Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          YjFvK57qQS5gdSlExwjL9vjQ3F399qPb8wJjMOV7k3o=
Subject key identifier:   F2:A1:B8:9D:85:29:68:4A:47:42:21:40:5F:1D:85:45:B9:6C:82:11
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          ED
Signing time:             Sun 19 May 2024 05:49:16 +0000
Manifest this update:     Sun 19 May 2024 05:49:15 +0000
Manifest next update:     Sun 26 May 2024 05:49:15 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: KyGqOl2HLJfgxyTCfGVs4ILcrZZQTLPj/AHiOKbQJqs=)
                          2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: xV+nU7kVGCQ4ar7lt/I0sOFhqvU5U8TgS8P9eD60gGg=)
                          3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: rQLQAdP1IxP3XKzw8xvchVMqWsSBEY2S7Ops3M2ZpSM=)
                          4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: jnX6zSA5GtMfSEQow6mSR/kbYFITaPVVsjCUvxeVvUo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: May 19 05:49:15 2024 GMT
            Not After : May 26 05:49:15 2024 GMT
        Subject: CN=664992dc-4a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:ad:72:06:38:ea:8a:82:0e:09:89:b5:1c:
                    84:5c:6a:ac:0f:3e:27:00:44:12:30:3b:34:46:e3:
                    90:31:d9:0e:6c:c1:c7:89:a1:5c:af:31:e5:94:8b:
                    68:1d:fa:2d:fc:59:51:20:4c:4e:4c:9e:7c:94:50:
                    ff:73:1e:ae:bf:88:b5:4d:ba:c3:05:56:57:99:cf:
                    5a:52:e2:e5:03:4f:d0:36:57:0e:bc:8f:f5:35:6b:
                    e4:0c:2b:c1:37:93:2c:e4:68:34:55:73:13:1a:99:
                    76:0e:5d:30:f5:3c:1b:26:07:00:fd:0a:11:84:3c:
                    cc:bc:f3:8e:8c:d8:9a:71:09:07:0f:c4:a6:7b:80:
                    ed:17:fa:9b:dd:2e:5f:76:0d:db:36:f9:43:30:42:
                    61:f5:49:18:c4:ad:0d:f7:14:68:34:17:1e:b8:ba:
                    6b:8b:06:fa:f5:1c:80:66:27:57:88:27:3d:d6:fd:
                    ee:3d:97:c0:b7:b5:7d:04:95:c9:57:4a:fc:b3:20:
                    6c:f2:e7:1e:3d:bd:36:9e:a9:23:ea:71:37:2d:4b:
                    36:21:f0:bd:b3:b8:b5:31:87:39:2c:55:e6:25:cd:
                    75:f5:c7:ed:5f:b4:2f:c1:01:7e:18:1f:6f:4e:c5:
                    5b:3c:09:fb:0a:05:08:8f:03:65:57:ee:df:44:04:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:B8:9D:85:29:68:4A:47:42:21:40:5F:1D:85:45:B9:6C:82:11
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:eb:e2:27:2b:12:5e:7d:7b:76:c8:8b:e9:34:b2:0a:67:
         28:a7:57:d2:22:c6:dd:e8:fc:f9:88:f1:ac:c1:27:5a:ee:15:
         c5:9d:9f:44:52:df:d2:07:bf:82:a5:17:df:b9:ce:dc:3e:63:
         27:7e:a6:34:e0:82:b4:e0:4a:14:e9:5d:98:e3:ec:dd:2b:9c:
         57:31:9e:49:6c:ed:bf:93:c3:9f:0e:82:82:b8:8d:a9:fc:b1:
         24:c9:18:ec:49:c9:b2:29:43:ef:19:ae:90:75:c4:64:43:de:
         3f:12:fb:91:af:35:7f:73:9b:c3:b2:cf:6f:eb:1f:97:dd:98:
         48:84:d7:25:c7:dd:13:59:df:94:1b:0f:8a:5a:34:76:14:91:
         41:ca:59:56:c5:35:91:f8:d5:d7:3a:ef:0d:71:7b:04:d1:e4:
         ca:5a:95:21:36:df:48:f7:47:9d:e0:59:b7:6b:af:80:6b:db:
         11:70:e5:f7:0e:5e:bb:dc:60:d0:4c:95:e5:02:e8:7c:7f:fe:
         34:a1:6e:77:a3:07:a8:16:ce:11:1c:7f:6e:cc:85:d0:33:5c:
         9f:b6:f1:03:a8:5b:e3:71:03:94:1a:68:ce:37:9c:88:32:08:
         4c:a9:e3:8f:e3:2e:ff:22:16:ec:02:93:41:65:b4:7b:54:0a:
         e6:a2:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org