Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          GV3DkoMmodED5ISpF1+DejoeTiWsT9dhlofElGM7lBc=
Subject key identifier:   C9:E6:7A:09:31:F9:50:98:67:9D:13:D2:EC:14:53:6A:71:66:A1:FF
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          0177
Signing time:             Sun 19 May 2024 04:47:00 +0000
Manifest this update:     Sun 19 May 2024 04:46:59 +0000
Manifest next update:     Sun 26 May 2024 04:46:59 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: 0hkQlFx78IWhkDleQbX0iU3izFn7pVQcGL43cqlHNxg=)
                          2: B0DF9618599B11ED99A5B776C4F9AE02.roa (hash: pTEiu18qDzSVb2/rNCXmrUIkXiajyei95hW43UZ5kCc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: May 19 04:46:59 2024 GMT
            Not After : May 26 04:46:59 2024 GMT
        Subject: CN=66498444-0c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:49:46:c2:ff:e8:8a:be:ed:f0:02:f9:0d:
                    2d:b3:33:1a:1e:fb:51:c1:d3:2a:c0:97:9f:2f:ef:
                    b2:15:2b:91:4f:bc:53:09:eb:a3:cb:7c:61:24:2c:
                    07:4e:46:54:54:0a:c7:15:93:3e:ab:be:12:c6:d9:
                    9d:1c:13:85:cc:cf:9f:c1:d2:e4:e1:7e:26:e6:61:
                    b2:c2:8b:2f:ca:b9:63:4c:75:5a:64:0b:73:cf:a7:
                    6b:42:2b:10:c0:56:65:ed:4c:cb:85:f9:9d:a8:50:
                    44:da:b7:97:01:26:94:18:fc:89:9f:4f:75:b1:c1:
                    3a:3b:04:e2:73:65:fe:48:4a:1f:a2:5f:98:82:fb:
                    a0:83:59:ae:5c:9a:46:33:3b:ce:0e:c0:58:fa:70:
                    c1:60:5a:64:26:09:a0:b2:c0:f9:5c:bf:a5:54:27:
                    fe:f5:37:f4:84:aa:44:8b:b7:4e:8d:27:58:1d:c8:
                    fb:da:6c:19:84:46:0a:5a:7e:54:02:21:8f:d6:1c:
                    bd:4a:89:a8:16:61:b6:9d:ea:a4:5f:e8:02:a5:07:
                    ae:83:e5:ca:4e:9d:05:2b:8a:56:3c:8a:27:47:ae:
                    8e:9c:4e:61:d0:b6:fc:63:d1:6c:be:ee:3a:df:11:
                    ae:a0:d5:3d:fe:06:c7:fb:a1:d1:2f:b1:36:54:60:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:7A:09:31:F9:50:98:67:9D:13:D2:EC:14:53:6A:71:66:A1:FF
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:04:b1:b5:33:2c:9b:29:d8:61:b5:f8:22:40:62:4d:a0:af:
         63:79:40:f5:a9:65:dd:51:ba:6e:de:8e:f5:55:b7:cb:30:ef:
         1e:87:5f:8f:f1:a3:84:4e:86:83:74:28:cf:9b:65:6e:96:bc:
         0d:ba:56:80:c4:3e:64:d6:6d:df:7f:41:f4:04:1d:6b:e4:05:
         06:83:43:1e:8b:5e:b2:bc:35:14:84:2c:d1:35:64:6b:1b:fc:
         43:f1:f5:29:25:d7:d7:ee:11:74:e9:74:60:29:33:84:47:0f:
         ca:2f:e5:71:b2:9a:a6:0a:1f:8a:78:3d:93:29:09:6e:c2:1c:
         6c:78:7c:0c:dc:1a:60:cf:e1:e7:36:50:af:9d:c0:d6:43:50:
         1d:b5:3c:08:b3:af:d5:5f:2d:65:8d:33:83:86:96:29:24:9c:
         08:39:9d:36:bd:07:fb:24:19:38:12:44:bc:4c:ad:ca:75:70:
         32:04:f1:d6:36:52:fd:18:dd:b3:5e:cd:75:69:6f:7b:5b:45:
         f4:d9:71:4e:dd:c6:97:3e:63:f7:b7:8a:d2:a9:69:4e:ea:cf:
         7c:e0:38:c9:c3:10:ca:81:00:4c:82:f7:a7:03:6e:fc:3d:f8:
         dc:89:73:59:a0:3d:d3:32:e0:d9:84:3a:2b:8a:52:1a:5e:f7:
         d4:e2:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org