Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft
File:                     Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json)
Hash identifier:          OIb9oFPEBGY921E22h/uJZZ5fAd+lfP8hZ9cdAI4nxs=
Subject key identifier:   B1:ED:1C:6E:20:01:40:36:4A:E5:CE:20:1C:71:BF:50:64:0A:B3:6B
Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77
Certificate issuer:       /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77
Certificate serial:       058F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft
Manifest number:          0586
Signing time:             Sat 01 Jun 2024 01:29:36 +0000
Manifest this update:     Sat 01 Jun 2024 01:29:35 +0000
Manifest next update:     Sat 08 Jun 2024 01:29:35 +0000
Files and hashes:         1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: 0vC1aVLFm2Fofpohm7vaWDITsOAfkuwOAp8ACQnFvkk=)
                          2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: KhQ2m3GyJCUcdrixe5p4++jj5LNUmAcZqQ2RRuKTkdM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77
        Validity
            Not Before: Jun  1 01:29:35 2024 GMT
            Not After : Jun  8 01:29:35 2024 GMT
        Subject: CN=665a797f-8fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:61:d6:32:ea:d1:1b:96:02:05:7d:2c:b2:
                    84:52:e9:e0:bc:ee:81:a0:ba:91:7b:5f:50:25:20:
                    2e:55:8b:6c:f9:52:bd:45:f5:51:a9:57:8e:79:51:
                    94:08:44:5d:73:1d:9e:c1:0f:6a:32:9e:e0:ee:3f:
                    21:c2:60:98:45:6c:ab:20:4a:89:51:05:5a:8d:2c:
                    bd:50:7e:f0:5b:0f:9b:bc:93:6c:cf:23:2b:53:b9:
                    89:10:21:b2:84:59:e6:5b:0f:5c:78:45:00:45:2e:
                    b3:fd:83:5e:89:5b:19:9e:fc:7c:18:43:8d:cd:55:
                    27:51:13:45:3f:05:ab:71:b6:25:48:60:66:a4:63:
                    99:19:b3:cc:41:9a:99:35:32:9f:c1:51:d4:f7:2d:
                    e1:43:70:da:0b:79:a2:c0:09:58:a2:4e:41:34:47:
                    f9:a3:ec:ae:67:53:f6:23:92:6c:5d:cf:3f:a5:f9:
                    cd:7d:dc:d5:06:00:e6:46:62:5d:54:a0:f7:7f:f7:
                    55:b1:bf:6d:60:e7:d8:93:d2:ec:ce:02:d2:3b:f8:
                    7a:30:9a:2f:8b:6f:ef:e3:d6:a6:d5:69:30:d8:bc:
                    b3:0a:f3:d1:a6:67:8c:f6:b8:1f:42:05:47:17:81:
                    51:3a:a9:17:f7:31:32:a0:92:0c:79:ce:38:c7:78:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:1C:6E:20:01:40:36:4A:E5:CE:20:1C:71:BF:50:64:0A:B3:6B
            X509v3 Authority Key Identifier:
                keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:1c:b4:b2:81:7b:2a:69:29:64:38:46:d1:2b:34:e1:dc:
         bc:ae:71:53:8e:f1:c6:e6:cd:89:68:24:80:2e:47:c6:ec:87:
         17:37:70:eb:fa:df:de:46:de:7e:dc:97:e3:9b:32:6f:64:36:
         e6:74:0e:fa:9c:58:74:d8:19:a2:34:43:0b:bd:16:cd:73:e7:
         d1:07:1f:2b:fc:13:3d:c0:3b:26:93:7e:c4:30:07:13:9f:fd:
         5e:5a:d3:92:5a:c5:51:80:be:8a:03:7a:90:8d:39:48:52:b9:
         77:26:5b:7b:43:02:88:4c:16:19:d1:4d:3d:e5:db:8d:06:8c:
         3c:89:02:29:02:c5:e0:b6:88:a9:e4:d4:22:d5:b2:d9:4e:14:
         7e:30:39:f9:63:91:07:98:7e:48:18:91:06:c6:89:b8:68:e2:
         a5:7a:61:6f:2c:ec:5f:f9:cf:2a:e0:3c:13:84:43:59:ef:84:
         85:7e:51:8d:03:74:62:ce:c1:ab:c5:9d:b3:d2:92:b1:2f:14:
         4b:53:e0:4c:6a:22:45:c4:4f:b0:c7:1d:83:3c:40:c4:c4:09:
         b9:7f:e1:7c:dd:cb:80:bf:f8:f2:da:4f:eb:13:56:cd:d9:14:
         cf:03:33:64:19:ff:31:cd:df:99:02:6d:56:dc:62:33:c7:13:
         95:01:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:31 2024 by rpki-client on console-ams.rpki-client.org