Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
File:                     w66slu2yjCiN16VQC1EphfHaNxQ.mft (raw, json)
Hash identifier:          FEq80IWQ0mq/xSqrLw+O0rM/Uwhajp0t///uk7t1XBE=
Subject key identifier:   B3:91:68:E3:0B:54:01:89:7C:93:67:1A:25:78:25:65:02:69:15:8E
Authority key identifier: C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14
Certificate issuer:       /CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
Certificate serial:       0594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
Manifest number:          0593
Signing time:             Sun 19 May 2024 00:26:12 +0000
Manifest this update:     Sun 19 May 2024 00:26:11 +0000
Manifest next update:     Sun 26 May 2024 00:26:11 +0000
Files and hashes:         1: w66slu2yjCiN16VQC1EphfHaNxQ.crl (hash: Yp0J6ngNFIJzsPCR/Z/YSxuKBB64ldyG8GSDYAG6K1M=)
                          2: 3812172A9EEA11EEA87D017FC4F9AE02.roa (hash: S1kEe1HTsfZ3WkCtE7CAmCB1OQAv4eGgWMSsn6Muetw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714
        Validity
            Not Before: May 19 00:26:11 2024 GMT
            Not After : May 26 00:26:11 2024 GMT
        Subject: CN=66494724-4842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:07:a2:ca:94:5c:53:2d:f0:63:bb:d6:04:
                    5d:56:75:9c:ae:77:f6:48:81:78:97:8c:20:f2:ca:
                    84:a6:f2:49:54:33:da:7c:45:3f:d8:d2:d4:5d:44:
                    21:be:bc:fa:52:22:d7:66:47:f5:48:31:cf:ef:dd:
                    64:28:b2:6a:22:5f:6d:59:f0:9c:d6:bc:69:57:56:
                    20:ab:87:4a:f2:1d:a4:64:83:4d:97:9f:28:b2:69:
                    f2:66:eb:75:75:27:99:78:f0:64:c2:fd:ae:28:35:
                    5f:17:ee:4e:31:b2:ce:99:69:47:34:1f:14:fc:7d:
                    e4:ac:0a:d4:fe:17:04:9c:d6:11:0f:5c:e7:d7:9d:
                    35:82:6d:66:f1:63:7a:21:ea:f5:8d:1d:9a:41:f4:
                    1c:46:4b:7b:70:06:a2:89:09:7c:51:6c:d0:6e:d4:
                    e0:f0:18:8d:c0:79:f4:f5:ca:03:0e:d4:d7:1b:a3:
                    ec:80:13:74:4e:e2:90:d1:18:92:38:27:d4:89:8f:
                    7c:a8:4d:30:7a:1d:9a:58:b0:d7:43:ee:f3:96:d3:
                    ab:a0:68:96:59:7f:8f:9f:af:6e:60:92:0d:63:57:
                    76:fa:9e:20:41:72:b5:3e:7b:20:c6:a2:05:ba:02:
                    52:79:09:f2:22:60:ff:f7:ac:a2:91:03:e5:d3:2d:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:91:68:E3:0B:54:01:89:7C:93:67:1A:25:78:25:65:02:69:15:8E
            X509v3 Authority Key Identifier:
                keyid:C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d3:5d:0e:9d:6c:e0:70:78:42:2e:0f:c6:2c:a1:e0:fc:6d:
         c5:cf:70:d4:b2:2a:65:e6:a1:8a:f0:90:bb:17:fa:9e:aa:28:
         ba:2b:c2:86:76:b4:96:80:bb:02:c5:f8:ba:33:10:b0:9c:ad:
         a0:da:e3:2e:be:18:9e:16:05:54:80:8d:05:e1:d1:af:a2:63:
         a9:ac:ca:b7:e8:9a:c6:9e:92:ad:0f:5d:82:6d:e0:d0:ba:4c:
         b8:66:06:75:0e:66:44:e9:02:d0:18:21:ea:76:29:2d:b0:cc:
         0e:4b:79:fe:84:85:ea:a2:7b:60:c1:82:7a:18:45:4a:b6:b2:
         62:1b:75:9a:1c:6b:dc:1f:30:32:a3:6b:15:06:00:0c:96:1d:
         1b:14:1b:22:67:ef:12:96:5f:3d:db:5a:94:83:01:67:ce:fe:
         0c:a3:45:c4:3f:28:0a:12:b3:50:c7:4e:fe:23:53:44:6e:00:
         76:bb:0c:ed:30:79:b4:a0:37:e7:59:7e:a3:2e:65:7d:cf:a2:
         39:b9:d7:d6:58:25:ea:0e:f6:36:f3:c2:1c:26:36:88:07:9b:
         ce:f4:7d:c6:08:6c:9c:c8:a6:c5:4a:08:f1:11:ce:f0:f1:e2:
         a7:87:29:01:07:b3:bd:69:a7:9c:06:f0:e8:e1:7e:b6:36:86:
         89:e3:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org