Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          MikG/DVF6xazbqe9muTwBbuFEPO3NKW/EVxVQJsiTQg=
Subject key identifier:   2A:30:6F:08:06:CB:9E:28:69:F9:0C:DE:19:EA:21:B8:D0:74:57:AF
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       38A488F84493887EEE1411E66C2BA27CAC837A8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          0623
Signing time:             Tue 14 May 2024 07:37:48 +0000
Manifest this update:     Tue 14 May 2024 07:32:48 +0000
Manifest next update:     Wed 15 May 2024 07:51:48 +0000
Files and hashes:         1: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: kpWszSFlQ/7w9dJ+DcBnP4zgs/7ZX9sT6OY4ryodIXo=)
                          2: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: 6JJmB2YmO/BTCE+XoC/8ZqqWFLCh8EMD0RHpPHcgN84=)
                          3: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: YpLMDzsVkDKuZ4wh8mc+03AJNZBdhyLBl8+xr2WL+Uw=)
                          4: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: Xj2oaxIKBmeqe4TUAH+xiXL4WCZ8BNhZLC3pNLc34p8=)
                          5: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: kncx0QitZHv7BHcL9ZgGiQ43RImCDqGCY5zXkESPUjE=)
                          6: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: NpWyQCyQsSxBbQ8X/6vTsgzfbCmTE12P0urrji5+Kvg=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 07:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a4:88:f8:44:93:88:7e:ee:14:11:e6:6c:2b:a2:7c:ac:83:7a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: May 14 07:32:48 2024 GMT
            Not After : May 15 07:51:48 2024 GMT
        Subject: CN=2A306F0806CB9E2869F90CDE19EA21B8D07457AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:45:96:25:e3:34:e5:0e:4e:94:c2:49:be:
                    79:4b:e0:cd:dd:af:0e:7b:5b:e1:dd:8e:cd:d5:d7:
                    e3:4d:70:b5:38:81:80:98:76:83:57:f3:b8:41:29:
                    2b:3f:b6:de:55:55:ce:06:70:e7:f8:a5:e0:a2:0c:
                    a4:04:b8:26:02:81:ac:ce:f1:91:63:8f:57:f1:7c:
                    6a:0e:21:05:4c:0f:e8:a0:7e:85:81:78:37:52:2c:
                    5a:c4:3c:9e:fa:56:c3:8b:fb:99:64:d0:a1:9d:02:
                    1d:f3:92:f3:0d:9f:aa:96:39:c4:c9:45:f3:81:6b:
                    bf:f8:b8:24:34:90:73:c9:d6:7f:2b:5d:73:b2:fa:
                    d7:2b:8d:a4:f8:3f:30:3d:be:ef:18:76:2f:22:92:
                    52:af:ec:d8:69:ae:16:b6:25:9a:65:53:50:b8:3a:
                    71:f7:24:76:06:c4:af:3f:eb:f5:f6:e1:04:32:53:
                    ed:ed:39:6d:d5:a0:60:dc:4c:68:51:b1:d1:ff:02:
                    e7:1d:92:8a:23:be:2b:59:d0:59:73:b0:10:91:0a:
                    58:a2:22:cf:8d:8e:9d:98:30:f4:e0:25:6f:df:5f:
                    f2:97:13:aa:b5:6b:13:bb:53:20:a3:38:35:17:a7:
                    0c:be:fb:e4:76:76:97:5f:44:c7:49:65:f7:1d:c7:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:30:6F:08:06:CB:9E:28:69:F9:0C:DE:19:EA:21:B8:D0:74:57:AF
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:71:c2:6d:6c:36:d8:e5:55:55:85:10:ea:b0:3a:a5:ec:
         c8:01:60:66:37:89:c0:7f:7b:c7:8e:fe:80:9a:fa:78:df:d8:
         09:48:fa:b8:46:5a:fa:a7:a6:bd:b4:da:14:c6:e5:8b:b4:12:
         90:0d:f1:41:ce:21:3a:8f:0e:b0:b4:94:bd:65:18:15:30:d4:
         95:a0:65:bb:f4:e9:c3:b9:32:ab:86:fd:0d:70:fc:49:29:25:
         c8:2a:8c:24:c6:55:62:fa:4a:94:2b:be:7c:30:66:e2:82:95:
         38:2b:65:52:fe:05:ad:28:91:31:ec:a9:dc:8b:60:e8:1f:71:
         49:39:a1:a5:29:55:ea:3b:a2:f3:69:61:a5:1d:46:73:d4:12:
         b9:28:e5:46:42:71:4f:62:ae:4e:d9:a9:00:b8:b6:fc:45:e1:
         c7:72:d4:88:99:49:c4:93:8b:4d:be:25:9f:b3:80:bf:5c:6b:
         cc:dd:3f:ea:b1:d4:9e:4c:1a:f4:0f:aa:cc:91:11:69:b8:7d:
         f4:12:7c:d5:b6:39:b8:a1:cc:d9:db:fa:31:50:a1:b3:c2:1b:
         ce:0b:a8:dd:99:ac:15:99:34:d3:9c:ff:91:0a:13:cc:ba:9b:
         b4:e0:b0:59:9d:01:64:cf:f0:34:2f:fc:a8:00:55:f4:2b:bf:
         cd:c0:ad:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 10:37:56 2024 by rpki-client on console-fra.rpki-client.org