Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File:                     0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier:          5j1dNuc2rxFPT7WifPzwmLY1+a44hRsy45FO0uwe5ks=
Subject key identifier:   F9:1F:FC:EB:18:20:4C:C5:F7:27:0E:1B:CD:D2:1D:B7:CB:7E:02:4E
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       05FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number:          05FA
Signing time:             Fri 26 Apr 2024 23:53:42 +0000
Manifest this update:     Fri 26 Apr 2024 23:53:42 +0000
Manifest next update:     Fri 03 May 2024 23:53:42 +0000
Files and hashes:         1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: vyY0V6/GKAZb3FiFS9RZ2LQNYZev+p+C4+aYglKXC5Y=)
                          2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: RHYMorQDL84peWOHsVgkD8C/ODaxiXG8DCT+xAvPHbY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 23:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: Apr 26 23:53:42 2024 GMT
            Not After : May  3 23:53:42 2024 GMT
        Subject: CN=662c3e86-73ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:e3:3d:3d:35:48:09:88:0d:7b:7d:b9:ad:
                    03:3f:37:fc:c5:79:7d:80:ba:a4:08:c1:aa:d0:37:
                    28:e8:85:2f:42:01:50:97:f0:aa:92:84:2b:07:58:
                    39:d4:5f:1a:ba:ab:cb:9d:84:7c:b1:2f:c7:bb:0f:
                    c7:7d:51:a3:cd:88:db:07:65:bc:97:4c:8d:8d:84:
                    08:d8:d4:ea:de:1d:19:7c:84:1e:69:b1:f4:71:d7:
                    c1:96:5f:1d:72:2b:f5:e8:ee:71:1d:5b:68:27:f7:
                    1a:66:16:c8:3f:cd:ed:50:1d:9e:f4:95:32:cf:5e:
                    92:8e:0c:66:fb:e1:fd:e5:a5:73:4a:29:bf:4f:97:
                    6f:27:aa:86:d5:12:28:4d:64:c1:35:5e:6f:31:99:
                    bf:97:b0:54:8d:a3:88:fc:0c:7a:71:22:32:65:d9:
                    6f:ea:fe:63:dd:8b:81:c7:06:75:50:9a:7d:ab:18:
                    e2:bd:40:39:4e:03:ef:9c:16:2b:fd:e8:94:15:0b:
                    6a:ad:03:2a:be:2e:46:16:25:b1:d2:34:1c:97:5f:
                    7b:1b:87:74:c2:67:6b:f5:78:9a:1b:67:6b:25:64:
                    99:49:9f:e1:a2:be:1a:1a:81:fa:7b:af:4c:51:6b:
                    9b:db:30:b6:a4:ed:c8:a7:ef:18:c4:04:e0:90:76:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1F:FC:EB:18:20:4C:C5:F7:27:0E:1B:CD:D2:1D:B7:CB:7E:02:4E
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:9c:89:5e:40:4b:c0:17:a2:31:f7:41:2c:82:6a:9b:b6:
         2f:b9:fe:1f:6e:b5:c3:d4:8f:f4:b2:1e:d8:d3:29:23:6e:41:
         a5:35:5f:bd:fd:91:b1:0d:22:8f:57:05:f6:3c:ce:d4:3f:08:
         af:a8:89:ea:e8:d8:86:fa:85:b6:4b:c0:d6:07:58:7e:10:50:
         dd:07:cc:40:a0:63:ee:5d:a2:76:c8:04:11:10:3a:f2:d8:5a:
         f6:bf:a0:bf:b6:8b:ba:98:69:86:9d:e2:5d:e4:c0:ea:69:99:
         5a:94:ba:17:03:d1:fe:dc:bb:65:28:74:b4:5c:34:5b:e1:8c:
         67:9c:43:f7:31:06:9f:5e:b7:81:2b:14:25:87:bd:cd:22:b5:
         f7:06:37:45:15:23:d7:ad:df:1a:fb:ea:5d:ad:9f:aa:4c:40:
         5a:30:b8:f7:b9:c8:30:ed:85:21:b1:22:50:b5:a2:79:ac:f7:
         7d:b7:98:1d:4c:f1:c8:09:43:11:06:6d:65:b4:17:bc:39:2f:
         10:b5:6d:28:67:4e:11:f4:0c:df:3b:c9:1d:62:ee:93:4f:4e:
         49:66:d4:21:e3:2c:69:59:8a:ac:e8:0f:71:e8:6a:66:26:dc:
         b0:38:3c:42:0e:5a:b4:e8:c8:d9:e2:7d:26:57:82:a4:cf:f2:
         63:ad:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:39 2024 by rpki-client on console-ams.rpki-client.org