Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier:          GFbag1d9MkSZxDEhQYkznijAa96CG08zOxRPoguB+vo=
Subject key identifier:   8E:14:DB:65:3A:CE:C0:71:B6:87:D4:2C:39:D3:73:6A:26:55:5A:C0
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1E56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number:          1E41
Signing time:             Sat 18 May 2024 16:25:27 +0000
Manifest this update:     Sat 18 May 2024 16:25:27 +0000
Manifest next update:     Sat 25 May 2024 16:25:27 +0000
Files and hashes:         1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: u1EfCwwikC6BgBEIuP/k+qoAg6fC6+GyxJzdMkrJxqg=)
                          2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: +DB068HjaXQvzaK6pfb449iUuglIGBNK2OaRZptHwjA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
                          rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7766 (0x1e56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: May 18 16:25:27 2024 GMT
            Not After : May 25 16:25:27 2024 GMT
        Subject: CN=6648d677-a4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:3f:ea:f9:51:ba:04:af:59:b2:2b:c5:e8:
                    63:b0:e3:6a:97:75:ab:57:72:9f:58:33:34:2f:c2:
                    5c:da:d2:be:bd:02:7c:64:90:03:27:e0:89:1e:48:
                    3d:c6:f4:da:f2:ea:3b:51:06:ee:b7:db:6c:73:37:
                    2b:83:c9:2d:f1:09:2f:a6:02:7d:36:73:0e:22:57:
                    80:d4:15:aa:96:09:ad:68:dd:4a:ee:d8:73:c4:b2:
                    e7:c6:93:a2:7a:34:ef:ca:3c:5c:01:95:09:d8:05:
                    10:90:a6:a0:02:39:f7:02:be:db:1a:24:f9:cb:7b:
                    a7:8b:43:6a:58:18:11:b6:df:c8:12:87:42:2b:6b:
                    c9:8d:74:c0:4e:2d:e4:89:cf:2b:f5:55:8c:04:e3:
                    97:ab:bc:3c:d6:93:50:ee:10:f2:8e:8c:8d:bf:98:
                    a2:f0:4e:41:60:5c:b1:84:b2:07:a1:12:c4:92:a7:
                    5f:4d:dc:f4:f1:64:27:62:76:04:79:ee:22:80:d8:
                    70:11:e9:5e:4a:b7:5a:5c:cc:11:cd:8a:e0:20:ca:
                    4e:08:c3:9c:72:c6:b5:9a:9e:5a:8a:76:c0:ec:6d:
                    83:49:83:f9:e3:68:13:8c:7c:75:52:fd:3c:96:e3:
                    31:e9:e3:95:96:25:75:bc:02:ee:89:70:88:39:0e:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:DB:65:3A:CE:C0:71:B6:87:D4:2C:39:D3:73:6A:26:55:5A:C0
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:2e:49:08:78:57:48:eb:b1:25:d4:e5:23:39:f3:46:9b:
         00:35:36:ab:16:45:4f:65:31:55:07:5c:5e:50:bd:a3:62:ba:
         50:5d:67:32:96:01:6e:fe:5e:c6:db:d1:7b:64:cb:44:a6:7a:
         a9:72:fa:bf:d5:c3:ac:c0:9d:ea:61:23:c8:82:cd:37:e7:b7:
         08:26:6b:ac:c3:48:bc:93:16:31:c1:27:9a:78:05:56:90:86:
         27:1b:1b:e9:49:07:40:61:b1:48:d4:1c:b9:dc:e2:37:e3:8a:
         cf:35:d7:be:dc:29:50:7d:8e:d3:c1:44:92:24:90:43:6e:4c:
         08:64:3d:a9:16:e0:fa:a6:48:a9:9c:e6:8c:c6:16:29:e1:9b:
         a7:66:b3:56:0e:ad:35:93:b0:3d:e5:9e:83:87:27:52:f2:1b:
         b0:c4:c6:26:9f:86:7e:df:89:f9:a1:9d:c2:a6:e4:5e:95:5f:
         64:73:b8:f5:f1:28:bd:0b:9d:d1:31:de:8e:c5:8e:cd:d2:ea:
         62:86:2f:c9:d6:1d:e3:2f:d6:72:08:6e:f7:ff:87:ff:04:a9:
         78:f0:81:62:0e:1c:1c:ae:cd:ef:03:35:14:f3:87:67:c6:f3:
         39:28:b9:a5:3f:2d:72:96:19:60:46:2c:a0:f8:15:5c:94:95:
         66:75:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org