:b0:c7:7c:1b:58:71:b9:3e:65:84:e0:7a:01:75:
                    72:4b:90:5f:6d:19:4e:df:24:f6:c0:aa:cc:dd:61:
                    83:2e:c7:06:1f:df:50:4c:50:bd:47:91:ef:0a:8e:
                    f3:37:0e:dc:a3:b0:38:a9:9a:c7:ba:97:51:18:a8:
                    01:ad:37:d5:a3:8b:74:40:07:55:83:5d:1d:6a:5f:
                    63:1a:5a:3d:37:da:9c:00:6c:39:05:d7:ce:78:61:
                    94:4d:31:5a:a6:7c:5b:01:5d:f7:c4:57:0f:ac:32:
                    38:3d:85:48:1d:66:0e:30:f1:fe:42:fc:49:97:13:
                    c3:b4:c2:be:51:40:84:5a:ba:85:19:78:26:4f:85:
                    f1:aa:39:5e:44:46:eb:74:61:d2:6a:6a:cd:62:1b:
                    a5:38:13:0b:5c:4f:1c:1f:66:e4:60:45:6f:41:99:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7C:D0:B5:71:DE:B7:12:49:84:C1:F6:2A:DF:F9:F2:14:FC:B2:ED
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:c0:1c:d5:aa:ce:0c:85:22:fd:ba:66:40:10:d7:e6:d1:
         b2:08:8b:6c:9e:92:32:4f:07:8e:73:e9:d7:7b:fc:15:03:14:
         71:3e:8c:ce:ba:54:1e:2c:f7:2a:c6:41:d5:8c:e1:f3:ee:be:
         ed:35:43:6e:19:ac:cd:b1:c7:5c:19:74:18:31:95:0e:e9:ee:
         43:0f:23:f4:ce:ab:0c:94:bc:aa:a9:23:d9:f4:29:45:bd:20:
         c2:27:b0:42:39:30:67:42:a8:e9:66:e5:d5:05:5d:3c:b9:4f:
         28:12:39:51:b5:46:91:14:45:be:4c:d0:79:a1:df:84:ac:c2:
         4b:a8:4d:c2:f0:10:8e:cb:ce:24:fd:06:ab:b4:9e:86:76:98:
         b1:19:e1:c8:c3:45:22:41:a4:7f:ac:a4:72:d2:e7:69:53:93:
         61:ef:64:cd:17:37:b9:c3:93:1d:8c:a4:e9:30:b1:e3:1c:18:
         36:dd:08:58:6a:39:3f:1d:02:0a:fd:63:4b:92:d8:32:cf:c0:
         37:13:8b:93:f4:23:43:41:82:43:ae:d8:19:a1:10:9e:e2:bd:
         7b:bd:65:c0:cd:ff:62:4a:ce:a8:05:e3:b0:c4:bf:e4:f3:93:
         10:5d:c9:cc:c9:58:37:32:21:44:52:a3:ca:46:ea:4e:90:98:
         9d:4f:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:33:08 2024 by rpki-client on console-fra.rpki-client.org