Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          SVyeLJe8CZwbMITEVEhykH1zRe2EfQX+auzxYdEfHLU=
Subject key identifier:   7A:EB:24:A6:CA:32:02:60:81:2F:4C:FF:E7:C6:8C:CB:52:E8:6D:DB
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       73560785DBAC293F5B39A4C2BBA9F5BD8E78312A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          0626
Signing time:             Tue 14 May 2024 02:38:57 +0000
Manifest this update:     Tue 14 May 2024 02:33:57 +0000
Manifest next update:     Wed 15 May 2024 05:09:57 +0000
Files and hashes:         1: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: V65t3qYEGbB95hU6CB69RKYBZX60qujWmWdv9lMxpNQ=)
                          2: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 1Z9NFwu84Arj0S4sz3h+29lvpdXrfwUJ9GXMB4OkKsQ=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: SEXH3rTr3ODp+cxeCWzzWssiWyunrAWFKrobJPJjdpw=)
                          4: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: Pq/ZNV+oWKzjrdP/LoxNEFQdQ1OqwZsuZtzh4zv6PM4=)
                          5: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: YfKXVdi4YsEf1BvxUWzN4JlGC9ekwzRxSDx+Kw4lcjQ=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 05:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:07:85:db:ac:29:3f:5b:39:a4:c2:bb:a9:f5:bd:8e:78:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: May 14 02:33:57 2024 GMT
            Not After : May 15 05:09:57 2024 GMT
        Subject: CN=7AEB24A6CA320260812F4CFFE7C68CCB52E86DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:f9:e6:c2:db:8e:e9:af:39:c8:dd:70:02:
                    4f:35:d9:fb:d6:21:f3:cd:6b:c7:45:11:ca:37:b6:
                    42:0e:9c:fc:6a:1a:34:40:fb:2b:2a:08:f5:1f:aa:
                    5f:ed:8f:ab:59:83:14:8b:ac:b6:3f:4d:84:4b:28:
                    85:d5:13:7e:a4:34:0f:90:52:02:ca:30:10:1e:21:
                    73:24:ae:9e:9f:4f:73:f4:ec:9b:28:0c:d8:48:ea:
                    a6:83:c5:a3:73:84:d2:e7:b9:24:da:0e:1a:93:7f:
                    2a:60:b7:3a:39:83:2b:ff:b8:95:b6:20:24:9b:3c:
                    f3:5a:05:4f:e1:9f:a3:27:77:23:c7:ec:0a:c6:24:
                    ad:3f:36:66:fb:24:82:29:42:d4:86:a1:0a:98:28:
                    ac:7c:d1:44:91:90:ce:9d:8a:28:ba:8e:de:42:ab:
                    a0:4d:b1:64:79:10:4b:45:7c:6d:8e:c5:4e:fb:3c:
                    2d:2f:7f:52:72:e1:6f:ff:9f:0d:ea:0f:bf:a4:30:
                    9c:46:06:85:1b:73:24:56:a0:04:0c:a9:6f:9f:bf:
                    41:c8:63:36:86:64:23:4e:77:a6:fd:e7:5b:30:a1:
                    a2:be:28:21:6b:0c:83:a5:cb:68:d5:50:b9:07:c2:
                    e1:bc:f8:47:ac:8a:80:84:df:27:f1:19:27:3a:10:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EB:24:A6:CA:32:02:60:81:2F:4C:FF:E7:C6:8C:CB:52:E8:6D:DB
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:32:77:34:ee:53:c6:ea:72:f6:d8:07:39:43:61:71:67:fc:
         10:46:d1:ea:50:51:13:a6:a1:22:66:fd:9e:5f:d6:e8:7f:46:
         7b:ed:8f:10:ff:26:53:97:1c:9e:ba:a1:73:c4:7b:6e:5e:ca:
         28:ce:7a:d5:5a:09:de:1b:05:f4:f1:ef:7d:0a:db:8b:3d:10:
         ae:a8:48:fe:16:54:8e:f2:41:6d:e6:ae:ac:fb:d2:98:8e:e8:
         3b:e6:33:d1:ea:95:e9:97:f4:e6:7e:0e:27:ef:35:eb:7a:0a:
         f8:20:05:96:41:b9:e2:9e:7c:85:f6:1a:d7:79:9c:a2:ea:ad:
         f7:5d:75:1f:e4:f8:31:3f:af:7a:f5:4d:1e:0f:0d:b9:4d:f9:
         03:47:5d:39:34:54:f2:46:06:01:9a:3a:bb:b2:56:e1:25:b1:
         18:76:91:d8:02:ac:bb:51:ef:18:e1:38:e6:2c:b5:ca:c7:e5:
         79:79:25:11:d2:94:8d:8d:cc:07:aa:9f:16:31:30:e7:7c:06:
         93:3b:f5:a9:ea:e0:a0:ab:77:1c:db:6d:17:37:46:d7:8d:a7:
         c7:bb:9a:47:e8:5b:ef:7f:aa:a3:bf:8d:bb:41:4a:a8:37:4f:
         33:64:ab:6e:e1:28:2f:b0:54:9a:fe:0c:96:a7:f7:e5:65:79:
         45:61:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:53:18 2024 by rpki-client on console-fra.rpki-client.org