Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
File:                     bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json)
Hash identifier:          vZ0N2DHHBOdaxN3746LSldeaI9dY1aY9ovVFjmlmQ7o=
Subject key identifier:   CE:55:68:D9:6E:6A:44:04:34:E6:7F:C1:50:9E:2E:23:22:BF:36:BD
Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9
Certificate issuer:       /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
Manifest number:          6B
Signing time:             Fri 17 May 2024 07:37:09 +0000
Manifest this update:     Fri 17 May 2024 07:37:09 +0000
Manifest next update:     Fri 24 May 2024 07:37:09 +0000
Files and hashes:         1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: HQ1JiS0qL4/jbrKjMK6RkOaPWN0dNV4C3gNrKbiQ6G8=)
                          2: 52531292718111EEA2596A60C4F9AE02.roa (hash: 7m5gCq4zk9c382aEQDqvdyja5r7ee2pi303b5+aWrU4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl
                          rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
        Validity
            Not Before: May 17 07:37:09 2024 GMT
            Not After : May 24 07:37:09 2024 GMT
        Subject: CN=66470925-30f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:c1:60:33:57:41:e0:7d:e7:88:42:c1:37:
                    2f:74:40:19:bc:c2:e8:2c:fb:e8:ce:ed:e6:85:71:
                    06:92:a4:60:5e:0b:ac:0c:16:b7:c0:b4:66:ab:e9:
                    ce:7e:72:57:5a:36:ec:99:5b:fa:a2:a5:d4:88:16:
                    cf:e8:62:6c:9e:f5:a8:51:10:92:3a:ab:d0:cc:eb:
                    e0:0d:67:c4:a2:f9:bf:2a:45:30:01:5c:9d:49:4d:
                    34:72:36:2f:fe:87:f9:c5:02:71:b4:7a:a5:89:6a:
                    c2:e5:96:03:6b:3f:f3:a6:bc:51:71:dd:be:91:e3:
                    75:51:9a:9d:05:e5:b6:22:b9:4b:15:de:c2:a1:94:
                    fc:e2:38:3a:62:64:8e:ac:47:53:cf:86:ef:e2:57:
                    4e:67:5f:e9:96:a3:22:67:fa:bb:15:d6:2a:fe:ea:
                    68:8e:3e:86:0b:54:81:f6:a9:53:0e:b2:72:3e:f4:
                    d5:90:25:e7:19:04:82:a8:d8:f2:5c:ab:b4:b6:69:
                    d3:38:5b:0f:97:78:a1:e3:ff:03:8e:82:63:81:1e:
                    14:70:a5:10:e3:f1:e5:67:49:9b:54:c6:c2:3a:9d:
                    42:cb:a9:4f:c6:ed:8c:29:d9:02:65:a4:3c:a9:47:
                    b4:b4:1e:74:e7:88:8b:6f:d3:e9:a7:a5:63:fd:5e:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:55:68:D9:6E:6A:44:04:34:E6:7F:C1:50:9E:2E:23:22:BF:36:BD
            X509v3 Authority Key Identifier:
                keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:76:e0:b0:a4:b7:e4:63:cb:80:0a:b4:02:89:7f:b2:29:
         6c:e8:16:cd:1e:9d:fd:ce:ed:e4:a6:49:97:3b:b3:57:e8:e4:
         22:6e:f5:c8:17:07:ed:02:44:45:01:df:bb:7a:8c:d2:1c:54:
         6f:c8:ad:ae:4e:81:d0:6d:f9:c3:6c:18:f2:b7:2f:3a:10:76:
         5f:c7:f7:9b:fe:5c:d3:52:3c:dc:36:d8:ba:1c:60:f0:2c:35:
         48:bd:04:13:7e:8a:ec:9d:18:76:b2:07:67:db:a1:bf:26:fd:
         2a:f5:c9:a9:59:5b:d2:49:23:13:b2:4a:be:80:07:24:8b:b4:
         50:88:5e:f9:62:e0:dc:e4:45:bd:11:77:5b:4a:81:78:33:af:
         50:4a:25:9c:22:5e:5f:5a:16:84:5c:be:1d:9a:63:1c:9b:13:
         9f:13:c9:12:44:f7:8e:1b:33:80:dc:ed:34:e4:31:9d:0a:f4:
         f4:4a:6b:55:d7:67:d8:15:59:70:ca:bd:fd:0b:dc:d6:56:43:
         90:1e:4e:3d:7b:f5:5e:84:2d:1f:24:6b:3a:d6:4d:9d:87:02:
         92:0c:07:89:93:9c:55:f5:e5:d8:78:80:6b:4b:fa:f7:69:c1:
         f4:2d:71:69:6e:cf:0b:dc:96:1e:fa:b9:b0:b7:fe:72:96:ff:
         7a:09:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org