Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          dinu+SZVUAE682LFOEhGbQSOx0LlBmfvYZZq1Vb+hQQ=
Subject key identifier:   F8:2E:19:62:26:AC:4E:74:00:7C:14:2D:69:EB:0E:8E:31:7E:E4:F9
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          06D2
Signing time:             Thu 26 Sep 2024 21:51:22 +0000
Manifest this update:     Thu 26 Sep 2024 21:51:22 +0000
Manifest next update:     Thu 03 Oct 2024 21:51:22 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: fdoKqBU9LL4V963JXOCjBwyB9gK9OcNUSKbCMZiTXIk=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: jULCcckoGIuX4HbplqjfS3/Ak++6mwnpdyIZXSfv3VM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: kD06hheJsfIetkOj5CjjTsbsfgxOAL2MCCsvRPoCV8Q=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: gC86FOlLNlw8sX6fIF1yFtH6XDI7lFfd4FXNH2SWx4M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Oct 2024 21:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Sep 26 21:51:22 2024 GMT
            Not After : Oct  3 21:51:22 2024 GMT
        Subject: CN=66f5d75a-7c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:f6:24:df:22:4d:35:2c:a7:3e:06:5e:cc:
                    f6:a5:dc:4a:92:83:98:1a:9b:9c:67:59:40:3d:b4:
                    c1:41:65:86:53:2e:3c:fb:1f:02:4f:16:2e:1e:01:
                    9c:77:d1:00:1c:35:66:ac:aa:6a:89:bb:91:62:3f:
                    9b:6c:80:b7:6b:1e:03:10:d1:fa:61:4a:7f:ff:d8:
                    f5:55:6a:31:0f:7d:b1:c9:ca:60:8f:5a:05:52:71:
                    bf:7c:d2:42:b7:c0:6e:5e:12:b7:80:fa:6d:d7:ff:
                    69:66:66:3c:38:f0:4a:25:e8:63:59:70:fc:5b:3f:
                    a6:92:7b:ad:2f:06:24:24:bd:5d:7f:92:5f:48:c3:
                    d9:58:e7:a3:70:2f:19:4e:83:20:2d:2f:6e:9d:72:
                    bb:fb:b1:29:34:bf:fb:74:20:67:e2:38:46:dc:25:
                    0d:32:72:d0:00:93:4b:f2:38:43:84:ef:03:53:b6:
                    8d:c0:d8:f0:e4:e5:f1:48:a3:b6:b1:11:11:b5:a0:
                    dd:fe:8a:8c:66:32:78:2b:7f:7b:ad:ab:8c:c7:75:
                    a8:5d:12:cd:32:14:7e:69:19:18:d7:75:1a:24:56:
                    10:14:56:cc:38:67:67:59:1d:b4:3a:a6:24:9a:60:
                    11:bb:2a:88:72:e8:17:66:b8:03:6c:00:85:bd:ac:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2E:19:62:26:AC:4E:74:00:7C:14:2D:69:EB:0E:8E:31:7E:E4:F9
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:39:34:c9:44:48:96:57:06:91:a7:6c:ee:4e:be:04:40:ad:
         90:b2:88:84:43:91:54:12:54:2d:50:82:a6:bc:7a:6f:6e:3b:
         a1:49:d7:b5:11:14:07:29:cf:9d:3b:c3:5c:c8:9a:85:17:25:
         44:75:c1:36:55:9f:37:d1:56:79:a8:ab:dc:7d:e3:3f:bb:7c:
         04:f0:81:95:18:b0:1e:14:39:10:e6:0a:bb:41:cf:5c:83:8c:
         86:53:a7:71:1a:dd:47:a4:d0:0a:95:5f:5d:e2:1b:c4:59:8b:
         a3:71:4b:7c:66:4e:2c:7a:4c:cc:77:8d:73:c8:3b:97:5e:b9:
         9f:6b:2e:34:f4:95:23:a9:46:38:18:a6:cd:f4:d9:21:67:70:
         6f:83:a5:89:cc:3d:66:a0:f5:44:a1:00:d1:c8:fe:7c:96:4d:
         4c:17:c1:82:77:17:de:86:c6:9f:80:eb:ea:72:b1:65:6a:b9:
         9b:59:89:27:4a:3f:35:c6:44:55:36:7f:21:d8:45:0f:f1:a6:
         f9:e7:aa:33:01:5c:ac:ad:a0:53:7e:96:b9:f3:e6:c6:01:0d:
         98:15:f3:d3:d0:27:82:95:fa:89:19:62:96:c5:a7:f6:27:aa:
         74:ae:ea:58:8a:82:8b:f6:65:45:da:3c:a4:30:40:36:37:e3:
         8b:08:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:13:33 2024 by rpki-client on console-fra.rpki-client.org