Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
File:                     fysutbj095VolfExLY3MQiOcmmI.mft (raw, json)
Hash identifier:          S5cjkioNLmAuhf9YrdOeiU1yapB+TmwcsY6C8Bieoew=
Subject key identifier:   5A:74:43:19:80:39:08:BF:12:99:13:FF:B0:BF:33:6B:F0:0A:9A:46
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Certificate issuer:       /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial:       0D66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
Manifest number:          0D59
Signing time:             Sat 18 May 2024 18:38:05 +0000
Manifest this update:     Sat 18 May 2024 18:38:04 +0000
Manifest next update:     Sat 25 May 2024 18:38:04 +0000
Files and hashes:         1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: 805m9guSl9Gs+29D+rT1j6J2hPZ5pQ2KSlwivY84UDU=)
                          2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: rc2HKldu1pWCNCmvoKIq756wtH7kDxYrdw5/oSGbQ3M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3430 (0xd66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
        Validity
            Not Before: May 18 18:38:04 2024 GMT
            Not After : May 25 18:38:04 2024 GMT
        Subject: CN=6648f58d-ea30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:48:26:b4:5d:61:8d:01:0f:29:04:15:2b:
                    5e:ab:f0:28:67:e0:c7:34:38:2b:4d:a8:e0:c8:a1:
                    33:db:d4:07:71:64:26:2b:77:88:be:c8:53:2e:d9:
                    28:c9:6c:a8:2f:d9:9e:b2:d4:66:fd:fe:4a:7d:77:
                    2d:07:44:8b:d6:66:67:c8:3e:da:90:2a:d4:a3:4d:
                    30:9e:be:7a:5a:a9:3d:e5:b4:ea:0e:00:c4:7b:fc:
                    c0:00:fd:db:ab:c0:61:b6:36:ad:28:70:de:94:c4:
                    17:d2:fb:b4:e3:99:05:d8:ca:08:ee:35:ba:2b:9e:
                    a6:a6:47:45:3d:7d:8b:ef:80:28:8a:d2:98:69:11:
                    8c:86:d9:31:be:04:1e:cb:4a:a5:4e:b3:42:fa:1c:
                    fc:b4:a9:d3:e1:ef:76:51:e8:44:08:e7:83:4b:a7:
                    17:4b:a3:65:ae:03:ab:85:ca:cf:7d:6b:60:e4:a2:
                    55:61:cc:1d:31:5c:da:88:55:ce:32:9e:7d:2e:ad:
                    12:ea:e9:b3:e3:2b:8c:53:a4:6c:61:d9:94:b7:2f:
                    81:b4:ca:e2:cb:a2:68:4d:52:a1:ec:96:0d:4e:1f:
                    25:a5:c9:81:b2:53:10:69:2a:2c:b4:c3:52:11:c3:
                    ce:fa:2e:de:72:8d:6b:f7:67:c0:3f:ba:52:34:32:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:74:43:19:80:39:08:BF:12:99:13:FF:B0:BF:33:6B:F0:0A:9A:46
            X509v3 Authority Key Identifier:
                keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:36:89:cd:e6:a0:f1:06:8c:b6:51:e5:85:83:05:64:83:6a:
         ee:35:9a:9d:3c:3c:90:b2:b7:99:01:61:cb:16:ac:71:16:db:
         ba:62:b2:81:e7:9a:e4:d5:1e:5d:e2:5f:87:7d:de:36:3d:4a:
         34:d2:b7:d0:15:b7:43:0f:90:27:e0:c5:89:67:8a:32:2b:f3:
         28:52:09:a8:4a:17:0c:ee:c4:d1:a3:95:39:6c:e9:52:13:a5:
         81:9a:0c:3d:15:b3:8f:95:04:eb:cd:f1:3b:06:f4:35:3a:ac:
         43:da:88:1b:87:d7:e2:e6:b9:ae:9e:45:71:39:6c:d5:44:c6:
         53:16:f7:4a:0c:ea:ab:d8:49:83:f5:c5:19:99:ba:03:f9:17:
         b1:b0:88:ce:8e:42:90:9b:62:27:20:25:0c:ea:be:92:bf:e2:
         7d:26:b8:ad:f3:31:d4:bc:a7:8f:1c:ba:65:b5:e8:23:d3:5e:
         4d:11:f9:b3:a1:32:a5:55:c9:64:4b:4f:ce:34:fd:5b:a8:ed:
         67:53:c6:0f:b2:d9:33:41:ba:34:20:65:62:7c:d5:27:44:da:
         ff:a4:c0:36:56:dc:5f:dc:c3:31:f1:20:70:f2:a0:1a:36:15:
         5a:de:f4:bc:7d:7f:2f:f3:04:35:de:fd:08:97:f0:16:00:cf:
         9d:7d:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org