Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          7lZ33bjeXSM80BiOsXiv8g0lEd/W6t8xaRZO2T9T4f4=
Subject key identifier:   63:F2:6D:71:7A:6C:8E:3C:D4:53:D2:E4:33:6F:82:A4:5E:BF:B5:0C
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          6D
Signing time:             Sun 19 May 2024 07:34:49 +0000
Manifest this update:     Sun 19 May 2024 07:34:49 +0000
Manifest next update:     Sun 26 May 2024 07:34:49 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: KO+/3ut/zsy+AEzrFlAcLF8reYSYhVJUSfftSbeZKcQ=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: 0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: iSOdJt+BL8ENRxFcv4jaFJ7KNoHUX0Q/WLaLzbaI1bk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May 19 07:34:49 2024 GMT
            Not After : May 26 07:34:49 2024 GMT
        Subject: CN=6649ab99-abc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:3b:b4:fd:d5:7e:23:37:60:d2:d3:3f:26:
                    13:3f:fc:37:5f:41:3d:87:cf:4c:8c:e9:bd:8e:7d:
                    43:a6:65:cc:3f:e0:d9:21:d2:81:12:e4:b0:1c:29:
                    ba:7a:1e:e3:e1:75:a2:1f:91:b1:b2:b8:4f:fb:a2:
                    29:55:48:c3:6c:1c:a8:1d:9a:aa:62:09:1c:05:07:
                    4e:9b:18:61:65:2c:2e:92:0d:f1:92:ca:30:22:d9:
                    08:f7:00:a1:f1:bd:92:29:5a:28:a4:d6:59:94:c3:
                    2e:a5:f0:2a:f6:7f:a8:f7:9d:25:5d:22:0c:04:86:
                    06:af:8c:b0:78:ad:9e:c8:45:1d:97:d5:d1:97:cb:
                    87:8a:04:9f:52:aa:03:bf:ae:24:b3:c7:7b:8b:6b:
                    82:ce:44:59:86:a9:1e:c8:24:44:76:8a:7a:f0:4e:
                    3b:46:71:87:0b:94:1f:3a:31:38:0e:22:63:35:11:
                    a6:64:7c:67:36:8a:d2:64:de:24:ce:01:0b:23:9b:
                    d1:c8:67:23:ca:2a:a9:b1:72:6d:5d:0b:d7:92:bd:
                    87:2f:aa:d7:ea:fd:8c:b3:8c:4f:f8:ed:82:7e:65:
                    37:a9:57:0a:25:d1:21:c1:12:7a:b6:8f:1e:cb:93:
                    20:d0:88:d8:f0:ec:f7:b4:0f:68:68:1e:e3:97:0d:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:6D:71:7A:6C:8E:3C:D4:53:D2:E4:33:6F:82:A4:5E:BF:B5:0C
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:23:eb:50:86:20:39:b7:4a:ed:27:e0:d6:18:68:24:12:76:
         fa:6e:7d:ae:f1:0b:1e:2f:08:b5:5d:d1:f8:95:18:dd:64:c7:
         bc:34:1f:d4:a4:7c:20:ac:3e:53:fc:78:b5:27:aa:e4:00:e8:
         4f:c9:7b:a5:36:e7:08:3d:4c:f6:64:77:d2:e0:a6:b3:60:a1:
         e9:9c:eb:24:7d:4a:27:85:8d:66:eb:af:16:8f:c0:9f:9d:c9:
         0e:41:b4:1f:10:72:b5:06:8d:d0:ca:da:f6:e4:43:a9:0f:e3:
         e3:cc:41:57:38:31:84:04:e6:77:b0:1d:5e:58:71:f1:2b:2a:
         05:de:6e:96:27:4c:51:f9:ba:1a:c1:f5:ef:6f:b8:17:56:a4:
         b0:fc:02:2f:a4:65:6c:58:34:ff:b7:64:58:33:e2:2a:b6:d5:
         17:79:87:85:6a:8c:5f:8f:1f:ec:e2:83:17:5f:43:99:d8:df:
         5e:3e:90:16:2c:85:80:0f:7c:48:e3:2a:bf:56:18:50:98:f3:
         5d:fc:ee:41:21:2a:32:b6:7e:71:2b:81:d5:0b:1f:9a:a5:c3:
         71:ec:10:92:8e:ab:44:c3:ab:bd:4d:43:45:20:99:90:3e:81:
         22:7c:3d:61:08:ed:43:0d:de:eb:1e:85:51:71:02:8c:9c:10:
         3c:28:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org