Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
File:                     MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json)
Hash identifier:          9Qiaa/rT991pJSPHbin+MjDPFVxRUIvDZ/QaRRTDOe0=
Subject key identifier:   8C:43:C2:B4:AA:BE:36:13:FF:86:1B:A1:84:3B:FD:7A:22:D9:2A:1D
Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
Certificate issuer:       /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
Certificate serial:       041B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
Manifest number:          0418
Signing time:             Tue 07 May 2024 02:02:34 +0000
Manifest this update:     Tue 07 May 2024 02:02:34 +0000
Manifest next update:     Tue 14 May 2024 02:02:34 +0000
Files and hashes:         1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: WqTPcH8fgjJXf8Npt1A2m060a2HsDralKYpGoYmAV7Q=)
                          2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: WaJSz9699pG7qcLaxQ6AJA6vMlt4Fr0cRL3epnSQT5E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl
                          rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
        Validity
            Not Before: May  7 02:02:34 2024 GMT
            Not After : May 14 02:02:34 2024 GMT
        Subject: CN=66398bba-3772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:c9:3a:da:b5:ff:a4:3d:78:e5:0a:93:fb:
                    ff:3b:bd:e6:8b:16:8d:c1:4d:38:78:6c:83:4e:a6:
                    96:11:b5:61:79:25:9f:26:87:e5:92:e3:af:29:5a:
                    94:5c:a8:ed:98:82:ee:df:bc:30:f4:f8:89:31:8d:
                    cf:59:57:ab:88:ed:a4:6a:9f:72:70:1c:54:dc:c3:
                    8d:87:b5:10:cc:f4:08:e7:97:c9:01:b9:d0:02:83:
                    45:99:29:60:53:18:69:e3:00:05:d0:37:43:99:12:
                    c6:5d:35:89:82:a6:9a:99:f3:da:ff:1b:3d:c1:1b:
                    93:7b:a9:3b:b2:46:81:9c:b7:b6:61:be:53:8a:1f:
                    74:7e:2c:31:ea:25:8b:8b:17:ee:17:8c:4a:78:74:
                    55:e1:8c:cb:81:f6:fb:dc:08:ed:2b:1d:78:cb:ba:
                    70:6a:8c:84:90:0a:c0:bc:8f:67:d4:9b:bd:72:7a:
                    ca:d1:ea:a8:de:51:de:1e:fc:81:f7:9d:6c:b4:06:
                    e0:4c:67:04:d7:76:75:29:ea:90:7a:02:3f:84:eb:
                    ac:2f:eb:e2:b0:c2:cd:e4:7a:c6:ac:3b:e5:40:c2:
                    8e:ce:b8:2c:c5:28:35:e1:f4:a4:f1:83:41:15:56:
                    f3:d8:d9:0f:2a:fa:91:9a:19:7a:92:c1:0f:a8:36:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:C2:B4:AA:BE:36:13:FF:86:1B:A1:84:3B:FD:7A:22:D9:2A:1D
            X509v3 Authority Key Identifier:
                keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:0f:77:d1:c2:92:22:3f:58:e8:7f:fe:a1:cb:33:1b:c1:
         cb:94:86:0f:ae:ce:48:c9:25:54:bd:5e:5f:91:42:8a:1b:58:
         55:98:22:38:25:79:c7:08:40:4f:ed:75:28:05:86:99:91:1a:
         65:c9:9a:85:d4:5a:c0:52:8c:68:cd:8d:a4:0d:c4:5f:95:cb:
         13:d8:dd:56:b5:9d:4f:6a:30:2f:68:82:bc:20:00:3a:b0:cd:
         64:a7:00:4f:5b:66:5a:c2:3f:f4:65:f2:ec:2e:61:92:16:42:
         61:27:5e:63:56:af:63:ff:11:4a:d7:f9:ba:cd:52:7b:c8:8a:
         9a:d2:ef:df:38:2b:0b:26:59:fb:1a:89:9c:ec:a9:63:2d:30:
         ff:98:f0:06:84:7a:bb:c0:38:75:7a:0a:15:ed:06:ef:90:85:
         6d:3c:58:49:01:de:7a:63:41:c2:d5:a0:5e:65:ba:44:4b:1e:
         99:76:ec:81:44:01:77:c6:80:18:7b:29:96:41:f9:32:00:d9:
         9c:df:1e:50:ef:f6:ed:68:8c:ea:32:43:71:c7:d1:4b:42:f5:
         6b:95:cd:ae:d2:da:af:f4:1d:e1:d7:27:b2:6d:ef:cc:3c:58:
         70:db:77:47:4f:53:a1:18:ae:d8:f0:48:21:16:dd:9f:50:70:
         04:c2:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:17 2024 by rpki-client on console-fra.rpki-client.org