Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          NEvJhuil1wNwKZ769wWc4oFMX89peB7Q1oRCQYD+S5s=
Subject key identifier:   91:01:84:26:26:83:CA:6A:38:98:FF:39:BA:3C:9B:9B:FB:0B:A8:57
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       200A9EE680F1B71ABA37C1BE536DCEB5F7C691E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          C0
Signing time:             Sat 18 May 2024 10:17:51 +0000
Manifest this update:     Sat 18 May 2024 10:12:51 +0000
Manifest next update:     Sun 19 May 2024 13:20:51 +0000
Files and hashes:         1: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: h6di5JU9M99tiCp6Fk71YuElkT1RNcweqk+7/FsPxNA=)
                          2: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: 5WV1i+bmxuiors5k14JoewwUls66NXGha9r1Vc5zx+A=)
                          3: 3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa (hash: WQE1+VxviEKZyZzTZtyFhUZY8mHceWVObh0yTtwi8Vo=)
                          4: 3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa (hash: poRpmHvpMg6O51AMOa3VJhZ8OPWN17DPfWdGbVue4JM=)
                          5: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: koN3m+5vDonD19xHUxIlMjPKw9wAE7Tgr4bm47buMEc=)
                          6: 3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa (hash: UMNXEpu8hLijUeztXgOzyJs3H7NAjKVw0/cn/H+DSnI=)
                          7: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: xG7CYq6UnhRxO8Dbi/u2Jqy4bkrQIIFCo4pRCFgs5+0=)
                          8: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: zTb8ql1p6Fs6BB0oV1g0J8hnu59nBjyUuyB+lufxxN0=)
                          9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: qJJqAgJBJ0m8R7ePHxqHwooc971uszOuwrBN5cchFFU=)
                          10: 3130332e3233382e3133302e302f32332d3233203d3e203630353034.roa (hash: hSgeFRDNgcytawmZFFf1q2DYiUjtHHnWORTt4OdXqug=)
                          11: 34332e3235352e38302e302f32342d3234203d3e20323032363632.roa (hash: y4HBpOHOB8CUf9/S7tMQfE6OqGcGtre2vFGZjVWXbWY=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0a:9e:e6:80:f1:b7:1a:ba:37:c1:be:53:6d:ce:b5:f7:c6:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: May 18 10:12:51 2024 GMT
            Not After : May 19 13:20:51 2024 GMT
        Subject: CN=910184262683CA6A3898FF39BA3C9B9BFB0BA857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:f3:46:c4:6c:65:07:0b:d8:7d:73:59:1e:
                    9d:f9:83:f0:49:62:b3:a2:90:6d:11:0d:ec:0b:c0:
                    0c:7b:e5:e8:38:d7:a0:68:18:f4:73:43:62:cf:48:
                    51:9f:ff:16:4a:33:3d:a9:f7:f2:98:9f:1d:85:f1:
                    b7:98:69:ea:f7:1c:4e:43:54:84:d1:e3:95:f3:94:
                    83:f6:2e:32:81:85:58:99:0b:c0:fa:0e:95:b0:86:
                    67:02:a0:bc:90:e0:b3:00:fc:8a:af:be:57:d2:7c:
                    5d:81:a2:16:85:dc:e2:59:b4:0e:12:f9:e9:47:7d:
                    bd:97:fc:4e:b0:a6:f1:c8:69:8a:8e:90:b0:d3:ce:
                    e3:52:44:78:e2:ce:5c:34:c0:84:88:e8:23:80:e8:
                    7c:14:47:3d:63:c4:8f:46:c6:7b:e0:4c:62:0f:09:
                    72:10:cb:06:25:e8:2a:47:d9:71:e4:27:8d:af:cd:
                    7b:f3:cd:6d:79:13:be:b8:23:0c:87:76:0b:58:87:
                    b3:b3:10:94:2f:53:9b:c5:74:c2:7e:ce:d6:99:03:
                    01:11:ca:42:a1:a0:59:b4:19:eb:3f:f7:a2:30:14:
                    89:2c:1f:9d:07:5f:a0:01:9e:22:5b:0c:66:f6:d6:
                    e8:7d:de:31:38:f0:c0:c0:32:e1:44:3e:6f:23:36:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:84:26:26:83:CA:6A:38:98:FF:39:BA:3C:9B:9B:FB:0B:A8:57
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:85:bc:88:ce:d5:38:05:55:e7:78:b8:26:be:ed:0d:5c:
         b5:81:e6:48:64:53:12:5f:53:a7:ac:ed:fd:05:9b:86:6b:3c:
         ce:46:4a:9f:8a:39:4e:db:07:f5:0d:c0:a5:24:87:aa:02:8c:
         72:fe:1a:ed:11:4d:88:3e:cf:66:e6:11:88:6c:3b:94:26:8d:
         35:c9:38:22:fe:40:e2:82:b1:cd:2c:45:21:ee:db:c2:ea:3b:
         d0:94:f1:1c:38:6b:e7:87:5e:51:cd:ed:35:2f:98:ea:9e:fc:
         dd:0e:48:0c:92:63:c4:1d:1b:30:5d:cf:6e:e2:74:b1:54:d2:
         e4:ac:58:bf:48:ae:3c:af:35:cc:98:5b:a8:3b:1e:c9:82:83:
         e2:62:ab:98:95:99:9d:ce:2b:3a:91:bb:44:73:c5:d2:b0:f5:
         4b:17:f8:13:d5:20:ae:17:e8:45:a5:94:77:58:b2:20:01:dc:
         c0:e0:54:cb:1c:32:02:50:95:06:7b:57:30:3d:69:59:d3:73:
         e4:49:2f:00:cf:22:95:51:78:b6:aa:0c:04:03:71:71:51:d8:
         7f:d7:20:62:08:fa:98:85:83:ca:6c:64:5c:b3:94:41:33:44:
         63:83:c9:0d:6f:57:e0:2f:6b:b2:a1:d9:4b:2d:2c:2e:4a:65:
         8c:86:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:41:12 2024 by rpki-client on console-fra.rpki-client.org