Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
File:                     FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json)
Hash identifier:          R73ynvSzevAntiVU0osbJnsdf7AbyX5YHLlTKdB1Szo=
Subject key identifier:   68:F1:B1:CC:88:CE:CA:3D:DE:54:D8:B5:DE:46:58:16:D8:36:2C:0D
Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
Certificate issuer:       /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Certificate serial:       045A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
Manifest number:          0456
Signing time:             Sun 19 May 2024 01:51:18 +0000
Manifest this update:     Sun 19 May 2024 01:51:17 +0000
Manifest next update:     Sun 26 May 2024 01:51:17 +0000
Files and hashes:         1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: /Zz1R0ex7wNFJR2j7mEKpW/B7H1uK7Hp6//TiJLAF6E=)
                          2: A2835264049511ECB774BA31C4F9AE02.roa (hash: Ylfs7EK5RTvqOTDzyp1EvOHpd+EWi2jGm1bZViVOrWM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
        Validity
            Not Before: May 19 01:51:17 2024 GMT
            Not After : May 26 01:51:17 2024 GMT
        Subject: CN=66495b16-4bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:c7:d6:28:22:1e:28:26:69:b4:8f:0b:85:
                    ff:8d:3a:5e:33:bd:db:64:2a:9e:41:7a:94:13:82:
                    4c:5e:f6:15:c8:f7:bb:b2:1e:9a:81:cb:03:6c:1d:
                    f5:b1:bd:8a:d1:ac:41:60:04:5c:e5:5a:6f:2c:79:
                    e2:53:23:a0:39:37:c0:d8:89:f9:ef:02:03:cf:6e:
                    bd:41:26:94:48:0b:4b:d2:24:82:c3:88:1d:bd:3c:
                    86:eb:93:b3:03:fa:20:6a:4c:40:61:ff:7f:1f:e0:
                    70:fa:9a:c3:a9:3b:7d:90:7e:8b:56:2a:4c:da:fb:
                    9d:7c:df:dc:64:c7:8f:c2:ff:55:25:e3:94:39:2b:
                    8c:51:10:43:97:55:0a:5a:fe:50:e1:e1:ee:2a:29:
                    b6:32:ba:84:7c:fe:60:b3:07:6d:c7:dc:cf:07:a3:
                    4a:69:10:ab:95:49:56:1c:0e:a1:69:be:25:b9:0b:
                    20:77:c7:9d:b1:59:7e:c8:10:13:95:b2:40:36:32:
                    54:31:54:f3:55:df:59:6e:d6:51:a8:46:0f:39:06:
                    98:ae:c9:70:36:86:73:9d:7b:9c:43:4e:78:ab:61:
                    26:8f:2e:c7:fd:38:8a:43:76:d7:31:f7:ad:d0:be:
                    3e:c2:93:f1:d4:96:50:9a:cd:35:3a:25:4d:93:69:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:B1:CC:88:CE:CA:3D:DE:54:D8:B5:DE:46:58:16:D8:36:2C:0D
            X509v3 Authority Key Identifier:
                keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0f:56:8c:81:0e:c2:ed:f1:01:f9:78:f9:53:87:3a:b3:59:
         86:29:b0:45:f7:e3:ba:fe:f0:a3:6d:ba:fe:92:c7:df:b6:89:
         5a:95:e7:20:48:96:e5:e5:e6:49:fd:21:83:08:89:60:2d:f7:
         ce:2f:c6:5d:00:75:d1:a6:f7:e4:18:bc:37:b7:3e:d6:46:3b:
         f6:da:d0:61:93:4f:22:b2:2c:89:87:fd:98:34:6b:fd:fe:8c:
         dd:96:b2:46:1f:04:6a:02:d1:61:1f:6a:dd:ab:ac:a0:f4:ca:
         56:84:4a:a5:7c:a1:29:83:b1:40:2e:f5:9a:d2:9c:d7:ca:38:
         89:23:fc:12:9e:68:c5:ab:45:a9:af:ed:8c:31:98:74:33:f4:
         17:68:d2:a4:64:f2:b8:49:e8:42:93:b7:d1:3a:bf:55:e5:f8:
         13:3e:61:1c:db:db:5a:db:6d:7c:40:5e:1a:64:5a:60:59:18:
         d3:91:51:d8:33:ca:dc:8a:be:1e:e4:41:35:31:49:dc:da:a6:
         fb:4c:71:0f:2e:14:93:50:10:22:1d:73:76:e0:37:59:42:98:
         6a:77:70:08:89:aa:57:a2:5d:f9:34:f1:0a:55:77:65:6d:c3:
         4a:0e:05:05:83:da:f9:6a:3b:d0:67:56:b1:a3:e0:3a:85:be:
         5e:70:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:17 2024 by rpki-client on console-ams.rpki-client.org