Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          chzgJFuaJMeqjW+lmswu3jrlCA9cu81SW9eOMEscqjQ=
Subject key identifier:   FF:C7:F5:93:D9:A4:20:8A:CF:99:DD:AC:3C:C1:74:A7:18:BE:5B:80
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       0435
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          0426
Signing time:             Sun 19 May 2024 02:06:46 +0000
Manifest this update:     Sun 19 May 2024 02:06:45 +0000
Manifest next update:     Sun 26 May 2024 02:06:45 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: Wc5J2D7mqe8nChj0qw984oRqrP2GVLfn93JSfjzlkmY=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: g+v9/1+EEfr8WVYtjOZsScKu6pv6E6flFrJU7Lh7c1U=)
                          3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: z1wNhwt8Q03xCqDTkxRfznfEIbwzB0j4wuUvA09MAJ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: May 19 02:06:45 2024 GMT
            Not After : May 26 02:06:45 2024 GMT
        Subject: CN=66495eb6-67e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:fc:bb:4f:6b:c0:f5:eb:49:83:20:6e:1d:
                    ec:87:7a:9f:7e:58:c6:c9:56:3f:4d:fa:f7:b8:fb:
                    96:10:d2:ac:e3:5c:1c:da:1c:03:ad:b7:5e:70:b1:
                    69:1a:41:61:a0:50:cf:d9:2a:fd:4d:47:37:57:38:
                    68:da:45:c6:67:63:98:8a:f4:97:4a:7a:3f:d8:18:
                    2b:7b:fb:20:af:2a:ed:e9:d3:9b:c8:dd:fd:94:c0:
                    2e:a4:ea:7c:84:e8:bc:91:80:29:9f:69:56:11:05:
                    fa:06:28:ff:67:46:a2:ed:1e:4c:5d:e0:28:41:be:
                    0e:ad:4f:e0:43:18:08:24:e7:ac:ec:67:29:18:a0:
                    c9:09:23:c7:d2:21:39:56:8f:00:19:5c:91:11:c5:
                    ed:48:00:02:f5:0f:07:f1:dd:2e:ac:28:a7:53:95:
                    cb:fb:c5:4d:38:83:70:4c:a1:9e:4a:d3:59:5f:b4:
                    39:9d:0d:cd:fa:2c:cf:77:cb:48:b7:80:84:8f:c1:
                    01:28:4f:1d:11:f1:67:f1:c9:46:08:35:7f:c7:73:
                    ac:b6:a7:70:50:fa:6a:59:25:9e:49:ec:52:5d:c8:
                    99:9a:91:e6:3e:3d:d2:1a:9f:5a:47:e5:7d:c0:f7:
                    1d:39:23:b1:ae:45:39:08:be:58:dd:a7:c8:77:99:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:F5:93:D9:A4:20:8A:CF:99:DD:AC:3C:C1:74:A7:18:BE:5B:80
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:61:d4:5c:5c:55:97:d7:0b:59:c4:a5:dc:7b:2c:97:1a:6c:
         cc:fa:01:fb:70:2c:aa:10:57:16:cf:c2:23:c8:05:48:9b:67:
         43:d9:05:75:95:51:5b:43:61:99:01:a0:7c:2c:06:83:d0:c4:
         98:e8:e5:fe:bf:01:f2:6c:9d:10:b5:ce:66:1f:0b:05:14:c0:
         7e:28:02:d5:bb:f4:df:4b:15:6e:08:3c:59:b7:9f:1b:ff:94:
         c6:4d:59:c6:1c:95:46:3d:2c:06:55:25:ea:10:22:4a:a5:7d:
         f0:e3:70:28:f6:fa:54:9c:3f:2d:85:aa:75:f0:a1:7c:c5:03:
         9d:72:44:7b:5b:9b:c0:a8:b6:31:27:6f:c1:04:3f:a1:b9:09:
         80:ae:54:90:3a:82:3a:92:03:e5:fa:05:75:63:69:f6:9f:a0:
         42:7d:ad:9e:d9:e3:f4:7b:b3:4c:bc:ce:d2:b2:fb:af:cb:20:
         a4:9b:f8:54:8b:77:52:02:7b:5a:14:d8:40:54:37:fa:bb:12:
         15:16:9b:cf:f3:0e:3c:6f:67:c9:a6:04:7b:d8:f1:7f:fc:eb:
         64:ee:64:d9:fd:d1:2f:bf:b8:f6:56:2c:ef:23:4a:bd:e8:48:
         5c:27:ae:78:d6:74:4a:07:2e:10:60:ff:d2:b1:5e:b8:ce:8d:
         f5:55:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org