Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
File:                     t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft (raw, json)
Hash identifier:          lLfEVuTtfO2CmYSniMIYniOyheuxKlj5mv3uVih4c2w=
Subject key identifier:   EB:B3:FE:73:F0:D2:CF:B0:03:5D:A2:A3:24:22:CE:C5:F4:6F:18:98
Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43
Certificate issuer:       /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
Manifest number:          05D0
Signing time:             Sun 19 May 2024 00:04:31 +0000
Manifest this update:     Sun 19 May 2024 00:04:30 +0000
Manifest next update:     Sun 26 May 2024 00:04:30 +0000
Files and hashes:         1: t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl (hash: 9fo3eU8DsRc5O2MC+kFbP+DYj/5OSYn2kqGC5y/glVA=)
                          2: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (hash: se9tlm/VMZD+WJX65QnJqIdwVwJQ3IIOAgHZJVshlqQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl
                          rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
        Validity
            Not Before: May 19 00:04:30 2024 GMT
            Not After : May 26 00:04:30 2024 GMT
        Subject: CN=6649420e-6073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:ac:22:fe:32:e9:04:52:9c:97:71:6f:d4:
                    54:f7:52:0e:eb:03:d7:c7:2c:0e:dc:87:61:14:53:
                    51:82:90:69:0e:1c:85:c8:8d:50:89:6f:c0:17:3b:
                    21:4c:a7:bf:61:97:35:9e:51:1c:c0:f2:0b:d5:c6:
                    9d:25:57:d6:43:26:d6:1c:e6:ad:78:93:0c:9c:18:
                    e2:41:14:e2:51:c8:b3:af:f6:c8:5e:0a:c3:65:9a:
                    0d:d5:81:74:7c:b5:78:66:0d:20:49:e8:7a:7c:61:
                    fb:15:99:52:86:5a:6b:86:ad:3d:73:e0:65:30:7c:
                    63:72:00:79:82:17:a2:f2:03:26:2d:2d:0e:d0:77:
                    c2:e5:34:99:8a:55:06:6e:7d:81:9a:d3:8b:5b:6e:
                    72:d6:59:32:9f:75:84:dd:4d:12:90:8a:27:d7:cd:
                    e3:d5:c6:72:85:e0:8a:0c:30:8d:6d:25:9f:a7:a7:
                    95:61:01:ce:b3:3b:c3:46:49:35:aa:67:c4:10:24:
                    5c:46:26:fc:46:09:65:96:6c:6a:3d:cd:f4:dd:44:
                    9c:3c:f2:29:81:dc:7f:5a:60:5d:fe:86:f3:72:b5:
                    52:a9:2f:4a:cc:65:b4:42:69:77:ea:53:10:e1:7d:
                    4f:92:62:1d:55:f4:64:dd:4e:b1:67:77:cb:00:31:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B3:FE:73:F0:D2:CF:B0:03:5D:A2:A3:24:22:CE:C5:F4:6F:18:98
            X509v3 Authority Key Identifier:
                keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:7f:0c:43:8e:18:84:7f:fe:ef:8c:ee:07:86:c2:e6:7c:
         48:d4:d3:47:bd:04:01:ef:62:42:42:e4:86:bf:85:28:63:ae:
         7a:d4:e0:47:3c:a5:56:23:c5:b2:71:7b:eb:c9:8c:9a:91:90:
         59:08:12:24:b1:57:88:3e:33:8a:af:47:6f:51:4e:24:e9:eb:
         67:01:8c:fb:f6:e0:04:a5:eb:c2:a2:9b:88:86:6b:5c:65:8b:
         f2:5f:a8:9c:8d:9c:38:a6:a3:2b:30:01:98:5b:8f:5d:d6:93:
         57:13:16:c0:5d:9d:8a:23:6d:d2:36:5d:04:8a:c1:f4:47:2f:
         b0:38:2f:65:9e:39:b6:2b:bf:66:22:ee:cb:29:3b:02:e6:87:
         09:53:06:fe:e8:61:f3:06:0d:75:90:5a:7d:7a:30:00:be:9a:
         f0:e7:e0:fe:ca:3e:78:4b:35:36:92:13:78:8f:5c:03:0e:6c:
         71:3d:69:3d:2f:0c:33:6c:b1:8b:3c:0d:43:96:11:d9:fd:d3:
         c6:4f:ac:91:90:4b:c5:d9:57:00:e0:d7:7a:60:f0:ba:28:ea:
         c3:9f:15:6e:db:18:a6:bd:d1:cf:a2:38:5b:0b:59:61:68:f8:
         7e:a1:5b:41:3c:74:57:a1:75:8b:14:1d:43:71:b0:69:df:cb:
         0c:bf:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org