Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
File:                     tLSrnzywRDD9ZNTuKt0IReRNV_8.mft (raw, json)
Hash identifier:          9chg2RskcSmz1RW25DBQrFVug+bkhjoQxuoybJ2o98w=
Subject key identifier:   2C:47:6B:65:9D:94:F7:DB:0F:79:F4:1C:7A:0C:26:EF:7A:2B:B4:D4
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Certificate issuer:       /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
Manifest number:          010C
Signing time:             Sun 19 May 2024 05:36:15 +0000
Manifest this update:     Sun 19 May 2024 05:36:15 +0000
Manifest next update:     Sun 26 May 2024 05:36:15 +0000
Files and hashes:         1: tLSrnzywRDD9ZNTuKt0IReRNV_8.crl (hash: OprQKl4KHvJciFtW4wTyhXjvWtvbMR6ef+gsOeZRyzM=)
                          2: D651D4FA144411EF9A5FBB3BC4F9AE02.roa (hash: GpDZ4wnlvO04eai2ECnPbbLdEXl3ZNh+P0DL4hO+7yY=)
                          3: 8758DC7409F711EF84476F36C4F9AE02.roa (hash: EpYwoAPjQlfcTmQ3O18s088qQB7NvyslMX1K5tubJ8E=)
                          4: 607F9B0609F711EFA32B3236C4F9AE02.roa (hash: 9WFcAYf+pP5QztXQ88SwgtZCY7aqeAK98+pQ2UPAUwg=)
                          5: 717DC7D4688011EEB1FB1959C4F9AE02.roa (hash: voTdqkVIgk5PrL5fF3IbG6qj2hjdu2WrO//xgYy60xA=)
                          6: 34C93324F8B211EEB9088A75C4F9AE02.roa (hash: 1FFvNKh1Awacr8s+sY4YAQXmMU9FD58//Y/2p9QbgM8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
                          rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
        Validity
            Not Before: May 19 05:36:15 2024 GMT
            Not After : May 26 05:36:15 2024 GMT
        Subject: CN=66498fcf-3e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:c2:1c:75:11:9e:c9:5c:2b:52:a9:29:8b:
                    35:28:ef:de:e1:38:89:82:89:ac:3d:75:3b:ff:b7:
                    52:83:01:d6:86:5c:74:af:24:af:34:4c:62:98:6d:
                    09:d1:47:66:b6:63:e5:4e:d0:90:27:19:df:9a:23:
                    3b:66:ff:8b:af:f9:71:3f:36:4e:08:3b:0e:92:8d:
                    e8:6a:3f:88:2f:30:5b:67:49:7e:17:04:63:2c:13:
                    12:d5:64:50:f6:03:d2:9a:e7:c8:ff:bc:05:d8:69:
                    f7:15:9e:44:ee:c0:79:3b:7e:fe:a2:b4:d8:5c:7f:
                    3b:3e:4e:eb:fa:8b:e5:25:56:a7:2c:5f:37:7c:04:
                    cb:9a:fe:ea:43:42:e8:90:ea:c0:ba:87:a4:f4:7e:
                    a6:7c:76:f6:77:07:b4:4c:4e:f7:94:22:4c:75:34:
                    c6:49:e9:83:79:ed:0b:80:61:cd:29:db:15:75:0c:
                    d5:a5:79:90:6e:f0:cc:65:53:9f:46:da:71:fe:43:
                    b9:40:b3:54:8b:75:f0:43:0c:df:a2:69:3b:44:55:
                    62:1c:b0:2b:32:d6:23:38:22:35:21:0f:bf:13:ba:
                    2e:52:ca:96:ce:2c:13:44:2c:ae:34:a1:2c:6b:03:
                    ab:a7:c8:08:e7:e2:88:52:ce:96:2d:2b:9b:26:06:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:6B:65:9D:94:F7:DB:0F:79:F4:1C:7A:0C:26:EF:7A:2B:B4:D4
            X509v3 Authority Key Identifier:
                keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bb:a8:e1:50:6c:1d:ba:63:44:07:5d:10:ae:d0:bc:8b:8b:
         eb:35:08:44:11:be:59:a8:89:9b:32:54:f2:09:d8:29:3a:cd:
         81:fa:83:a0:62:6e:5f:b6:69:15:1c:b4:bd:de:1b:79:00:96:
         66:68:4f:05:fb:67:0d:0d:39:03:a9:28:c3:26:aa:8a:6c:e3:
         ba:2e:13:e3:0a:98:11:e2:b1:49:5c:31:8c:d0:aa:4e:e0:6e:
         1c:13:42:bd:3a:f2:36:2b:9c:f3:5c:fb:28:bc:f2:47:ab:6e:
         c2:a5:de:0b:ce:1a:02:b8:28:8b:c6:40:f2:3d:cc:c8:56:4c:
         b2:8f:fd:c6:a8:9d:5c:59:15:e4:62:a5:bb:5b:2e:b1:81:63:
         50:91:5b:50:04:c8:77:e6:94:e5:1f:9e:10:fe:28:ff:7b:92:
         3f:91:0e:e1:b1:a2:bc:74:82:ab:86:23:a8:53:ab:32:6a:06:
         d5:25:1c:c6:52:16:ba:45:d3:9e:3a:3f:f2:3b:b3:a1:34:3a:
         27:47:8c:c2:46:47:98:63:a4:41:cd:ef:0b:c9:e1:e2:88:11:
         da:d1:13:b4:26:79:66:42:24:48:77:24:ec:0b:ef:eb:fe:e2:
         18:8a:55:fa:8d:59:60:46:10:03:6b:d4:ca:ae:34:03:fa:3e:
         64:3e:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org