Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File:                     Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier:          FW347Wkn6hs0pHzCMsQabsJ7lPmVtsWlSAzhHCruqOE=
Subject key identifier:   B6:CE:A2:FE:30:61:A9:F0:0B:E4:44:B2:E5:E8:71:05:F7:E7:B7:49
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number:          0108
Signing time:             Fri 17 May 2024 05:38:08 +0000
Manifest this update:     Fri 17 May 2024 05:38:07 +0000
Manifest next update:     Fri 24 May 2024 05:38:07 +0000
Files and hashes:         1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: N4Fwz/hSxWW4IurvwolQs5ZnnYdC8swf39GPxXmYHbs=)
                          2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: 4fKNHp/QkRQY4MFhFm0KIsrk9aahf17O6vMc/ck3zIk=)
                          3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: VwFP+j9Y86bpDslZHzR4okm58s+k/5RYkJDz4DI10MY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: May 17 05:38:07 2024 GMT
            Not After : May 24 05:38:07 2024 GMT
        Subject: CN=6646ed40-5335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:70:0f:bb:ba:74:95:7b:1d:3f:c9:25:81:
                    fc:eb:25:95:1c:ac:8b:51:97:a2:d3:a4:ce:2e:74:
                    84:3f:ba:de:b1:25:ac:b5:c5:71:d1:ec:e6:b0:21:
                    ee:c6:d0:3d:16:cf:c1:48:fd:f6:d2:34:27:2d:66:
                    e0:b8:80:3e:98:82:da:c5:a6:e3:e9:8e:38:3f:eb:
                    58:d2:b4:6b:c8:47:a3:b8:18:ce:5d:b1:87:7d:eb:
                    f6:d7:ef:ef:a8:d1:9c:23:34:55:7f:1f:56:b6:11:
                    83:6b:55:13:ec:59:d2:05:90:12:6a:e2:84:50:17:
                    ee:ed:16:e1:2b:16:03:cd:f8:85:dd:61:1c:51:fe:
                    e0:9f:2c:a7:05:82:b2:de:6d:27:3a:72:6d:9d:e4:
                    dc:33:02:d9:ce:47:74:e0:f8:e2:dd:04:a9:e2:83:
                    ce:24:ff:91:0c:f7:0f:03:98:09:1d:41:cf:be:1a:
                    80:f9:34:3a:8c:af:8c:c5:47:f2:09:be:06:10:d3:
                    f1:94:49:72:ab:42:ad:84:d2:f7:fc:76:40:6e:b6:
                    f4:2b:91:1d:37:f7:e7:db:2f:64:c5:55:af:eb:57:
                    ac:d1:e0:0f:83:76:5c:8a:bc:af:a0:57:4d:59:3b:
                    81:03:48:f8:da:c7:a1:28:5e:7d:8d:b1:a9:98:28:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CE:A2:FE:30:61:A9:F0:0B:E4:44:B2:E5:E8:71:05:F7:E7:B7:49
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:31:36:aa:22:19:88:89:08:d0:2c:20:0d:a5:e0:e3:ca:c4:
         c0:f9:c3:ea:f8:e4:1c:c0:42:6e:ca:58:01:96:11:e9:d3:95:
         56:0b:e5:42:09:8d:72:d0:83:96:61:b6:19:24:24:74:3b:6b:
         2a:5d:1c:14:dd:f4:3e:7c:e2:ea:4b:d5:fc:3e:6c:74:8c:c9:
         e8:26:bd:a1:f2:78:0e:1b:3a:63:63:20:72:4b:e5:fa:c4:67:
         3d:b6:32:5a:93:d1:dd:98:82:dd:e5:6f:e6:49:ae:25:27:06:
         e3:86:67:89:6c:89:4e:bf:af:20:8f:e4:9e:69:82:67:31:4e:
         ef:0f:4a:ce:a9:18:4f:59:a7:aa:4b:63:04:d3:86:00:29:93:
         61:b5:63:ce:a8:d2:11:36:8c:b6:70:1b:1c:3b:84:da:15:b5:
         94:5b:b4:71:73:27:28:49:11:48:43:d1:e3:7c:c9:76:b7:16:
         6b:92:d0:49:9f:ac:4f:50:f3:db:5d:f3:e5:c6:0b:95:6f:ef:
         94:6c:14:60:f9:81:04:99:ea:38:b9:52:bf:58:7d:41:de:12:
         1b:a7:17:19:cf:3c:c3:72:69:1a:d0:7b:4a:1e:61:aa:de:26:
         95:4b:ae:7e:a2:86:20:2e:d9:70:07:67:d9:13:60:79:a3:2f:
         7c:e5:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:24 2024 by rpki-client on console-ams.rpki-client.org