Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          vsFyEK9DSEGIFCqhd6E6DIzUEwLf67c6DlY092+L/hU=
Subject key identifier:   69:B4:3A:7B:4A:6E:1A:A1:E1:3B:1B:0F:78:AF:66:1F:B9:B7:10:BC
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          80
Signing time:             Fri 17 May 2024 07:17:57 +0000
Manifest this update:     Fri 17 May 2024 07:17:57 +0000
Manifest next update:     Fri 24 May 2024 07:17:57 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: H+g7qPS5tC3thmYTzL5j6lfDvN2vPIibYjcp5hy0Br0=)
                          2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: rxyz7R7XEZ0StcHzWcM5qmNZrUP1LQOdlSjbVIVUXQ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: May 17 07:17:57 2024 GMT
            Not After : May 24 07:17:57 2024 GMT
        Subject: CN=664704a5-7b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:54:a4:1e:10:c5:4f:c8:cc:87:12:9c:a7:
                    34:0a:85:20:0a:2c:1c:f5:64:5f:40:e3:c1:6f:30:
                    56:93:26:44:cb:03:19:58:f3:74:78:4a:1e:ac:1d:
                    dc:5e:55:83:e2:ed:79:ab:a2:ce:ce:83:59:9b:8b:
                    f1:51:aa:77:24:8e:34:a2:19:82:ef:08:c1:57:df:
                    ba:e8:6d:59:71:d8:8f:a9:55:a0:06:46:c8:6d:72:
                    b3:e9:58:0f:96:7b:70:30:c5:7b:82:8e:91:4c:3e:
                    f2:e6:f5:c5:fa:90:a3:ab:25:9c:44:a8:95:ba:d0:
                    aa:d8:ee:b1:d0:34:05:f1:9e:06:7e:42:98:22:74:
                    00:aa:6c:22:ed:61:66:fc:42:a1:37:c1:2c:03:1b:
                    16:19:87:08:c5:1d:e6:7c:c8:7f:d9:42:e2:2b:9f:
                    67:04:8d:9a:b4:45:3b:e4:98:90:2c:72:2b:60:b2:
                    e0:cf:bf:2d:2e:9c:89:88:ce:7a:1d:9a:c5:56:2e:
                    46:d6:47:1d:1b:88:88:a5:85:e7:71:fd:2a:e0:0a:
                    3c:fc:5d:28:50:bf:e4:96:57:b3:2a:e2:82:1b:9c:
                    2e:ac:47:6c:0f:6e:00:59:11:63:30:78:71:c6:3f:
                    b7:bb:26:36:ad:c9:93:be:86:68:19:b2:72:e6:c1:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:3A:7B:4A:6E:1A:A1:E1:3B:1B:0F:78:AF:66:1F:B9:B7:10:BC
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:c7:e4:7f:7e:bd:9a:ca:25:ee:05:21:cd:1a:fe:c8:9f:
         83:99:3b:da:15:de:0c:5a:74:e1:c1:ed:a6:cb:d4:88:e6:d7:
         5d:92:ed:bc:1f:be:75:4c:80:10:0b:dd:b2:e8:71:12:fb:2c:
         29:02:30:3f:fa:42:84:b7:97:e2:d2:1b:63:7a:25:ed:17:b8:
         4b:3b:42:8d:3a:0c:35:8c:bd:75:20:62:41:d3:ac:03:f5:5d:
         02:88:93:bc:e6:28:d7:f0:fa:22:4d:78:fa:94:51:33:cd:6a:
         51:be:f1:a5:21:5e:e9:c6:7e:aa:57:f9:45:53:48:20:69:10:
         44:75:09:36:9f:8a:f9:60:66:d4:c3:6c:1f:99:03:f0:ed:24:
         b4:65:92:32:58:96:8c:e4:a9:57:89:23:71:21:c7:fe:56:25:
         4e:42:7a:f4:69:90:7b:19:39:0f:b1:b6:6f:0b:c7:54:d1:bc:
         8c:2c:f8:0d:b4:7c:49:24:f5:f7:2f:f0:39:d0:67:7f:a9:54:
         53:53:35:f0:54:7e:ed:b2:32:12:ad:f8:b2:1f:ca:0c:04:aa:
         19:08:13:1d:ef:eb:07:13:2a:34:87:c9:e7:af:88:2c:80:9e:
         36:5a:b6:90:5f:00:3f:9d:bb:c8:54:42:29:5e:3a:b0:9f:08:
         e0:80:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:43 2024 by rpki-client on console-ams.rpki-client.org