Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File:                     VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier:          vHX9dsKZyAn3ez9AAm3wPS8jSPPWbqjenRtTp3NtgM0=
Subject key identifier:   5E:D1:D0:18:5D:D6:F6:FF:4A:73:BF:E7:66:11:D8:05:59:BF:F8:06
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer:       /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number:          E0
Signing time:             Tue 07 May 2024 05:56:03 +0000
Manifest this update:     Tue 07 May 2024 05:56:02 +0000
Manifest next update:     Tue 14 May 2024 05:56:02 +0000
Files and hashes:         1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: ZJ4RL0iXJLOs8bCIWZp0XJtvKXiJ6cWyCtlkRPV/9xU=)
                          2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: z3Q5zF+FEDFVuismEaJBSvy+GlUJIQ0tTvpv/F4Fp0w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
                          rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
        Validity
            Not Before: May  7 05:56:02 2024 GMT
            Not After : May 14 05:56:02 2024 GMT
        Subject: CN=6639c272-c25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:68:2d:bd:84:0d:4f:df:95:00:6c:68:01:
                    f5:02:19:b5:c7:9d:c0:54:cc:6b:1d:7e:fa:df:8a:
                    5c:38:3d:bd:3c:1a:8e:29:d8:58:2d:4f:5f:ff:fb:
                    4b:6f:02:08:4a:20:6c:76:21:97:00:db:94:30:55:
                    2a:0c:c2:57:14:1d:b1:1f:35:9c:63:74:12:12:8c:
                    51:f5:b1:e3:0a:4c:db:0b:ea:10:bc:40:2e:2a:cd:
                    8a:b8:a1:4d:3c:f7:06:d2:3a:3c:32:7e:d3:7e:78:
                    a9:5c:ee:e2:31:39:9e:1d:1d:ed:b6:12:e9:56:0d:
                    b1:ee:2a:7a:4c:92:dc:ea:3e:6c:fd:ac:4d:0d:9b:
                    9f:89:09:eb:03:11:e9:00:f1:21:1c:5d:ee:97:35:
                    a2:d6:97:cd:9b:94:2d:17:b2:f1:f8:8c:85:2a:ce:
                    dd:48:0e:ac:12:bb:0b:ed:06:14:04:3f:03:0f:f1:
                    9c:29:13:51:ec:23:5c:99:14:7a:43:f3:e4:ff:1f:
                    7b:19:fc:5d:ff:24:54:8a:ab:96:8f:9a:48:e2:0c:
                    ec:d6:ce:84:58:a7:cd:0b:68:c2:0b:60:16:e3:b1:
                    28:4b:fe:31:5d:88:1c:ab:89:23:7a:83:51:af:6a:
                    c4:49:90:19:76:a5:38:35:43:6a:65:15:17:36:0c:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:D0:18:5D:D6:F6:FF:4A:73:BF:E7:66:11:D8:05:59:BF:F8:06
            X509v3 Authority Key Identifier:
                keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:32:b8:d7:2f:5c:5a:07:7b:a9:82:d2:5d:93:bb:f1:10:5f:
         42:d3:00:14:02:ec:56:ee:e2:9a:2b:fe:c1:31:ee:fb:b8:09:
         c0:28:fa:97:97:6e:86:0e:73:14:09:ba:4e:00:9c:1e:ea:74:
         74:40:69:ee:41:cb:16:b6:79:a9:21:26:de:77:8c:f0:3c:a3:
         cb:1a:5d:6c:ea:49:79:94:85:6c:55:f3:df:b8:ad:f4:e3:b6:
         51:3e:a2:1a:76:df:e7:1d:d3:20:66:7b:56:22:1f:da:bb:c8:
         01:43:bf:02:4a:90:39:98:f9:3f:6e:f7:60:76:b5:b5:11:23:
         e5:12:04:61:4a:1d:ef:29:76:2e:7c:92:18:4f:4a:71:47:d8:
         48:7d:e7:d0:54:9d:f6:a8:07:a2:eb:62:80:6b:00:56:29:33:
         20:38:16:8f:ba:09:e6:c3:27:96:af:be:01:fa:bf:6c:d3:cb:
         f5:20:80:5c:fa:a0:77:f6:65:ab:c7:c2:3f:c7:4a:09:c3:19:
         15:5b:85:46:1a:43:21:a5:fa:08:55:9f:7f:c3:23:20:c0:cc:
         5e:68:87:28:89:09:8f:6c:f6:7e:64:0a:aa:5c:2a:66:4d:99:
         2f:e3:cd:2d:a2:1d:27:f5:a4:70:70:d7:2b:22:e7:fc:e4:3c:
         ef:3c:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 06:29:47 2024 by rpki-client on console-ams.rpki-client.org