Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File:                     PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier:          +rBPQd25D+qPbPvxStP0Y0gfOQGj+fp8CEv3+u45KNo=
Subject key identifier:   78:BF:67:AE:59:02:13:3B:D5:2E:C3:8E:C7:09:EF:6F:60:47:F2:FE
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number:          06D8
Signing time:             Sat 18 May 2024 23:38:46 +0000
Manifest this update:     Sat 18 May 2024 23:38:46 +0000
Manifest next update:     Sat 25 May 2024 23:38:46 +0000
Files and hashes:         1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: 1R0RPhoV+xeUqGyiWLtroYe4NbmP/VYKTbXhSRZvoRg=)
                          2: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: SLmZFGSKKHSNTbp90Eqx5t4RQARpRICmuu6YOwjpeZs=)
                          3: 0112375EA05411EDB043385AC4F9AE02.roa (hash: Kq1jWdH8x/n2DzsxB5OFw0vmNSRkGTF3DaCAJgxryGQ=)
                          4: 8A8DFF6C850111EEAE266623C4F9AE02.roa (hash: iGYX3B/IkkkfRtF03/OTWETd2AEHP1Oy6Q8xpuFKgCM=)
                          5: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: udEqLCtgKXaI1YwmV1HyckUBiaH+LidusYCEz2iqc3c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: May 18 23:38:46 2024 GMT
            Not After : May 25 23:38:46 2024 GMT
        Subject: CN=66493c06-85e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:1a:d7:9c:f1:ad:19:39:0b:de:96:22:66:
                    21:b1:fc:85:2a:a4:7d:41:08:32:0a:f0:11:8d:6e:
                    bc:e3:f8:2a:bc:05:45:64:3d:46:3e:29:f8:c2:a2:
                    e6:ce:73:3c:bf:a0:04:8c:ba:1a:ec:39:e6:04:e8:
                    03:aa:89:40:02:4e:39:0f:3f:98:9b:09:c9:0d:7e:
                    1e:33:1e:82:68:98:e8:81:3b:4c:34:cb:9a:72:c2:
                    84:7a:2f:da:66:14:84:f9:2b:95:6b:be:97:67:0c:
                    2c:7d:46:10:86:5e:4e:9f:ec:0e:0e:be:b1:b9:d3:
                    cb:56:60:6e:ff:41:16:34:89:b7:0a:db:ae:7c:ff:
                    d8:b5:6e:78:0a:27:eb:43:e2:56:55:64:c6:73:c3:
                    19:56:eb:d7:8b:08:33:55:29:9e:26:82:56:3c:66:
                    6b:ad:52:61:b0:67:b4:5a:80:8d:69:ce:d0:8e:81:
                    10:dc:2f:82:00:d8:5e:c6:8c:19:c3:68:68:51:43:
                    a5:3a:9d:44:4c:8f:87:3a:03:53:61:6c:e3:9b:87:
                    47:f1:30:5c:db:86:25:8b:90:57:57:f5:86:a3:95:
                    57:f4:5c:6f:b8:a8:91:64:52:66:ee:28:a0:8b:88:
                    4f:bd:71:8b:db:80:c1:73:a1:0c:cd:50:0b:fd:e1:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:67:AE:59:02:13:3B:D5:2E:C3:8E:C7:09:EF:6F:60:47:F2:FE
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:82:45:45:8d:93:9c:34:8e:33:a2:93:29:2e:32:81:eb:
         80:cd:dc:67:46:cb:c8:a0:4b:0d:71:d1:f8:0d:8b:3c:21:81:
         14:81:e4:81:72:a0:95:01:75:fa:89:61:25:94:48:4f:61:77:
         d4:56:20:d8:a1:a1:f7:30:69:a3:79:88:bd:4a:47:c5:25:3c:
         3e:51:cf:0d:68:79:05:75:55:5f:77:eb:02:78:3a:58:ab:4a:
         44:2b:47:88:cb:93:a8:97:53:5d:cc:88:a1:d7:3b:c3:e2:4b:
         fb:8d:04:c0:99:7e:a6:6a:f8:08:87:65:63:99:54:42:70:77:
         26:80:06:7a:1a:49:a6:63:e2:30:2b:cb:2a:5b:07:04:bb:16:
         e2:1a:72:fa:bd:33:57:7e:5c:4f:c8:3c:a8:4a:2d:47:d9:56:
         a4:22:41:9c:d8:3a:18:ce:b5:cb:da:05:4a:e0:63:f3:dc:a7:
         3d:5c:b5:4d:e4:ae:4b:cf:75:79:45:92:fc:76:51:bd:09:22:
         f6:3b:89:86:bf:07:54:f2:e3:ea:4c:77:40:80:11:e5:71:6f:
         fe:d9:d5:de:c7:3a:7b:c3:a8:e0:87:50:2c:37:84:f4:44:55:
         2d:43:28:d8:50:ce:dc:b2:b6:93:f6:62:d9:41:f7:e7:95:7e:
         46:4d:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org