Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          hmUNKX7MNit3L0moj+Fu5qbnPKjRz9MTwieVLfF0wjU=
Subject key identifier:   2A:14:C8:1E:31:A0:A6:1E:7F:27:9A:84:A3:FF:9F:63:D9:5F:59:96
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          02DB
Signing time:             Fri 31 May 2024 03:59:04 +0000
Manifest this update:     Fri 31 May 2024 03:59:03 +0000
Manifest next update:     Fri 07 Jun 2024 03:59:03 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: LMFTcRLJGB3ijAvbwz2WpZJbQL1M/LzFTtWJ2OTHcyM=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: uT+8T85I14HALFMS6CstBXWHxtpbrkYw0oumVPHzKVY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl
                          rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 03:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: May 31 03:59:03 2024 GMT
            Not After : Jun  7 03:59:03 2024 GMT
        Subject: CN=66594b08-fc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:0d:f7:3d:93:5b:36:96:4d:28:dd:23:8f:
                    d6:e3:b9:56:31:0e:4d:7b:b3:26:c5:21:1b:71:5f:
                    43:78:0a:25:e1:df:e6:3c:c1:97:6c:8d:d1:a3:53:
                    1a:e9:28:c1:01:d1:6c:c2:fe:63:50:f7:5d:71:df:
                    b0:51:f3:ea:37:44:f6:12:b7:96:03:3c:32:fb:3c:
                    5b:9c:8a:06:0b:65:b3:05:14:15:41:e1:19:dc:8b:
                    7f:4b:74:9d:ad:fc:73:37:cc:09:bb:30:4c:b6:1b:
                    28:04:cb:7a:c0:1c:b6:76:16:4d:8e:63:bf:2e:e4:
                    da:56:b5:af:85:44:96:2f:2f:25:7a:44:78:59:18:
                    80:6b:53:c4:03:b3:6f:74:09:48:6f:c4:f5:bd:17:
                    ed:68:72:ee:6e:97:a4:ca:9d:68:c1:54:c0:eb:ab:
                    66:76:8e:2b:81:33:67:e4:3b:e7:1c:b9:b8:2e:9a:
                    dd:af:57:b1:aa:24:e9:e9:7b:1a:fa:ff:36:c8:90:
                    c1:ec:d5:54:c8:7c:9b:ea:7b:95:7e:f3:8e:3a:9a:
                    cf:bc:fa:66:09:41:d8:ca:66:57:6f:3c:41:d4:07:
                    c4:c0:1a:97:c7:d9:60:cd:ae:cd:18:41:e0:4e:cb:
                    78:54:ce:70:7e:57:99:8d:cd:3b:55:90:ca:b9:ce:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:14:C8:1E:31:A0:A6:1E:7F:27:9A:84:A3:FF:9F:63:D9:5F:59:96
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:52:26:16:4d:ec:45:d9:5b:bc:96:37:5b:a5:2a:b2:3d:
         6d:5f:a2:89:53:ff:c8:78:56:2a:9c:58:de:5e:a0:e6:c5:58:
         22:60:0d:b6:f8:f9:df:f7:05:4a:1e:4c:46:2b:76:3d:6b:8d:
         92:8e:f5:28:d5:cd:31:fc:7e:7a:5b:75:84:fb:e5:49:28:bc:
         a1:6a:59:16:2e:b7:b2:df:17:96:89:f8:c8:82:1e:c9:d7:00:
         1d:32:42:84:21:f4:1c:84:aa:7d:ba:df:fc:79:31:25:c0:7f:
         ee:ee:5c:58:7a:47:18:ec:7c:de:36:fd:ff:b3:e9:6c:41:d3:
         1a:cc:30:50:8b:c1:b6:74:76:df:1a:d7:41:c7:91:27:46:a9:
         a0:5d:8e:b8:53:b6:d2:a3:84:16:72:a7:e1:bb:d0:fa:49:b8:
         e5:b3:94:28:89:83:01:58:d2:84:3e:32:82:d9:3f:7d:14:5b:
         76:64:d6:eb:dd:32:35:ad:b0:7e:76:e4:60:7c:75:0f:90:b5:
         66:1b:5d:11:ae:8c:43:b4:52:c2:0d:bd:c2:6a:4c:dc:4f:bc:
         95:da:d6:47:4c:d1:d6:ba:dc:c7:0b:86:93:a0:92:ce:00:e8:
         07:58:63:f1:e0:21:b5:fd:e8:fe:8e:96:4c:ae:c5:7f:ea:13:
         76:ff:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:14 2024 by rpki-client on console-ams.rpki-client.org