Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
File:                     lHy2dKhYzZGupVJro2aKEeSey5M.mft (raw, json)
Hash identifier:          ELw9ipwyNGMY2RbQ1XrRR/vNRvwWGfj9v0cz3o55Y7c=
Subject key identifier:   26:12:81:92:5F:B7:45:59:D0:23:D5:F0:16:5A:0E:E2:4D:00:17:23
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Certificate issuer:       /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial:       0317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
Manifest number:          0311
Signing time:             Sun 19 May 2024 03:09:12 +0000
Manifest this update:     Sun 19 May 2024 03:09:12 +0000
Manifest next update:     Sun 26 May 2024 03:09:12 +0000
Files and hashes:         1: lHy2dKhYzZGupVJro2aKEeSey5M.crl (hash: KHPjizqPlSBB5M4gsHRJ+IGyOlGWyt0PxNkyHoojYyE=)
                          2: 13F5D28685B111ECB675B552C4F9AE02.roa (hash: 1ectacXYc5Ni/B4LKjKjy/yz6JJ0/bOlgffCGf02HwU=)
                          3: 147D51CA85B111ECB675B552C4F9AE02.roa (hash: ZoKh3xhYxhnJLBqf+U3DzxssrG+AkkH4yvT0tAoB9Aw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
        Validity
            Not Before: May 19 03:09:12 2024 GMT
            Not After : May 26 03:09:12 2024 GMT
        Subject: CN=66496d58-176c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:4a:b3:84:61:3f:96:fd:f3:ea:79:dd:7e:
                    dd:2d:22:c9:cf:e0:5b:71:72:c9:32:e8:34:0d:73:
                    20:8a:c5:d2:2c:97:c6:47:b0:75:db:04:f1:32:e1:
                    63:51:89:e0:3e:13:96:ab:64:0f:37:ec:d1:8c:c6:
                    65:74:c2:dd:d3:af:00:21:be:3d:78:ce:d1:ed:a9:
                    45:8a:41:a2:fc:ee:1e:cd:31:1f:62:d3:d5:24:e6:
                    94:84:7b:83:10:9f:82:bd:73:e7:e1:49:c4:3e:01:
                    9e:c3:e8:be:e2:7b:6d:d1:d5:ff:8e:ea:2e:2b:26:
                    a3:4d:06:77:db:dc:41:52:bd:1d:6f:3f:20:60:77:
                    05:e3:64:a0:aa:99:76:3a:68:96:3d:66:51:cf:a8:
                    e4:78:5b:e6:4b:3d:64:47:fc:4f:37:13:a3:ad:71:
                    4a:36:4d:3d:35:a5:8a:a5:b4:e0:cf:b2:af:05:50:
                    76:20:09:e8:cc:20:eb:34:54:bc:c3:53:f4:cb:7b:
                    69:cb:95:26:71:08:a4:fd:72:5d:af:88:7e:86:6c:
                    6b:59:06:9b:36:f2:90:b4:3e:aa:4d:38:ca:ee:b8:
                    22:a8:cc:35:f8:ad:21:18:73:3c:95:4a:b2:48:00:
                    39:0f:c8:32:07:28:41:01:69:1d:80:42:e8:40:75:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:81:92:5F:B7:45:59:D0:23:D5:F0:16:5A:0E:E2:4D:00:17:23
            X509v3 Authority Key Identifier:
                keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c6:b4:84:f8:ca:52:52:72:45:82:7d:d8:c6:63:22:54:56:
         0a:0a:ad:c5:b4:4c:a2:f1:a5:f0:e3:ed:0f:61:96:b1:13:b5:
         f2:0f:94:cc:dc:e7:0e:e8:68:e6:95:89:c6:2f:87:9f:11:2e:
         6c:e0:26:f0:9a:aa:d4:5d:c6:26:40:cb:8f:5f:f5:43:c2:cf:
         9c:93:89:bf:2c:a9:d8:8e:2e:db:08:38:c2:5a:59:15:c0:a9:
         88:da:31:2a:e6:e0:d0:c1:54:9e:0b:5d:a0:6d:79:cd:3f:bd:
         c1:5d:c2:45:db:30:89:c4:50:c4:c1:ce:fe:c2:ab:ae:41:70:
         24:cf:f2:52:62:3f:50:dd:da:9c:42:0c:d8:8f:e9:f2:63:6c:
         97:7f:6a:1b:93:9e:98:99:fb:1e:5a:dd:8c:a1:25:87:99:c8:
         e3:81:08:c0:53:2b:d7:64:ae:80:a0:cc:ea:b3:d3:18:aa:1b:
         2c:94:cd:e2:39:e8:9f:9b:8f:41:f7:c5:7d:b1:aa:36:0e:bc:
         ff:60:d3:54:1f:f5:30:58:05:f2:05:f5:56:25:69:f2:5a:05:
         28:b6:91:57:df:63:da:f8:09:a0:87:d0:b8:80:f9:f7:d2:61:
         b0:9a:ce:67:f9:ee:15:29:3c:d4:b6:72:b2:78:59:d7:2a:4b:
         7c:7f:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org