Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          iEmI31ASoEnErHwypYLqYs4EUZMGYpbvrxdy3uENkwY=
Subject key identifier:   96:2C:E2:C2:16:BB:A6:6B:4C:38:08:1B:0C:3C:DE:65:D1:61:FC:87
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          02C4
Signing time:             Sun 19 May 2024 03:39:14 +0000
Manifest this update:     Sun 19 May 2024 03:39:14 +0000
Manifest next update:     Sun 26 May 2024 03:39:14 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: 4VhPgiCS1fUTeDrkiIh6y26ulM6MzbwAg3kfOeUN3tE=)
                          2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: SqiFzOJRZ9/ptRmFEbei+eAgBX8rWvQzMTY6uO6l7Mw=)
                          3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: z1yiyQwN0DqJrBGmQfoo/wLic8yaS6jpAe3MuePiWjE=)
                          4: 9CE54CD6B6FF11ED8727AE14C4F9AE02.roa (hash: jWUsjkWgip9FCS22U2KExmmwIkH/G72B5qVLYRvItEk=)
                          5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: A2ghXqX96Mx1uhUOiKDYj1cFNvYrDt5jbB5+9b7umVc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: May 19 03:39:14 2024 GMT
            Not After : May 26 03:39:14 2024 GMT
        Subject: CN=66497462-0870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:4a:83:fb:d0:48:b1:94:2f:ac:84:67:3f:
                    13:c2:86:05:22:65:f9:6e:c5:88:ef:e7:46:b3:d4:
                    07:f8:18:a9:5a:7e:40:5c:55:fd:51:c9:f0:f6:14:
                    df:84:b4:43:a7:fe:b0:2c:95:43:1f:c8:ec:00:d5:
                    f9:c9:b8:41:48:a0:24:ac:68:a5:e4:0d:e2:fd:11:
                    61:6f:80:33:ae:ee:c7:f9:ce:a8:67:3c:64:e9:23:
                    5a:41:aa:f8:31:af:8a:69:87:59:ec:f0:18:0a:0d:
                    0e:ac:97:fe:f2:dd:90:b1:1e:f8:04:38:81:d0:c5:
                    cd:4f:49:9d:01:f3:03:c4:bd:32:86:49:0f:cc:de:
                    99:44:d4:5e:0e:6d:a1:0f:60:5c:6e:c5:f0:b7:1b:
                    98:52:84:eb:bd:32:1d:04:6d:44:90:6f:02:67:59:
                    62:68:f1:72:63:50:23:59:e1:1d:53:e2:7e:76:2e:
                    cd:b0:a5:f5:6b:e8:56:54:5d:1d:0d:b2:94:a6:fe:
                    17:bd:b4:92:e8:86:b2:9d:4a:da:03:fd:37:bb:bb:
                    00:0b:cb:8d:5e:cf:fd:8b:60:31:d0:07:38:c9:e2:
                    65:18:bd:df:5e:80:ea:da:6b:0d:b4:39:64:e0:86:
                    2c:00:dd:e3:a0:db:ab:31:27:74:6f:03:73:63:c6:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:E2:C2:16:BB:A6:6B:4C:38:08:1B:0C:3C:DE:65:D1:61:FC:87
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:be:c1:1c:4b:69:2c:a1:20:90:1a:4e:19:08:88:4e:ee:6e:
         9e:80:e7:66:df:8a:e1:70:6d:ec:c4:60:4c:1d:48:36:96:5c:
         a0:15:ec:9c:30:0a:b4:3a:8f:f8:24:9a:7c:c0:bf:9c:e0:ed:
         b4:5c:68:d1:96:d1:98:06:0e:63:20:ce:42:42:69:17:a7:95:
         b0:19:a4:04:66:ba:b7:3e:d2:6a:67:24:b9:be:9e:bb:5f:38:
         0b:31:ce:eb:33:f0:43:20:58:fa:f9:ab:43:fa:fe:c6:f1:b7:
         94:ae:31:1c:25:6a:35:ec:1b:2b:4f:65:58:98:a9:6e:28:d6:
         fd:d8:e6:11:07:ac:4d:06:ed:9c:21:ba:c6:4b:6f:58:4a:4a:
         cc:3b:d9:d6:36:d4:b8:41:f4:33:69:97:07:ed:0a:07:71:bb:
         5a:29:96:4a:a4:67:d7:dc:bf:8b:29:74:82:86:59:26:1e:1b:
         be:d2:27:02:5c:58:25:0a:ef:c7:7a:21:ad:be:28:83:75:ea:
         d2:5c:f6:82:c9:f7:67:3c:48:d7:75:37:a5:ce:3d:68:d2:68:
         c3:b0:5f:1f:98:cb:c9:1b:ea:c4:c2:43:4f:bc:74:49:ea:72:
         fd:5b:6e:ee:65:23:9d:a8:b2:cd:ff:54:76:b1:bb:cd:19:dc:
         a3:94:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org