Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          LbiarqCRcz0hZfI8MuSDLUXNeNr+y7pUeTYC3ip1dko=
Subject key identifier:   4B:6D:1E:33:17:97:3B:2A:C4:C8:D1:18:F1:1D:35:68:CC:56:8F:1E
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          44
Signing time:             Sun 19 May 2024 08:09:22 +0000
Manifest this update:     Sun 19 May 2024 08:09:22 +0000
Manifest next update:     Sun 26 May 2024 08:09:22 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: ZhopmXugXahcDJOaEVBs/ru9cEYuA8MdGG6GWW1Xvgg=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: FaOon3incGL44fXWsUh5gm5uuJKLqWRTOR+SCwv9JuY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: May 19 08:09:22 2024 GMT
            Not After : May 26 08:09:22 2024 GMT
        Subject: CN=6649b3b2-b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:50:b1:92:41:4a:c5:7c:fa:50:d6:e3:d7:
                    c8:91:e6:e6:19:38:2c:ab:9c:41:fa:12:07:9a:ed:
                    22:bf:cc:7a:65:c4:12:81:01:f8:1a:7d:3d:15:5c:
                    ba:85:fe:f0:cc:9c:4f:8f:1f:1a:ca:c6:bc:f7:46:
                    7b:a3:ef:e1:95:9d:85:3a:43:c6:42:b3:45:ed:d6:
                    c3:df:14:ac:10:91:c9:94:27:30:99:58:4c:cf:b3:
                    84:4c:53:ed:58:b1:fa:ca:ee:62:e5:40:5a:60:04:
                    b1:4b:97:13:ab:1b:e9:88:8b:99:af:63:f0:3a:09:
                    c3:dd:c6:19:7a:76:30:87:cd:32:93:88:1b:1c:a8:
                    8d:db:ce:d9:f6:0f:c0:b5:5f:46:3d:1d:fe:5b:6d:
                    a4:9f:a3:0c:4c:46:36:21:69:25:32:4e:7a:73:be:
                    63:33:a1:bb:84:04:0d:88:87:20:c8:4f:a5:be:18:
                    7b:81:d9:71:61:06:db:cc:ed:e8:92:cb:a3:c6:66:
                    94:12:02:83:83:0b:9e:5c:3b:5d:6c:7d:37:f9:7c:
                    ea:ae:00:0d:d0:a0:77:bf:c6:04:54:25:0f:cc:f8:
                    2f:d8:30:50:b4:5a:3a:21:80:6e:c1:de:85:fc:f5:
                    ca:98:1b:8a:55:16:b0:91:0d:fc:43:ab:81:3c:f8:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:1E:33:17:97:3B:2A:C4:C8:D1:18:F1:1D:35:68:CC:56:8F:1E
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:35:bc:2b:29:de:4e:93:5c:84:92:1c:4b:eb:7c:3f:32:
         d3:2d:42:2b:5a:ad:c9:6a:9c:08:8d:b0:3e:57:ca:51:39:d9:
         de:42:41:7a:e2:58:90:fb:46:fc:d9:3e:b4:a3:c1:e5:18:db:
         f4:42:97:71:5e:13:a7:f2:53:f6:4a:a6:33:5d:90:9d:5e:80:
         90:23:09:76:1a:f0:5e:97:f8:4e:49:1f:56:61:82:ef:02:22:
         95:7c:52:4d:8e:bf:a7:1b:40:22:2a:21:de:db:60:0d:a7:cc:
         2f:7a:c4:9a:2d:48:72:04:1c:a4:82:3d:06:50:61:db:48:21:
         b5:a0:f5:44:e0:96:a3:9d:dc:82:49:39:41:54:74:cf:2d:47:
         59:5b:3e:d0:7f:73:b3:9a:1d:2c:10:c5:57:2e:40:74:f7:47:
         38:e8:30:4f:75:94:4a:6f:39:47:33:cd:4c:4d:6b:c2:4f:ba:
         a3:5e:e2:93:f3:96:03:a5:1d:6f:02:2f:e2:78:e7:00:02:a3:
         70:74:f2:47:b3:4f:8f:5c:34:7b:be:bc:25:2d:77:60:16:4d:
         e9:a3:2a:3e:7f:d9:ea:05:81:c7:b0:55:97:f2:1a:b4:7f:94:
         de:f4:ac:46:e2:69:9f:4b:14:12:0b:59:3d:2d:92:c4:a9:b8:
         89:bb:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org