Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File:                     I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier:          3h1H58wJVX8dJxMUyJ9uao4IUYxy8PJnYDI3xBthH0E=
Subject key identifier:   5B:BA:E7:EF:4B:E0:94:F3:65:71:5F:CC:87:49:20:52:2A:AE:E8:4A
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number:          14
Signing time:             Thu 19 Sep 2024 06:19:34 +0000
Manifest this update:     Thu 19 Sep 2024 06:19:34 +0000
Manifest next update:     Thu 26 Sep 2024 06:19:34 +0000
Files and hashes:         1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: mJSeeCsTM4Ji7MXzaCrcXjQZL2o4H2rgamtZCf2AgFM=)
                          2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: /YYAM/ja0JhV/6iA5BWq6W3oPILiMBn35Hx66aO0FaI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: Sep 19 06:19:34 2024 GMT
            Not After : Sep 26 06:19:34 2024 GMT
        Subject: CN=66ebc276-84f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:31:92:38:45:08:3b:ab:25:94:23:40:72:
                    ad:f2:82:6d:62:9e:50:4f:b2:81:87:69:3b:eb:73:
                    09:f2:2e:d2:20:60:c8:ba:e7:65:00:12:ac:58:00:
                    45:10:6e:94:99:62:e7:3d:88:04:d0:65:9f:87:40:
                    b5:d9:cc:3a:91:57:5e:1f:ce:c6:f5:f9:b4:d6:e7:
                    81:2b:44:57:89:a9:08:64:80:75:59:2e:87:dc:9d:
                    da:6a:6f:d4:5a:d2:74:29:cf:0b:97:05:0e:19:ef:
                    53:9f:e3:bf:29:ad:e8:ef:9b:55:d7:8d:e4:e1:9e:
                    f4:d8:8f:69:98:57:dc:13:3e:0c:dd:15:b8:e9:c6:
                    07:93:f5:67:09:01:44:a8:71:7f:c4:22:b3:0f:56:
                    52:2d:7f:7b:23:90:42:c8:11:80:8a:18:7a:16:94:
                    07:ab:55:cf:13:1c:b1:8c:82:9f:3f:b6:3f:c1:ac:
                    34:d2:53:56:3d:9c:b6:8a:81:55:a6:36:19:87:b4:
                    ae:d6:8d:78:de:87:cf:35:16:1f:a5:fd:1f:22:26:
                    3f:12:df:17:54:f3:e0:65:ec:3a:80:b0:fe:33:59:
                    e4:c3:3d:3a:0b:70:f6:22:3e:81:e5:16:58:d3:dd:
                    ec:d0:d8:08:e4:22:02:c5:16:ff:e1:89:54:e6:48:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:E7:EF:4B:E0:94:F3:65:71:5F:CC:87:49:20:52:2A:AE:E8:4A
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:6a:57:9e:a9:b9:33:99:10:3e:15:6e:02:6c:b7:a5:71:
         4c:32:14:ca:2b:e5:ae:f1:a7:af:3e:16:d4:f7:06:09:6d:4d:
         2b:3e:e1:c4:b8:b9:13:42:2a:9e:8f:b4:00:d8:88:ad:45:19:
         11:41:32:3b:db:ee:7b:93:6a:53:f4:59:78:46:04:82:3d:65:
         22:55:0f:3c:3b:30:23:fd:e8:c8:7f:74:a4:d8:75:42:67:1c:
         b7:9e:55:b8:46:6b:34:c8:4d:2a:8e:77:72:4c:60:12:1b:40:
         f6:3a:d3:56:49:34:eb:33:3c:9b:0c:29:4a:87:7f:b5:57:c0:
         36:52:48:4a:04:80:ea:d7:55:08:1b:64:ed:1c:29:aa:6e:e6:
         c5:4c:6f:34:05:d7:a6:97:37:ff:98:b4:5d:20:a7:dc:60:f5:
         8d:44:7c:0e:52:74:8d:8d:f0:46:c9:6a:4c:0f:17:89:86:3e:
         2d:5f:d1:be:64:00:b0:a3:06:0a:63:c8:8a:24:e6:66:05:03:
         7f:e4:bc:5c:cb:c9:0f:47:bc:0b:a6:11:02:a3:ca:b4:27:75:
         7b:31:cf:aa:5a:4a:c1:b9:72:de:74:13:e7:d8:78:67:88:ff:
         a3:90:a6:29:d8:10:77:19:e9:bc:a1:e9:18:db:7b:bf:2f:24:
         76:b9:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:43 2024 by rpki-client on console-fra.rpki-client.org