Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
File:                     Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json)
Hash identifier:          XFaiTkkI9ttjQhxGGj8eNn3xJhvQB/LglrpjW3GVfW8=
Subject key identifier:   6C:D4:50:B2:2C:77:27:F5:FC:24:D4:FB:F2:E3:87:09:C8:A5:DE:1C
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       0853
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
Manifest number:          084C
Signing time:             Fri 31 May 2024 22:27:04 +0000
Manifest this update:     Fri 31 May 2024 22:27:03 +0000
Manifest next update:     Fri 07 Jun 2024 22:27:03 +0000
Files and hashes:         1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: DZDpEysCfafsR8PYtCinpHHNtAEeM0pbMSwrK54jYSA=)
                          2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: dDoSbEUF8Pm06HgsKt60HfaN4PW2+PV/q0hwIz0fcG4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: May 31 22:27:03 2024 GMT
            Not After : Jun  7 22:27:03 2024 GMT
        Subject: CN=665a4eb8-f134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:df:82:1d:dc:25:64:ad:df:b2:73:0c:9a:
                    41:5d:c7:6e:20:64:cc:12:4b:48:f4:c8:bc:c4:da:
                    32:a6:24:c1:0e:07:88:03:3d:1e:90:fb:a5:27:eb:
                    23:89:57:07:c6:b8:c1:84:b9:1b:fb:62:a7:b7:97:
                    f6:63:41:57:27:a3:71:33:fd:fe:ac:33:c1:ab:49:
                    b4:1e:dd:48:86:8a:27:16:a9:a5:e2:20:40:e5:e6:
                    8a:99:ee:35:47:7f:a9:24:fd:f9:ad:ab:fa:74:c6:
                    51:e7:64:a8:c1:3f:43:9c:5a:40:c5:14:8b:99:6a:
                    d3:03:90:b3:2f:8a:42:9a:03:e7:18:9e:6a:29:44:
                    d4:f5:21:3a:65:a3:e9:76:92:82:5b:04:30:51:e2:
                    6c:00:c3:2c:85:8d:35:4e:b8:b9:7f:f6:f3:74:5a:
                    27:9e:b0:f4:67:41:3b:1e:9b:f2:56:f0:28:55:3b:
                    46:d6:aa:15:11:51:cf:2c:b1:20:81:cf:13:9c:00:
                    39:62:0a:c6:61:b7:61:f5:d1:36:0f:68:da:23:9e:
                    49:d2:e7:83:09:25:9e:93:17:44:35:b4:ec:a6:4b:
                    d0:d0:c6:58:fd:d5:88:a9:0b:bf:0b:c2:24:0c:e7:
                    2c:ad:98:b4:f8:72:f9:9d:a9:65:6f:09:bd:e0:93:
                    84:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:50:B2:2C:77:27:F5:FC:24:D4:FB:F2:E3:87:09:C8:A5:DE:1C
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:a0:02:1f:8e:55:7b:45:f4:e2:2b:10:93:29:89:19:09:
         6d:7e:29:0d:b4:cf:9c:29:27:68:9e:46:ae:80:9f:79:2b:69:
         36:39:63:fe:7d:2b:31:14:8a:fa:61:f4:0d:04:a5:45:d9:70:
         67:21:e3:f5:a0:94:a2:e6:b9:e2:18:8b:90:ec:b1:3e:8c:2a:
         06:2f:b8:e2:7f:71:09:1a:65:5b:0a:bc:90:1d:6e:f2:c5:b2:
         9b:d2:e5:ff:20:fd:4f:62:b3:31:04:d7:91:8c:96:0b:43:e1:
         49:64:f2:a0:0c:8a:6f:27:1d:5b:79:b8:f8:5d:2d:1e:d7:55:
         cb:c8:b9:2d:7c:4e:a2:5a:14:d1:2b:6c:08:07:5a:d9:ee:cb:
         3d:7b:ce:56:27:ca:4f:dc:44:cc:37:79:17:b3:70:41:ea:2e:
         f9:ce:e3:2d:f0:04:85:31:a9:54:5a:d9:2f:32:f5:36:86:b6:
         ad:30:4a:c3:6d:94:a7:2e:a5:3d:54:61:98:13:df:69:53:fe:
         a5:7c:09:e0:53:ca:44:05:cb:d8:17:dc:02:0a:c5:17:99:3c:
         11:c9:67:b1:c6:bd:85:2c:31:58:46:9b:4e:4e:28:e8:22:69:
         46:22:44:9e:a0:50:99:a0:62:29:f5:6e:86:75:52:b4:b3:4b:
         a5:e0:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:56:59 2024 by rpki-client on console-fra.rpki-client.org