Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File:                     RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier:          Jk37Ky30gXLNFhYXEgJI6Hs1ozq7tFmGwrqty3rXzhk=
Subject key identifier:   3D:FB:95:84:BB:34:1D:67:DE:F4:52:1D:2B:C2:74:91:80:CE:86:18
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer:       /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial:       04A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number:          048A
Signing time:             Sun 19 May 2024 01:42:25 +0000
Manifest this update:     Sun 19 May 2024 01:42:24 +0000
Manifest next update:     Sun 26 May 2024 01:42:24 +0000
Files and hashes:         1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: 71u+JDAdf2FfYKpOJnTuBnkufKvSqILT7QZOBUi1T2M=)
                          2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: FNKGDn8U4KUsDU4wfsdk54mwxe49RF9Rnp6Ax+CRvWA=)
                          3: 243C54088DAC11EEBFC67C56C4F9AE02.roa (hash: d1p4Xhr7ufm8ypv8MhI4KjIiid+LZdXFKJD36On3DJY=)
                          4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: QDARhfmXCcZMZ5S8T2hfYErvUUxQhZJ/5Bfo6AM7egs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
                          rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
        Validity
            Not Before: May 19 01:42:24 2024 GMT
            Not After : May 26 01:42:24 2024 GMT
        Subject: CN=66495901-704a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:52:3d:ac:97:fe:fd:c2:7a:e3:66:f1:63:
                    4e:fc:d1:be:7d:56:9f:47:3b:f6:d7:4c:75:9a:f7:
                    b9:b8:68:f9:14:0f:a4:30:33:dc:b1:2b:7a:fa:8c:
                    9e:46:93:b9:07:b9:2e:cb:f7:2f:f8:b2:c9:f4:b3:
                    41:72:12:9d:01:8b:1f:8e:40:e9:24:29:af:ad:c6:
                    59:c2:86:7e:eb:be:a7:cb:d5:03:c3:e2:7f:28:f5:
                    6b:05:3a:07:b8:26:88:89:9b:01:fb:ee:1a:ae:b1:
                    fa:c8:5f:24:fa:28:9d:6f:2c:90:35:e6:10:dd:b6:
                    d8:73:6d:ef:7d:cb:22:af:dd:9b:4d:26:93:59:76:
                    08:8e:c5:8b:c5:09:93:e3:19:a6:f8:ad:4a:f2:1f:
                    82:fa:b9:eb:a4:5b:ee:9f:b9:94:81:43:fb:97:59:
                    2e:2f:c7:53:f4:ca:91:4c:5c:0a:ec:4b:e8:bc:92:
                    33:42:aa:a2:30:ec:9f:38:c0:02:af:ed:e2:3f:ce:
                    4a:3e:c4:41:aa:36:4d:fd:3a:09:d6:57:ad:bb:c5:
                    3d:b2:88:9d:50:a6:74:6d:5c:16:67:ca:fa:e9:f1:
                    5e:1c:5a:d7:6c:4f:56:19:10:09:0c:dd:d7:87:bd:
                    ac:88:f5:c2:28:f7:e1:cb:cf:92:b0:dd:08:92:0f:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:95:84:BB:34:1D:67:DE:F4:52:1D:2B:C2:74:91:80:CE:86:18
            X509v3 Authority Key Identifier:
                keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:52:1b:4b:80:36:c0:09:c4:1a:27:18:dc:97:9e:0b:94:95:
         bf:57:24:f2:62:be:f2:d9:ee:e2:37:00:d8:5c:bc:da:83:bc:
         8a:a9:a3:e6:b0:80:31:74:7b:08:bb:07:f1:ea:9b:1b:f8:14:
         78:ff:07:ab:0f:b9:bf:9b:1c:0f:ff:39:7b:eb:20:b3:6e:db:
         1a:50:93:b4:14:7d:cb:31:91:1d:86:5d:63:ee:98:5b:ee:5d:
         75:1d:86:46:61:07:5e:4c:0d:fa:39:f7:be:0d:10:41:57:16:
         ed:f3:65:b2:c9:04:60:76:4f:05:9c:5e:55:34:53:83:1f:01:
         09:59:d9:23:5d:67:b2:15:9e:d5:aa:d9:87:df:68:cd:72:fb:
         b4:83:38:f2:ed:8e:61:eb:1d:52:c9:7a:79:ab:78:67:a6:57:
         63:2c:71:6c:a1:d1:c6:8e:59:e1:0b:c9:f4:f1:01:2e:c3:02:
         f0:7e:d7:1d:ff:41:3e:50:43:41:b6:29:1e:99:67:c8:e0:1e:
         39:4e:79:ff:7b:e9:20:0c:0b:ac:9b:08:b5:ca:b6:7b:34:7d:
         50:42:90:16:8c:42:05:7d:86:ab:22:d1:4a:57:41:59:4b:4a:
         fe:40:5e:9c:94:9a:53:ab:e9:0d:96:cc:a2:6e:34:90:94:de:
         73:02:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org