Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File:                     0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier:          OQWtrtr82ocnY/92wlkvZAdGcaFUWRPWjCiod67qDuM=
Subject key identifier:   15:71:84:8D:42:B8:B8:BA:91:3E:DF:4B:04:B1:85:28:64:7C:E7:68
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       0B71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number:          0B60
Signing time:             Fri 31 May 2024 20:19:55 +0000
Manifest this update:     Fri 31 May 2024 20:19:54 +0000
Manifest next update:     Fri 07 Jun 2024 20:19:54 +0000
Files and hashes:         1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: bpHM8D9Pcm3dBwIzCpPzj5rEwKYUPXis79MQ8z+Nfuw=)
                          2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: pK01oVo+gCZKxEOHwAayzXnpDV9OalCfPxrHTb2LSTA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
                          rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: May 31 20:19:54 2024 GMT
            Not After : Jun  7 20:19:54 2024 GMT
        Subject: CN=665a30eb-c388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:6c:68:59:06:f6:12:f6:d0:97:27:2b:5a:
                    c1:95:21:7e:e0:b9:69:8c:67:f6:4f:87:ba:f8:b8:
                    0f:27:c3:76:79:11:5d:53:54:55:b2:0d:17:b4:02:
                    b2:33:e0:f4:99:38:a4:35:bc:5d:16:4e:72:83:0e:
                    3a:65:38:82:3f:ea:cc:df:f2:20:32:c0:d2:6d:08:
                    d1:f0:ce:ab:5f:24:a4:ce:f7:a2:87:0f:f0:d2:5e:
                    b6:13:e0:2c:93:ab:7b:18:73:b1:6e:60:55:51:2c:
                    4b:d8:53:72:58:a3:b7:27:d1:d6:84:09:ce:4d:76:
                    da:41:e5:68:d5:96:92:3e:82:4b:f8:d0:de:02:65:
                    a7:e3:40:a1:3a:37:88:86:47:89:23:f9:8e:bf:75:
                    dd:6c:32:1a:4e:f2:54:e2:f8:9e:66:65:14:c5:76:
                    f4:1a:e4:dc:69:6e:c5:16:04:0c:f2:38:52:25:9e:
                    ac:d6:4d:c5:81:55:7f:0b:49:96:bd:d9:eb:2e:dd:
                    6d:0f:93:34:95:e0:c4:12:5a:0d:80:bd:da:c9:0e:
                    5b:7e:db:e7:47:1d:f0:a8:57:36:54:85:ee:f5:e6:
                    d6:d6:12:22:7c:60:e1:7f:84:f6:aa:7c:f8:e2:85:
                    f0:4f:f7:ef:13:26:b1:e8:f9:0d:60:79:f6:a7:7a:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:84:8D:42:B8:B8:BA:91:3E:DF:4B:04:B1:85:28:64:7C:E7:68
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:9e:4a:e6:15:09:26:8c:cf:f7:ff:a5:03:78:35:c5:66:
         59:bc:d5:58:07:9f:59:05:02:4d:fd:8e:da:7c:0d:e7:e1:cc:
         b8:2e:f0:d6:e4:bd:a6:37:24:a5:70:60:aa:84:06:06:da:83:
         b6:5c:b7:e3:59:f4:87:09:8d:04:53:5f:2c:d1:1b:95:73:cc:
         ef:01:f6:19:4c:d4:27:80:65:fa:ee:29:04:40:bd:65:4e:65:
         da:03:96:27:63:42:96:2a:d9:82:2d:84:55:61:a3:cc:16:db:
         00:1b:4b:e8:31:00:62:1b:24:88:13:d4:c9:b4:ec:96:1f:50:
         cd:48:8c:51:39:79:ab:db:8d:30:47:b8:82:b4:8a:ec:d9:fe:
         5b:f2:c3:29:b7:5f:26:52:3e:14:c2:d5:48:d2:17:49:d3:c9:
         33:7a:7a:3b:3d:7d:69:3e:bd:f7:39:8d:8e:fd:c2:6c:36:89:
         56:19:61:c4:07:5e:38:75:70:07:9c:9f:13:1e:93:d1:6e:41:
         ea:01:2b:b3:96:67:63:8c:cc:61:b5:99:d3:70:89:69:8d:99:
         b5:0d:a2:b5:47:f1:7d:6c:5f:b0:e2:24:d8:44:c3:d1:37:61:
         77:93:fc:06:a5:f4:27:24:42:62:ea:1f:51:d6:ab:98:8a:e5:
         bc:9e:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:26 2024 by rpki-client on console-ams.rpki-client.org