Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          d78I/kzV5MsK6AqvQXlehopADrJNrnpfAT8tzwUiE0I=
Subject key identifier:   36:D9:5A:AA:43:80:D9:CE:3D:A5:B2:42:BF:5D:04:62:29:2D:56:0F
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0519
Signing time:             Sun 19 May 2024 01:08:53 +0000
Manifest this update:     Sun 19 May 2024 01:08:53 +0000
Manifest next update:     Sun 26 May 2024 01:08:53 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: 9zZMz8J/zIcAQpAeQcogd9Tc9pOHeD7GSIdJrvZ/CuU=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: oXt1DPXjWPZcWGx2zmUdD8F+oWdjv59d4gp7Tb8aLTY=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: jf16jGHgsw9Bi43+g+52lKN0zxcWWkjn9c7jAjKHxEY=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: X/iupfoaml8hcebc5qQYJhHfQRJpbcfR9nZK+THvna4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: May 19 01:08:53 2024 GMT
            Not After : May 26 01:08:53 2024 GMT
        Subject: CN=66495125-b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:90:6f:92:e8:85:6b:b8:f0:4c:14:47:65:
                    2b:b0:49:49:f2:cf:6e:e7:4c:1f:00:d8:a4:22:fe:
                    54:08:de:5d:89:4c:bf:65:bb:4e:10:78:84:ec:db:
                    4e:eb:9d:ae:7d:d2:ac:bd:97:28:78:c2:48:ff:00:
                    cb:65:c8:d1:1d:d6:a7:e7:35:51:cc:9f:53:f4:d2:
                    04:d5:4f:68:37:90:58:cd:1b:36:c0:83:7a:d0:27:
                    d3:5c:4e:e9:18:92:81:fc:cc:cf:a9:a2:ea:c2:e8:
                    cd:73:a7:20:c8:03:1f:e8:2b:2a:8b:e2:26:33:31:
                    a7:25:1c:fd:76:a8:d2:89:75:25:a9:87:c5:da:e7:
                    17:98:31:dc:df:bf:3e:5b:e0:8a:21:6f:ab:31:75:
                    ee:64:af:4a:11:cd:c8:53:75:00:0d:2a:79:ca:e9:
                    40:ae:07:74:89:88:7c:38:2f:35:9a:f9:da:6e:32:
                    2e:cd:15:a6:e1:b6:21:a7:f4:e5:e5:f2:2b:2f:98:
                    1e:9b:a5:55:1d:b9:cf:22:06:9e:71:5b:86:85:e4:
                    d7:8c:7d:49:2f:a8:96:02:18:b6:4e:42:aa:82:3c:
                    a4:40:19:09:15:dc:84:93:53:03:7f:0b:3a:cc:ed:
                    03:99:39:98:04:20:1b:d6:0d:40:b6:cf:cd:3e:fb:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:5A:AA:43:80:D9:CE:3D:A5:B2:42:BF:5D:04:62:29:2D:56:0F
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:cf:6d:c5:15:9b:93:96:76:d7:aa:0e:c2:1b:7f:1e:2f:
         fa:48:ec:93:84:76:82:06:c9:09:e6:7e:cd:ee:b1:96:e5:2b:
         f4:3f:07:1b:ba:cd:3e:58:f7:dd:38:b2:48:db:ba:f2:49:fd:
         2e:b3:35:cd:68:73:72:e6:08:fc:bb:ac:ca:98:c6:e5:02:34:
         9d:af:c3:12:d7:8a:51:f5:74:90:3d:3d:ff:84:fc:c4:53:33:
         80:7a:bf:5b:55:c6:83:d1:2d:4e:8f:4f:30:eb:e7:ed:aa:9b:
         4e:f1:a6:3e:9e:7b:07:66:af:1d:ac:c0:51:0a:af:62:d1:a1:
         fa:ea:c5:80:8c:32:f9:e9:be:12:4f:62:e1:89:5f:90:2a:77:
         85:71:53:b0:ed:58:ef:69:ab:fd:64:d2:b5:71:f2:39:18:4f:
         28:b6:bc:9e:33:42:40:a8:24:cf:cf:d6:f1:e5:3b:e0:8f:51:
         d9:19:06:7a:80:11:47:fd:c9:e8:0c:73:94:81:9c:9b:63:dd:
         b4:63:15:ce:77:a1:f6:67:44:f0:0c:6f:97:96:1a:20:fd:4b:
         21:d7:ee:fa:bc:1c:6d:64:0c:b3:d0:09:c8:78:f9:a7:21:43:
         84:e8:d9:a2:df:ed:57:4b:04:35:b9:e7:72:d4:0f:3f:72:28:
         41:f1:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org