Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          jhXDM5oz5MGaS43yWrV9/fa2LVskzYCuQIQs9DkyoFA=
Subject key identifier:   BE:64:16:8C:FD:7C:78:55:5B:93:83:AB:7B:38:C5:A6:BC:C7:9B:81
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0B6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0B65
Signing time:             Sat 18 May 2024 19:33:06 +0000
Manifest this update:     Sat 18 May 2024 19:33:06 +0000
Manifest next update:     Sat 25 May 2024 19:33:06 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: rCaISyz34t2R3QXtq0wj6cBtlNxYMNMgv+TNeOwOtx8=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: fOcRDOMjZXWmnFmelN+Ntw5Dk4q457hYxEXWtUgeOso=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2922 (0xb6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: May 18 19:33:06 2024 GMT
            Not After : May 25 19:33:06 2024 GMT
        Subject: CN=66490272-b70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:35:4f:c5:c7:65:2a:37:97:10:8e:03:d4:
                    4b:3e:07:c8:e8:b2:71:82:da:a4:7c:c0:b9:09:aa:
                    c6:3b:7e:c9:a7:16:5e:3e:94:38:31:e4:8d:49:e6:
                    0b:a1:a6:83:15:49:b3:7a:4d:a8:20:b0:e2:60:ec:
                    fa:b0:3a:28:85:db:d6:7f:7e:20:e2:e9:e8:7c:99:
                    97:94:58:06:75:b5:e6:7d:af:a9:13:fd:87:29:51:
                    c2:3c:3a:6d:03:88:d4:2a:62:b0:57:10:51:39:f3:
                    a7:f6:a0:1b:08:25:60:e2:44:09:c4:6e:9e:09:13:
                    f7:43:2f:56:ff:b5:74:50:fc:46:6e:84:f7:68:e6:
                    a5:4e:78:f4:a6:1f:d8:2d:18:6f:f1:a6:13:28:56:
                    e7:d3:59:4b:c6:94:94:7f:13:6c:4f:92:2c:02:7b:
                    5f:08:97:c7:a1:55:4f:fb:41:8e:d9:a0:dc:82:06:
                    30:da:ed:a3:9f:4d:95:c9:2d:7f:99:41:8a:c7:83:
                    a4:85:dd:86:1f:a1:94:cc:a9:a2:04:2b:0c:eb:1e:
                    2e:66:f5:89:28:6e:70:d7:b8:08:e8:be:f5:da:1f:
                    e3:dc:4e:91:64:e3:0e:94:56:07:f2:e3:ea:4e:5c:
                    73:25:3e:52:00:b5:a2:5e:00:d8:42:8a:76:dd:30:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:16:8C:FD:7C:78:55:5B:93:83:AB:7B:38:C5:A6:BC:C7:9B:81
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:ec:13:61:af:52:bc:e8:7f:f3:3c:fc:24:ab:67:69:b1:
         6c:13:31:fa:cc:a6:21:14:81:25:ea:21:f9:ce:3a:4e:98:7e:
         79:14:be:e1:46:69:cf:39:4f:d1:91:99:f5:2d:3c:e0:2c:75:
         0d:b5:39:1f:ea:be:7e:f9:8a:2d:4e:60:10:9c:25:da:d0:e6:
         f8:19:94:2b:6f:8a:58:fe:56:2d:8a:1c:7e:ae:84:56:93:16:
         ec:fa:95:14:71:3f:6b:f3:b4:5a:cf:b9:94:4a:2a:3b:ca:10:
         d4:d7:f8:29:0b:3e:a8:31:54:b4:00:6f:10:33:1a:b4:06:f6:
         4e:7a:1d:20:a6:b2:78:50:68:d4:b8:67:dc:96:59:8a:0d:fd:
         a5:d7:01:77:aa:e8:95:9e:57:67:a8:ef:5f:61:75:69:e8:99:
         9e:1d:0f:49:3f:36:a8:18:39:1c:1c:9f:06:38:9e:ee:f6:3e:
         01:a9:84:99:ee:0e:1f:19:b1:19:38:cf:02:8c:54:c0:b4:3d:
         b9:68:db:98:f1:c9:e1:0b:88:f3:5a:69:30:da:cf:9c:d3:c7:
         41:1b:d2:3a:79:d7:42:bc:06:a7:42:46:ef:4e:aa:20:2c:ab:
         5c:39:c7:ac:40:19:51:39:02:db:c7:dc:ad:ce:3c:92:2b:76:
         7e:36:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org