Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          VA/b77+fxXLBTirJDWk10N1EW2cGAaGp2LqH7seQTvo=
Subject key identifier:   23:F8:2C:B0:AF:10:DF:81:60:ED:E8:51:9E:F0:70:F0:A7:40:BF:FC
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       2330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          22FA
Signing time:             Thu 30 May 2024 16:24:17 +0000
Manifest this update:     Thu 30 May 2024 16:24:16 +0000
Manifest next update:     Thu 06 Jun 2024 16:24:16 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: vyFQEA3cYueilCSLSJ7r42ToNxS8ri3Ta5BERm0949M=)
                          2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 6FzTErua6zVRjA4m/wfjFvNdrgSAolo9Xv/d3ECiAA0=)
                          3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: LGNomlgqDqpLqSn9ZYHAT8zD9HJTl5VhkadKzXIInYI=)
                          4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: pXmOPxjTSGHK20MT3o7jimG6ebJpxUymDnYJcXye3KA=)
                          5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: b9YjiVHAZb2iIvJndKP7AxgXIfitI4Fx393W+23xl9I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 16:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9008 (0x2330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: May 30 16:24:16 2024 GMT
            Not After : Jun  6 16:24:16 2024 GMT
        Subject: CN=6658a831-13d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:6b:d4:54:35:36:23:37:a2:76:27:86:f5:
                    73:fd:77:be:28:fe:a6:87:9e:b9:1f:0f:87:42:80:
                    7d:72:a3:9a:48:e2:61:5b:85:50:72:30:70:d4:9c:
                    5f:1d:46:bf:24:2a:65:ba:3a:9f:e7:03:ba:7b:6c:
                    40:45:bc:08:a3:92:ab:83:d4:cc:ee:a8:54:6a:2d:
                    25:3f:4c:0c:cf:c4:90:6a:68:36:67:b2:92:2d:10:
                    da:a8:20:12:0d:86:28:69:cb:8e:33:83:45:18:b9:
                    fe:45:8c:73:e0:32:69:b0:89:df:c9:ba:03:a8:5e:
                    df:43:57:76:4d:2a:e3:47:a3:a5:65:da:fb:4c:bf:
                    8d:24:d9:4a:d6:a1:0b:7b:60:6b:ca:a7:18:2d:4f:
                    a3:77:e6:be:98:88:22:01:24:67:1b:e1:00:11:27:
                    ea:e0:6a:aa:38:12:4f:88:e6:c2:bf:e7:6e:1b:95:
                    8b:c8:6a:14:ee:4c:92:eb:19:a1:2e:73:98:9a:b6:
                    3f:ea:ab:fb:30:6a:f3:bb:5f:51:32:b6:b0:49:ab:
                    99:2a:e3:13:6b:29:66:fb:bd:ae:43:8b:0b:be:a5:
                    ae:ec:49:8b:d0:26:61:5e:28:4b:87:5c:ea:f5:9d:
                    c7:cb:8e:a9:11:a3:cf:58:1c:e3:b9:29:1f:0b:3b:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:2C:B0:AF:10:DF:81:60:ED:E8:51:9E:F0:70:F0:A7:40:BF:FC
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:75:ab:03:85:41:b1:d7:f9:0b:64:ff:60:34:09:ed:d0:ee:
         2b:12:5e:0a:e8:00:5e:dc:8d:f7:c6:eb:42:81:7a:64:cb:12:
         5a:95:92:57:a7:66:cf:48:1a:d1:3c:89:7e:18:a1:2d:d5:23:
         2b:d8:36:42:da:1f:37:82:93:16:e1:5c:08:41:c2:55:77:ec:
         50:a4:f9:c9:81:eb:79:13:f2:92:a1:10:ee:12:5f:14:da:9c:
         a9:80:a8:75:b2:26:a8:1d:35:f5:1b:ed:74:92:9e:6f:c0:26:
         90:cb:53:49:bc:73:5f:1f:30:e1:e6:0f:ac:db:11:e9:bc:85:
         b6:98:11:f7:bf:48:f1:a0:18:8a:d3:92:f4:6a:73:29:ab:be:
         57:84:e0:e7:da:64:96:68:f2:00:c3:7f:94:d8:2a:38:bd:0c:
         c4:2e:ae:f1:fa:10:8a:9c:02:4b:f8:b4:e3:29:f8:31:1e:39:
         2b:dc:9a:81:43:79:bc:a8:ba:94:25:1a:8e:2c:ef:2a:db:4a:
         5b:2d:40:41:d2:97:13:50:dd:92:45:a4:fd:b6:9e:cd:7a:0c:
         d6:aa:ae:9c:2a:c3:df:b0:14:a5:d8:0c:a5:c3:08:87:82:36:
         bc:1a:c8:87:a5:49:d2:36:49:4a:d6:6e:fe:7a:e7:b1:17:38:
         89:57:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:46:01 2024 by rpki-client on console-ams.rpki-client.org