Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
File:                     oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json)
Hash identifier:          M173ikiYdVagyl9jnYTBQDZugLKZEdA5W+vd4DELcAE=
Subject key identifier:   D6:60:C7:82:E6:EC:EE:4D:40:B1:24:05:05:C7:71:7D:01:7F:67:38
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Certificate issuer:       /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
Manifest number:          0513
Signing time:             Sun 19 May 2024 01:04:50 +0000
Manifest this update:     Sun 19 May 2024 01:04:50 +0000
Manifest next update:     Sun 26 May 2024 01:04:50 +0000
Files and hashes:         1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: E1sHhHVegB55ECuY8tmZQZTKO/ugLHH1BvF2ieWW3OU=)
                          2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: Xl8AtspU2gm9aJvgm/6OJcPbZkF6w9pgzK3+vnPiMlM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
                          rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
        Validity
            Not Before: May 19 01:04:50 2024 GMT
            Not After : May 26 01:04:50 2024 GMT
        Subject: CN=66495032-1fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:c1:1e:05:74:25:81:7f:49:cf:f5:08:66:
                    ff:aa:58:e2:c7:97:b8:33:ee:c6:7b:39:07:d4:59:
                    37:a5:95:5d:f0:d3:f0:7a:92:ba:c2:ee:48:17:15:
                    a5:64:06:6e:0a:43:cf:74:22:45:fb:6c:a3:75:1a:
                    90:2d:f8:d9:0f:4e:3b:35:e3:55:05:ea:57:de:de:
                    ef:b5:5c:b5:9f:b0:de:11:f2:76:c4:95:b8:2b:38:
                    b4:4e:94:fa:91:e3:e1:c8:95:b4:f2:2d:56:ba:1d:
                    7e:99:60:92:15:b5:23:1e:fc:f6:ef:9d:d3:a7:72:
                    7b:c1:d3:35:7c:9c:ef:9d:ad:10:c2:c3:3d:24:fe:
                    d2:17:4c:0d:97:1d:c1:a0:ce:99:39:6e:16:38:79:
                    71:f9:c3:17:74:d6:6e:ac:fb:99:41:cb:ed:b8:e6:
                    25:d6:91:10:b1:88:08:85:11:a7:fe:86:dd:08:7b:
                    b6:b0:cf:f7:e8:a3:e4:e2:c4:a3:69:46:04:bc:e0:
                    c8:69:bc:ac:fc:76:20:16:1d:53:6b:58:da:b2:1e:
                    0b:7f:6f:1a:d1:f1:98:c4:47:58:f5:6d:71:e3:bb:
                    bb:c9:54:ce:5d:a1:df:2b:a4:fc:3e:18:0d:31:59:
                    bd:a6:97:b1:36:13:83:a7:08:3f:76:12:4c:e9:05:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:60:C7:82:E6:EC:EE:4D:40:B1:24:05:05:C7:71:7D:01:7F:67:38
            X509v3 Authority Key Identifier:
                keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:db:14:fc:fe:eb:4f:94:1e:30:56:66:09:e4:3d:5b:ab:
         c8:94:f1:45:1e:89:7d:11:05:2e:a2:b6:38:76:b6:59:d5:fa:
         81:40:1a:81:97:46:75:a9:b8:9f:23:76:77:21:90:e8:07:be:
         d9:4d:43:04:32:c0:23:d5:9b:f5:7c:6e:56:4c:bd:64:90:d0:
         15:f8:63:07:34:f4:92:6f:26:0d:9a:38:b3:6d:05:fe:ad:15:
         c2:c9:22:f9:78:78:ef:0e:be:45:e5:3a:3b:d0:b5:40:f4:2b:
         f7:b8:6d:f1:c1:63:d9:41:dc:a3:8c:55:5a:0a:0a:3b:9d:60:
         12:b6:04:da:00:fa:dd:5b:f2:f7:b1:96:4e:e2:0a:ca:d4:5a:
         4f:dd:c5:8c:e5:7c:08:32:d1:98:bd:43:fe:7a:05:d9:ca:07:
         c5:8a:76:d2:c0:35:81:07:dc:82:f6:5f:25:ce:f9:06:b9:22:
         10:b0:8d:a6:93:7d:cc:2c:4f:24:77:d5:b0:8e:56:29:2a:93:
         e9:5e:fe:3e:56:81:4c:41:99:76:e3:80:f9:fd:da:c6:cc:5f:
         61:4d:b7:f5:ad:1b:08:8a:a9:28:87:a8:58:1d:af:4b:11:51:
         61:6d:74:67:12:d0:98:56:29:28:b7:61:d1:21:73:26:00:a0:
         48:70:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org