Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          yOLDMG5tRnE4lODdUNuz+8xX5PPLQUjZngVUUmKlk/E=
Subject key identifier:   A7:19:88:CE:7B:45:BC:CA:B5:C6:92:29:1E:74:1F:14:13:58:D9:BD
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          0384
Signing time:             Sun 19 May 2024 02:42:27 +0000
Manifest this update:     Sun 19 May 2024 02:42:27 +0000
Manifest next update:     Sun 26 May 2024 02:42:27 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: VVRaqrYeGuy2pZv5WdpXDd86twweuK7sMha+QdmmCZU=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: ULCueRyEl12HIqfQw1ItT8YtfiIW/0cLTQe4frhEXrc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: May 19 02:42:27 2024 GMT
            Not After : May 26 02:42:27 2024 GMT
        Subject: CN=66496713-9436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:c0:48:57:b8:fe:b7:80:b9:69:8b:3b:01:
                    45:a2:54:a1:02:77:7a:23:4f:10:6f:4f:1c:6a:9a:
                    2b:a4:de:a2:81:f0:22:ac:89:16:a5:78:c9:83:52:
                    e3:06:dd:dc:4c:3e:e7:21:94:4f:1d:5a:56:fa:d2:
                    9b:78:2a:0f:d5:81:c0:39:96:44:8c:0e:c1:b4:04:
                    fe:7c:08:9b:bf:8d:65:08:8b:f2:2a:45:36:ae:6d:
                    84:98:0a:7e:b8:c7:89:bd:ec:6a:ca:5c:84:df:49:
                    6a:f3:a9:98:35:38:4b:8d:81:9d:46:42:c2:eb:6c:
                    b9:8f:6d:19:da:70:61:7c:f8:00:a5:21:1f:88:75:
                    a9:9c:47:53:df:4a:5a:cd:88:b3:57:1f:f5:1d:af:
                    a8:39:77:33:35:c3:6d:49:6a:20:67:58:14:be:10:
                    08:53:4b:8f:40:c2:f3:07:4c:b0:a0:08:c8:c9:85:
                    c8:b7:35:c1:a9:26:d1:5e:fe:2a:55:b1:a0:b5:2a:
                    87:33:89:2c:1a:91:38:79:d8:d0:a9:fe:f1:b8:30:
                    a4:70:9f:87:53:96:8d:17:4f:66:b9:08:63:63:5d:
                    cc:0b:ac:1e:c8:f9:24:21:fb:69:f0:61:bd:bc:3a:
                    ed:2c:57:72:69:14:26:e6:f6:ab:5d:4b:4f:bf:cf:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:88:CE:7B:45:BC:CA:B5:C6:92:29:1E:74:1F:14:13:58:D9:BD
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:a4:9e:19:b3:01:bf:59:55:05:3f:a6:d7:d2:91:eb:24:
         a2:dd:d5:de:0c:2c:b1:24:d5:d6:ac:b1:fc:b7:06:e0:99:66:
         f4:9d:17:fe:88:d9:a1:98:eb:4b:92:46:65:cf:7b:0e:10:61:
         33:65:5f:53:6a:66:ba:ae:19:4b:2c:e9:64:73:e5:cb:d9:29:
         7b:f8:65:03:37:e7:de:c9:ce:48:68:7d:fa:54:c5:eb:fa:cb:
         21:67:f0:46:17:00:ea:9e:72:3f:74:93:91:47:4c:bf:f4:88:
         fc:a8:15:a7:64:76:8c:f0:53:fb:e3:5b:f5:bb:b8:73:f6:f6:
         cb:49:22:2a:12:5d:c8:2f:cc:54:c6:46:a3:53:83:c6:56:a8:
         29:66:49:34:5a:d5:46:b8:bd:9f:66:fe:e1:6e:7f:51:7c:b7:
         65:ab:b9:cc:c6:29:b7:2d:56:41:9e:fb:47:2c:e8:6c:03:58:
         a1:00:53:3a:87:3f:f3:ae:b3:8e:35:00:b0:96:9b:c9:5e:c1:
         f3:4f:5e:4e:4d:fb:94:4c:a9:03:8e:30:86:f8:28:9e:c5:3c:
         d1:08:b7:e4:ec:53:ef:74:47:a4:e2:f5:c4:b8:93:12:d7:a9:
         47:0b:b9:97:84:f4:a1:cd:2e:d2:df:81:ce:2a:32:f1:90:23:
         a1:89:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org