Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File:                     Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier:          XaWpTUdr58pcjSRRRQonfNS9pYSdaNUQVzFgGEX+f2c=
Subject key identifier:   8F:75:4E:C8:BB:11:C6:A0:59:D1:A5:37:87:0C:E1:AB:5E:D0:3C:69
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number:          0737
Signing time:             Sat 18 May 2024 22:26:35 +0000
Manifest this update:     Sat 18 May 2024 22:26:35 +0000
Manifest next update:     Sat 25 May 2024 22:26:35 +0000
Files and hashes:         1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: EQwR1qwANsZmf0iPrXPOlIHKvQL8cRz9b7C6EAwgs5M=)
                          2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: zahf38WJUaJrn85EVjhYTZf4G0B8Ut3ofdI2dvU3v80=)
                          3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: xK6g/9ZrCrAbUvohYXyIWOCZe254sdAZJJD2NWP+2ec=)
                          4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: y/ajgkav4Bv35KJL44OM9tnNn/ywJ62e1EkzLdBTa9E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: May 18 22:26:35 2024 GMT
            Not After : May 25 22:26:35 2024 GMT
        Subject: CN=66492b1b-fb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:38:74:d7:d9:35:96:7e:22:b6:27:d5:77:
                    23:b1:89:b7:e9:2d:4a:ef:23:7e:a4:b4:d9:6c:22:
                    d8:b4:1e:6a:24:39:e0:d0:49:23:b5:21:3a:68:9c:
                    94:9b:14:f2:fe:d2:a5:0a:39:cf:68:d1:c3:61:de:
                    e3:24:da:c3:0f:3d:59:03:92:ab:85:93:46:04:d8:
                    41:bf:1f:74:ee:01:a4:ce:35:49:de:df:51:f0:79:
                    15:1c:09:53:f4:d8:4a:30:a1:c7:c8:72:2a:77:db:
                    ca:5d:d6:63:5a:16:a6:0f:7b:64:54:46:43:8c:34:
                    f0:46:bf:13:b7:ef:9b:ca:c5:f3:66:8d:c5:bd:2f:
                    90:90:2b:1c:44:74:4f:9d:d1:93:fb:22:dd:b3:15:
                    47:e6:4d:c7:40:c1:19:a7:02:b1:17:c6:f5:f3:01:
                    dc:f8:d0:3f:51:13:95:da:f1:d6:fc:d4:e8:bd:a8:
                    31:66:9f:a5:14:b8:b1:1f:89:17:e6:63:58:5b:38:
                    87:b6:d0:b8:bf:ea:d7:22:16:6f:9a:53:f9:21:9e:
                    12:38:31:f7:2f:78:cb:ce:a4:d6:d8:96:6b:39:34:
                    d3:de:65:47:c9:c6:47:27:d0:97:99:e5:ff:20:8b:
                    4c:1a:32:53:37:0b:06:84:d1:c6:b5:dc:13:1b:63:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:75:4E:C8:BB:11:C6:A0:59:D1:A5:37:87:0C:E1:AB:5E:D0:3C:69
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ec:7b:45:c3:eb:0b:b1:ca:47:64:af:6e:38:21:22:b9:80:
         a6:d3:5a:9a:eb:8b:09:ee:28:24:34:42:ec:4a:b1:9c:b0:31:
         4a:f8:5b:66:53:05:89:ed:d9:d2:98:67:de:6b:62:da:fc:b1:
         33:0a:5b:1d:26:2c:35:8c:b1:b7:5c:b2:83:34:52:b8:75:d7:
         7b:ca:dd:2f:e6:90:7d:cc:ee:c0:b7:64:4f:7f:1e:89:52:d7:
         43:4b:d8:1c:54:96:8e:43:de:3a:c5:11:74:bd:01:91:22:26:
         ec:97:5d:b8:29:7a:f5:68:e7:b1:a2:5f:8c:8c:04:43:a0:b9:
         64:01:f5:db:53:eb:5e:77:4b:bd:0a:bb:0f:8f:af:82:18:10:
         c7:cf:96:d1:c5:ef:83:72:f3:17:ea:e8:50:7d:61:cc:1f:49:
         59:1c:9e:c1:1a:a8:4e:22:84:d6:9b:3f:89:b5:97:19:53:60:
         8a:07:3c:a7:9f:64:da:f6:12:5b:9f:02:c9:a1:62:b5:04:a6:
         f8:9e:e8:e8:bc:c5:10:fe:d3:64:3d:dc:57:21:b0:a4:98:97:
         c4:f4:ce:2f:7a:d9:6e:39:1e:df:a2:f1:c1:20:65:f5:fe:bb:
         08:55:36:3d:fd:dd:93:59:7c:c7:89:1d:5e:91:11:7d:32:f4:
         f6:67:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org