Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft
File:                     bFY62kfKw3TTExmffblj-wqJnbM.mft (raw, json)
Hash identifier:          UFeSc8Pb6d5nTqV1rTxbM0Xm+hHYERWgwHtmCQXqRiE=
Subject key identifier:   BC:4F:CF:80:E1:A6:54:7B:EE:A7:6D:4E:F5:D6:BF:47:38:7F:0C:F0
Authority key identifier: 6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3
Certificate issuer:       /CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3
Certificate serial:       1719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft
Manifest number:          1712
Signing time:             Thu 02 May 2024 17:08:16 +0000
Manifest this update:     Thu 02 May 2024 17:08:15 +0000
Manifest next update:     Thu 09 May 2024 17:08:15 +0000
Files and hashes:         1: bFY62kfKw3TTExmffblj-wqJnbM.crl (hash: vIeYOFdAZ7rkerEMXa8rkEd1LygqyixcNgefIf40bSU=)
                          2: 55EF0CDEBDC911E7BBC5D915C4F9AE02.roa (hash: qGIseberimCY5DoTJHZt1e5i70gfisaouTnBn696yxQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl
                          rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5913 (0x1719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3
        Validity
            Not Before: May  2 17:08:15 2024 GMT
            Not After : May  9 17:08:15 2024 GMT
        Subject: CN=6633c880-fcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:5c:2c:88:af:39:b5:f1:7f:b3:c3:1c:3d:
                    29:00:b9:b5:a6:85:d2:39:f6:c0:28:6c:37:f2:08:
                    3d:eb:3e:aa:8d:e2:a3:c3:bc:55:56:a8:12:63:47:
                    c6:03:14:8c:7b:3c:60:90:11:fe:f9:a8:40:f5:14:
                    bf:44:88:fd:64:5e:a0:f9:a3:02:78:d9:7a:a5:95:
                    8a:d1:03:42:eb:2a:4c:1c:6d:97:06:a3:2e:55:a7:
                    42:52:64:68:3b:00:9e:eb:28:c2:f5:8f:fa:7c:c7:
                    7e:30:57:af:94:0b:09:ff:46:3a:1f:ff:49:c4:c7:
                    44:d7:b3:f2:57:23:78:d3:5b:a9:75:22:16:16:ce:
                    70:68:f8:2c:34:07:91:db:c2:64:39:d1:dd:1d:1b:
                    ff:92:ee:5d:c8:df:a4:13:e4:e4:0c:c3:6f:fc:b6:
                    c8:af:7b:79:72:a2:20:0f:24:66:25:d9:74:8e:43:
                    c4:c9:8d:d3:aa:22:02:30:ec:61:bf:ed:33:37:44:
                    d3:2f:cb:9f:21:f4:5f:a2:9a:57:ff:ac:a1:13:1a:
                    46:63:e8:4a:8d:0a:d4:cf:9e:b0:a5:87:9d:f3:4b:
                    5b:2f:52:5f:09:0b:44:fa:70:b5:3c:f0:7b:82:2d:
                    fe:5a:4d:9f:c8:39:73:96:1d:24:dd:5b:ef:31:33:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4F:CF:80:E1:A6:54:7B:EE:A7:6D:4E:F5:D6:BF:47:38:7F:0C:F0
            X509v3 Authority Key Identifier:
                keyid:6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:86:89:d4:12:a1:48:d3:81:d6:c8:9f:fb:5f:2c:e8:1b:
         96:b9:29:bd:18:c6:02:a6:38:1b:ce:24:9c:d1:19:f4:59:5a:
         15:2f:da:f2:2b:0f:ca:98:16:c8:71:20:72:18:6c:0c:6b:df:
         09:fe:82:4c:db:73:df:52:2a:7b:32:9a:25:14:75:a1:36:10:
         7c:63:de:03:00:33:68:66:40:3a:a4:2f:97:db:93:2c:2e:7a:
         05:f2:fd:41:7b:a6:d7:be:80:e6:63:af:0b:96:1d:2f:5c:80:
         e8:f8:4a:29:1a:a5:3a:67:a4:b3:74:45:62:08:24:c3:c0:0c:
         96:bb:2f:b6:fa:ea:2c:13:71:e7:c7:73:49:5e:71:a6:b3:95:
         1b:39:5a:8a:5f:c9:7e:34:01:a2:27:7b:50:3a:3b:c8:c6:65:
         f5:b6:f3:5e:c3:8d:43:4b:71:1d:54:04:50:ac:e9:17:2c:ac:
         1d:ef:49:cd:44:1e:86:d0:aa:1a:23:91:18:96:e6:e0:84:4b:
         dd:c3:e3:a7:0f:a9:53:bd:e9:6b:d3:d0:28:11:a1:4e:39:6f:
         cb:2e:ca:81:06:3f:dc:29:eb:b9:f1:d4:49:9e:cf:7f:9a:9f:
         14:4c:e5:d1:fa:83:89:d7:d8:f8:9d:7c:98:e7:36:8b:e6:13:
         cd:4a:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:25 2024 by rpki-client on console-ams.rpki-client.org