Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
File:                     g1pslrIJJMfl2PEvBtud0j4lL10.mft (raw, json)
Hash identifier:          4Kwh6icmaVy9lrh1Qq6vxT8nBmhzVJmBpJWBg/Wi/Gw=
Subject key identifier:   AD:03:AF:A9:93:9B:01:64:D2:DB:AD:8B:9E:6A:88:C7:18:F8:CD:A7
Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
Certificate issuer:       /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Certificate serial:       04BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
Manifest number:          04B5
Signing time:             Sun 19 May 2024 01:31:48 +0000
Manifest this update:     Sun 19 May 2024 01:31:48 +0000
Manifest next update:     Sun 26 May 2024 01:31:48 +0000
Files and hashes:         1: g1pslrIJJMfl2PEvBtud0j4lL10.crl (hash: H5YW6RV3FNZgccJHhJZ95FTuM7qDq4qTvnsnVpsMqnU=)
                          2: 57FD28280C8311ECB6423427C4F9AE02.roa (hash: 3DfbmY658Qvr7RBQPPbnkpMR7lyZe/J1zffAMSLSjzE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
                          rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
        Validity
            Not Before: May 19 01:31:48 2024 GMT
            Not After : May 26 01:31:48 2024 GMT
        Subject: CN=66495684-76e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:c0:7b:62:96:3c:61:ce:f2:43:5a:89:c5:
                    a3:49:47:6c:35:b8:cf:82:e7:c5:e4:26:6e:9b:73:
                    03:58:6d:19:aa:f1:de:e3:41:de:d1:3f:b8:83:fc:
                    34:ae:49:90:42:43:b3:8c:0e:b9:fd:85:a8:dc:f7:
                    84:44:e1:2c:5b:ab:db:7d:68:10:41:76:8d:37:c2:
                    d1:6a:08:82:0a:b5:f9:5f:ac:41:24:48:0d:8a:c9:
                    b8:d9:e9:66:7e:0f:e2:3b:db:03:d1:67:51:cb:14:
                    56:0c:45:92:f1:7d:69:31:1d:b4:64:a3:df:33:1c:
                    d0:30:c6:05:42:44:e5:27:82:c5:e4:bb:f3:18:76:
                    7d:ea:a4:c7:b8:74:ee:5a:1e:d8:1b:d0:8c:45:6a:
                    3a:82:14:25:f2:39:30:ee:cf:40:10:a1:01:51:9c:
                    7a:68:c4:9c:4a:0e:0b:43:02:47:bb:49:8d:08:e4:
                    a1:a5:23:fa:a3:41:69:3a:fa:d7:1c:d5:7d:59:bc:
                    38:57:f2:7d:3f:e5:5b:d8:8f:a4:d4:37:7c:01:d3:
                    2a:4a:cf:6e:4e:7e:6e:42:73:f2:ba:10:35:af:3d:
                    00:f8:61:d6:3c:50:f8:8c:f9:9b:53:af:cd:05:f9:
                    df:f8:c2:e0:73:19:17:9f:67:73:56:a6:2f:88:9f:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:AF:A9:93:9B:01:64:D2:DB:AD:8B:9E:6A:88:C7:18:F8:CD:A7
            X509v3 Authority Key Identifier:
                keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:2e:81:9a:ee:25:c8:21:10:30:f6:fb:ac:c2:ca:e6:52:
         ec:e1:ab:bc:08:7a:c7:f6:22:30:c2:c6:82:e7:b7:bd:20:f1:
         e7:a0:83:7d:be:ef:46:81:26:3e:f0:12:68:7a:1f:43:67:05:
         f1:db:51:37:23:c6:00:6c:42:39:1c:85:e6:3b:75:4b:0c:fe:
         95:a3:cd:20:e3:a9:cb:a7:49:a5:f3:0e:c6:b1:94:e0:cb:e4:
         63:8b:f3:8b:65:c7:d2:d9:69:43:1b:51:bb:40:b9:33:7a:4d:
         cc:67:be:c5:27:a4:37:83:75:2c:b0:67:9c:21:3c:2e:04:27:
         6a:22:3e:41:a2:1e:ba:d8:21:fe:4d:24:74:18:fe:6f:dc:fe:
         f0:f5:53:82:e5:46:d7:89:5a:5d:23:72:93:e9:21:b9:61:b1:
         36:9b:ec:c8:44:b5:ab:a6:1a:ab:26:5b:ee:a3:73:1c:9e:3d:
         ad:e2:eb:52:6d:ac:e5:34:41:b0:15:00:9a:90:85:c2:21:65:
         f9:49:9a:9a:01:f9:76:53:f8:5d:80:2c:2b:f6:42:0c:5b:f9:
         a7:d9:ee:cf:bd:6a:47:2c:bf:da:76:6d:1c:00:75:e5:2a:92:
         c8:cd:11:17:7c:dd:6b:38:42:88:14:5d:0f:ae:e0:b4:20:d3:
         59:84:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org