Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
File:                     7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json)
Hash identifier:          Cdp9Xo5MdSpAKZIDAIJGO8jexdXS+cyvL3nyEzZu2Ug=
Subject key identifier:   0C:65:B9:ED:F2:DA:7E:E4:40:E8:85:E5:B7:4E:2B:FE:8B:41:F9:44
Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
Certificate issuer:       /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Certificate serial:       0518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
Manifest number:          0514
Signing time:             Sun 19 May 2024 01:05:09 +0000
Manifest this update:     Sun 19 May 2024 01:05:08 +0000
Manifest next update:     Sun 26 May 2024 01:05:08 +0000
Files and hashes:         1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: M0ksIZAsMHa1z+BrJfM269BjVJXK1hKBltRqPf1ymVY=)
                          2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: Qq4r6tfxWlCBFxRmTUBo8YQTZX8r+LS9wYAcWz832T4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
                          rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
        Validity
            Not Before: May 19 01:05:08 2024 GMT
            Not After : May 26 01:05:08 2024 GMT
        Subject: CN=66495044-f14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:0e:bc:78:a9:74:5c:96:17:a9:bf:a2:10:
                    bc:97:f7:ef:7f:72:a2:73:e7:d3:a9:1d:70:f4:ba:
                    1e:ed:f9:93:36:e2:ff:65:9b:df:14:91:61:bb:98:
                    f5:8a:2b:45:da:f5:0e:d7:d5:73:49:49:85:4d:c4:
                    da:b1:b4:77:71:6a:ff:d0:51:4e:d2:5c:4c:a3:d3:
                    6e:37:5b:37:11:ed:e2:49:d2:1f:6f:8e:f6:93:38:
                    3c:13:3a:01:3d:68:b0:be:cf:04:57:c4:58:62:eb:
                    ad:1a:b5:1b:6d:55:3c:10:de:5b:f2:21:21:a7:94:
                    b4:d2:d4:02:2b:9d:1d:83:21:3d:07:b0:ea:25:60:
                    a8:cd:01:82:ff:b3:62:9a:7d:ea:99:fa:68:61:33:
                    eb:3c:14:7e:c8:11:e7:e6:1e:85:db:89:05:1f:8a:
                    29:b8:06:2e:95:99:56:7e:e8:ef:71:53:7b:d2:8b:
                    6b:02:de:8f:5e:0f:f5:d9:de:ae:8b:b3:9c:2e:ef:
                    d7:50:66:1b:91:d7:5d:8b:b4:00:ed:2d:72:87:ab:
                    8d:83:12:f2:86:e1:ea:b2:49:d7:2b:18:7a:0d:de:
                    f8:62:a5:0d:7c:c0:0a:4f:5f:47:43:b5:3c:9a:0d:
                    8f:e0:f5:cc:3f:b3:67:be:74:da:82:bf:33:d9:2c:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:B9:ED:F2:DA:7E:E4:40:E8:85:E5:B7:4E:2B:FE:8B:41:F9:44
            X509v3 Authority Key Identifier:
                keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:63:00:ec:9a:35:6e:20:dd:02:15:b2:4e:43:03:93:f8:d9:
         3c:83:1a:f4:f4:73:be:a3:43:a7:26:c5:de:ef:f8:94:0b:98:
         b2:a5:cd:63:95:8c:bf:c9:9e:7e:b0:2e:d4:46:c4:3e:be:83:
         a4:3c:ec:20:ec:5e:85:9e:2e:4d:e9:13:3d:47:f7:fe:80:ec:
         74:d9:bb:51:eb:97:50:ff:0f:08:be:d9:b8:88:62:7c:d9:ab:
         94:d8:39:bc:4e:53:75:5a:7a:11:17:15:f2:b5:f2:a3:a8:e3:
         17:68:c8:15:3b:97:0e:bf:f5:86:2a:76:01:c9:81:97:48:43:
         fe:4e:55:a3:1f:ec:9f:e0:eb:9b:e1:24:e6:dc:10:80:98:06:
         d8:ee:04:e3:97:4f:f7:4f:6f:10:ea:b5:53:07:f3:f8:62:7d:
         a0:12:88:9c:49:60:8b:48:ba:04:02:63:80:f8:dd:9a:76:44:
         c8:a9:30:e1:21:f1:37:ce:9d:63:b0:07:aa:bd:41:f9:90:b7:
         fe:1e:ca:92:31:22:de:6a:f2:97:4a:b1:46:d7:92:2b:40:09:
         57:8f:44:a6:4d:7e:ca:88:0c:93:39:08:5b:4b:32:65:2b:e8:
         97:13:d6:d7:70:14:1f:81:39:9a:98:54:2c:bb:f3:93:01:b9:
         6a:a0:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org