Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File:                     weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier:          6l7PUl/GTcqG9/5X16KoAEWjIDe88mlqwqpME5vrj0Q=
Subject key identifier:   47:B5:91:C2:3D:BA:25:67:25:2F:AB:85:19:1E:30:FA:6C:03:89:CC
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       2838
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number:          2808
Signing time:             Wed 24 Apr 2024 15:56:14 +0000
Manifest this update:     Wed 24 Apr 2024 15:56:14 +0000
Manifest next update:     Wed 01 May 2024 15:56:14 +0000
Files and hashes:         1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: EbDh6ta3P+6aoRPqB1llQi69QGloZaEHDyN+MYSEPFA=)
                          2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: plj7gbTh/uibVdgorTOsQNlKAa4siZFr/FDFGAoOHVQ=)
                          3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: ewBco8gqchgAZcgf6OAk2yT9BaA4NqBATGQ+Jh1fnx8=)
                          4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: lLi+QxihnBbQertxygAhuI6GY2s+HazcxNAIxA9mxbE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 15:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10296 (0x2838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Apr 24 15:56:14 2024 GMT
            Not After : May  1 15:56:14 2024 GMT
        Subject: CN=66292b9e-ba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:29:09:1d:65:1b:0b:b9:01:05:03:13:32:
                    d8:9c:3d:3d:44:10:1f:6c:0f:41:26:99:db:5e:cc:
                    1a:68:63:36:cd:02:15:03:cb:9a:04:67:2f:48:3c:
                    3a:34:a7:75:b6:0f:8a:b8:e5:fe:5b:18:c2:b6:d2:
                    1a:dd:d8:da:a7:9a:6e:da:24:89:8d:d8:98:ac:b2:
                    2a:8f:9d:ca:09:cf:fb:e2:9c:cc:b7:38:dd:fc:f2:
                    59:f7:cc:0e:c5:2e:0a:24:49:14:ac:92:dd:44:db:
                    bd:03:7b:90:3a:e9:95:ee:06:67:f6:0f:00:61:b0:
                    db:11:9c:9c:49:ca:60:c7:1f:1a:a1:3d:69:f0:81:
                    15:d2:e7:7d:e5:22:82:e1:de:c2:e9:3c:4e:9b:2c:
                    2e:d6:0f:87:d7:90:bd:84:be:50:94:81:cc:4e:bd:
                    13:5c:f9:59:a6:63:a0:10:68:97:e5:be:56:76:bb:
                    a4:20:af:5f:c8:87:07:07:8b:52:7b:78:40:4c:9a:
                    32:08:b3:96:2f:35:3c:9b:32:8c:89:e4:45:eb:82:
                    95:06:c3:1d:9b:a0:f9:ed:45:0e:c2:63:df:ca:f1:
                    60:9e:40:8c:fe:71:ab:b5:88:2c:07:b1:ad:4c:71:
                    80:4e:ac:48:2f:aa:c4:7f:fa:0d:8d:ff:2f:01:6c:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:91:C2:3D:BA:25:67:25:2F:AB:85:19:1E:30:FA:6C:03:89:CC
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:d5:fe:f7:c2:ac:5b:b8:fb:6d:5a:3c:ae:cd:39:b5:cf:
         db:07:83:fb:32:45:a0:8f:bf:5c:cc:ec:5d:21:67:26:f3:84:
         ef:9a:2f:dd:90:5f:b6:b4:ee:8f:8b:c2:56:2e:99:76:5c:30:
         10:81:c3:96:25:4c:bb:8e:6d:51:f2:15:44:67:63:d5:19:af:
         d6:d4:cc:4e:89:e4:6d:a7:e3:84:3c:84:c2:b9:bb:b6:58:d7:
         1d:03:b7:b2:ad:72:63:a8:eb:24:80:ed:a4:0f:46:b7:dc:ee:
         28:25:f5:41:13:1b:a0:1e:99:3d:bd:32:7b:c1:20:13:55:0b:
         cd:9e:ea:0f:71:25:06:68:2e:b4:4e:35:3d:f1:66:32:60:74:
         64:fb:6c:a3:23:7d:00:b1:9a:ea:f0:fc:87:53:85:74:ba:53:
         d8:9a:a0:98:5a:d0:50:44:8a:83:fd:6e:10:58:fd:3a:fd:65:
         17:57:33:73:93:29:21:d6:3a:3b:a6:cf:f2:38:75:56:ac:a7:
         e0:5c:a6:ac:c9:c0:76:da:a8:9a:6e:53:79:88:f9:c4:0a:80:
         54:49:ab:26:79:bd:73:92:72:57:cc:68:b7:33:ea:f4:78:73:
         1a:f4:97:2d:d3:1f:d6:64:e7:49:3b:4a:a5:66:43:ca:2b:72:
         ce:1f:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:44 2024 by rpki-client on console-fra.rpki-client.org