Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
File:                     Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json)
Hash identifier:          IxXTigkccI4xGMah94g3bi7jWKISdZv0FicNHIewqRA=
Subject key identifier:   44:B3:6F:8E:CE:9D:14:B9:0F:5C:72:D4:2C:9A:86:A5:E6:FF:A8:D5
Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C
Certificate issuer:       /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
Manifest number:          1F
Signing time:             Sun 19 May 2024 08:39:32 +0000
Manifest this update:     Sun 19 May 2024 08:39:31 +0000
Manifest next update:     Sun 26 May 2024 08:39:31 +0000
Files and hashes:         1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: P0FDcOzaPn7/KRChY16AJUEDYvkuTude9as8KeWzQXw=)
                          2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: e1nltWx3giMHwlYhBCD0QRszgNiVcpgw5/uqGRKsTPk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C
        Validity
            Not Before: May 19 08:39:31 2024 GMT
            Not After : May 26 08:39:31 2024 GMT
        Subject: CN=6649bac3-913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:f0:7d:7a:f3:23:fe:5b:00:f7:0c:41:a0:
                    cc:a6:c9:35:52:41:c7:bf:a9:d6:b7:5c:3e:75:60:
                    3c:cd:08:e7:74:43:29:9f:34:2a:22:9e:55:0c:15:
                    94:3a:75:55:e6:dc:9f:c5:ed:cc:75:f6:53:16:59:
                    97:0a:1e:08:55:06:6a:87:7f:3a:41:b0:9a:57:a5:
                    66:98:5a:f6:7d:42:2d:3c:76:70:80:61:0e:36:cb:
                    5b:5e:b7:40:68:c5:79:a0:41:ba:96:ad:76:71:cf:
                    ba:c2:25:c0:a0:04:b4:bc:7d:3a:f4:5f:e9:30:7e:
                    01:be:aa:cd:05:44:f2:76:12:fb:fa:8a:cb:d4:6f:
                    c9:2c:b8:97:4e:ed:2d:65:37:9a:a9:90:2c:92:78:
                    b0:1e:95:5f:26:2a:44:55:62:18:08:d0:ce:e5:4b:
                    69:cf:30:77:ad:39:ee:82:ca:02:41:64:9c:52:07:
                    e4:08:eb:85:ad:b5:d5:72:05:e8:be:d9:6c:68:15:
                    a0:8e:b9:5c:02:49:d6:50:dd:e4:32:3e:34:09:6d:
                    bc:fc:7b:f3:05:37:3a:9c:49:73:da:4c:b6:c9:af:
                    cc:bf:3f:d1:1a:24:0e:7a:31:11:61:82:81:10:e5:
                    b8:82:ba:5e:c0:f5:6e:ff:fd:3f:db:79:4d:ae:ff:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B3:6F:8E:CE:9D:14:B9:0F:5C:72:D4:2C:9A:86:A5:E6:FF:A8:D5
            X509v3 Authority Key Identifier:
                keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:48:72:b6:1d:d4:09:9f:3e:ef:3e:59:45:46:f3:84:c6:33:
         9a:96:c4:be:8b:03:de:b3:9c:97:df:9c:a3:bc:f7:93:47:f4:
         b6:b3:b9:24:14:18:55:ac:ed:aa:11:9d:5c:a4:21:e6:96:c7:
         15:41:4f:84:38:bc:9d:c7:65:b5:98:fd:fa:7f:eb:6a:68:1e:
         4f:36:5f:8e:d7:ef:d6:fd:40:c0:fe:39:0f:37:91:8c:db:77:
         66:33:ac:63:ba:d4:f7:5a:39:4a:3f:a8:1b:b5:8b:a4:93:85:
         41:81:8b:cd:7d:d4:c2:a7:e8:ae:4f:b6:50:58:a3:01:95:b0:
         44:4f:08:a5:2d:83:b9:2d:ae:2d:87:09:08:67:31:56:65:8c:
         20:cf:0a:e0:94:c8:9c:3f:cd:e7:83:83:b8:9b:ce:19:72:fe:
         3b:66:eb:be:a9:0b:17:62:8b:ff:c9:ec:58:e7:e0:f1:14:12:
         77:54:4e:9c:9b:51:23:db:4d:b4:24:58:40:a9:c6:63:d7:20:
         3b:2c:3f:97:8c:af:43:8b:5e:29:3d:06:50:44:13:ab:2b:89:
         b1:1d:3c:a2:ff:06:e5:58:48:40:10:3b:1a:4d:b9:be:a6:49:
         69:63:e4:cf:ee:70:42:20:7d:d8:70:ba:e0:0b:4a:3f:a5:f5:
         fa:74:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:04:15 2024 by rpki-client on console-fra.rpki-client.org