Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
File:                     er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json)
Hash identifier:          4aWNUx4xhJsX0VuMP348XRpHVEvVv2laNiqiqzpn+gQ=
Subject key identifier:   71:53:C2:D6:7A:22:6C:92:E0:19:97:5B:7D:1B:50:74:C7:69:F6:BC
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Certificate issuer:       /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial:       03DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
Manifest number:          03D7
Signing time:             Sun 19 May 2024 02:21:27 +0000
Manifest this update:     Sun 19 May 2024 02:21:26 +0000
Manifest next update:     Sun 26 May 2024 02:21:26 +0000
Files and hashes:         1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: OWPEl6TvHm8JFX0lB+eEBorck1vSe/0N35FA8Dc0PHs=)
                          2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: LnHKmwGp8aCuXv2MpEec+GzNTX2xZYK5a57AEcKO+a0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
                          rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
        Validity
            Not Before: May 19 02:21:26 2024 GMT
            Not After : May 26 02:21:26 2024 GMT
        Subject: CN=66496227-7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:3b:77:2d:9c:d1:f9:7a:64:9a:f6:db:86:
                    50:73:63:57:14:06:f1:84:c7:53:80:f6:b5:11:b7:
                    71:ca:10:00:8f:1d:3d:4c:20:07:7f:71:53:67:c9:
                    67:cd:8e:36:fe:38:0b:85:fa:f8:37:d9:f1:31:f2:
                    5f:80:1b:c5:de:f5:71:d5:75:0f:75:8a:b8:c9:55:
                    30:c5:b3:97:65:0f:35:f7:59:d9:ad:dc:f0:7d:bc:
                    47:b4:a0:be:20:ff:24:2d:6a:ae:ff:cc:5a:69:cc:
                    1a:e6:d5:38:9f:7d:ce:b9:c6:9a:4f:79:f6:85:93:
                    ea:78:ae:26:1e:ba:bc:5f:ef:a4:a5:82:c2:87:9a:
                    6d:db:76:31:4b:a1:42:60:f7:a2:25:49:a2:3f:29:
                    2f:b4:a2:2e:df:76:a9:09:e2:a0:b9:90:81:e7:c7:
                    58:de:9e:35:d3:39:2e:8e:e7:16:19:f9:a6:d5:1d:
                    a6:30:ed:28:63:12:79:cb:09:de:d9:64:a4:f2:2e:
                    d0:29:cc:44:76:d2:12:45:fd:3c:0a:89:92:4c:a1:
                    e8:64:72:ad:62:57:67:28:f3:06:78:3f:26:87:97:
                    46:3f:d3:ab:c4:47:b3:bf:62:5e:7d:97:dd:36:17:
                    a1:08:cd:a1:1e:bf:66:8e:12:b9:b9:14:b0:d7:ea:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:C2:D6:7A:22:6C:92:E0:19:97:5B:7D:1B:50:74:C7:69:F6:BC
            X509v3 Authority Key Identifier:
                keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:aa:a7:b2:de:c2:a1:e7:3e:cc:bb:78:2d:23:be:14:ba:
         1b:5d:77:f7:cb:b1:f1:48:47:e1:50:fd:b9:12:8a:45:1b:f6:
         41:d0:b2:61:c2:4d:4f:d6:3e:fd:98:ff:33:90:8f:f1:b9:71:
         59:1b:98:60:91:cf:9d:8e:95:01:19:ed:f6:29:f7:cf:07:de:
         5b:24:d3:a4:2b:46:de:db:66:27:fe:70:a0:31:f3:fe:f1:95:
         86:b5:7a:fe:17:5a:7c:ea:c7:b3:3e:5b:01:dc:18:76:0d:30:
         37:b4:dc:c0:b3:88:5d:64:37:81:8d:b4:3c:9f:ed:b7:69:4a:
         75:2b:4d:50:1e:37:38:94:09:00:b5:32:78:48:55:bd:1e:af:
         b9:80:00:59:57:d1:d4:e2:ea:aa:02:00:60:a2:23:73:fc:42:
         23:79:5f:ab:bb:2a:48:c4:ba:52:8f:a4:b6:12:79:0f:8f:da:
         b5:48:05:d1:af:38:9c:59:25:c3:8b:ab:f9:14:58:90:6d:74:
         19:63:b7:11:26:07:44:e2:09:96:08:39:44:9c:89:ff:d3:da:
         6c:b3:de:40:8e:22:8b:5f:9c:fb:8b:12:ba:21:52:52:e2:a3:
         6b:f1:18:d5:cb:0b:74:2e:e9:be:36:77:72:7e:78:fc:5a:e6:
         bc:95:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org