Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
File:                     EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json)
Hash identifier:          /HDrH3kD8jk2EBdi0Aceo/jvZOfIj+vldCsotmKrEDc=
Subject key identifier:   48:80:10:14:EC:5E:9B:4F:33:1C:AD:AA:CB:D1:FD:98:F4:29:6C:52
Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08
Certificate issuer:       /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
Manifest number:          066F
Signing time:             Mon 06 May 2024 23:33:24 +0000
Manifest this update:     Mon 06 May 2024 23:33:23 +0000
Manifest next update:     Mon 13 May 2024 23:33:23 +0000
Files and hashes:         1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: lT/u7gF4clH4PUhW6eRZpFC22rKY/wUuvMg6SFW/GaA=)
                          2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: eVZ25PhJmdJJ+k8iptjOXcq06eNx21H+Qxt0VJ6DxhM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl
                          rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108
        Validity
            Not Before: May  6 23:33:23 2024 GMT
            Not After : May 13 23:33:23 2024 GMT
        Subject: CN=663968c3-ee71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:5f:92:fa:03:17:c4:54:d3:f2:27:8c:1a:
                    90:4b:5b:25:84:78:f8:aa:57:b4:9c:97:8a:18:21:
                    12:b1:eb:c0:d2:0a:76:0a:ef:85:ec:cd:54:a7:dd:
                    2d:c2:6e:37:29:de:63:98:c0:b6:47:c8:be:dd:6f:
                    47:0b:50:d6:f9:f7:00:53:e6:3f:5f:92:91:ac:4f:
                    3e:8a:64:a7:04:01:7d:e9:31:8a:ee:9a:c9:07:2a:
                    1f:b2:5a:e1:bf:b1:98:46:5f:32:17:87:d4:aa:22:
                    31:4e:41:4b:5a:b1:5d:ba:2f:a9:8a:d4:c9:ff:cc:
                    dc:39:13:59:a0:ff:cd:e9:bd:52:68:b8:05:3e:10:
                    99:32:72:3a:45:b5:cb:8c:7b:50:69:3d:3e:e1:64:
                    e2:0b:04:8e:ce:48:c2:77:d6:c0:3d:ef:0a:c1:eb:
                    bd:54:e0:31:57:09:bd:5a:c3:6a:cc:7c:2c:db:f7:
                    b6:a7:9a:0b:e2:83:72:0d:3a:20:ad:0b:80:52:83:
                    32:59:19:0b:e8:cd:bd:a4:23:ad:fa:50:9f:72:6c:
                    ae:d6:ea:63:f6:31:e8:d6:b7:ec:82:de:18:24:19:
                    55:03:6b:61:0c:a7:4f:e7:92:69:67:1c:fe:b5:c7:
                    6a:8f:6c:8b:1b:8a:11:ae:a0:6c:5f:0c:9e:88:93:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:10:14:EC:5E:9B:4F:33:1C:AD:AA:CB:D1:FD:98:F4:29:6C:52
            X509v3 Authority Key Identifier:
                keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:73:ee:4e:17:fe:1a:a5:1f:14:1c:64:ef:73:17:fe:63:d8:
         45:95:74:48:75:80:22:62:2a:34:b7:62:08:ef:bf:58:95:1e:
         21:65:10:ec:b9:fe:d4:e8:f0:3e:2f:ee:d0:e2:f3:4e:49:65:
         05:85:cc:1d:f4:17:26:67:9e:f2:00:e5:3d:1c:0a:b0:cb:be:
         e4:03:39:cd:6c:bb:5c:12:4a:50:02:a0:cd:b6:5c:e7:aa:b7:
         dc:1f:d9:ed:18:03:5e:e0:6a:97:fe:ed:5b:87:2f:d8:8e:9c:
         e2:ed:ce:89:1d:ea:a5:40:db:23:f3:c9:99:e9:4d:ec:cc:fe:
         77:31:f6:b6:67:91:65:79:af:a7:ab:75:5f:1c:e8:4a:4c:c2:
         37:30:24:45:b9:96:8f:c6:2f:f3:48:6a:88:06:32:51:cb:40:
         62:b2:3e:77:25:29:49:47:8b:93:21:cf:b2:40:6d:49:83:7d:
         a8:c6:af:88:ed:47:48:89:94:58:1e:43:51:a5:76:9b:b9:11:
         e4:0b:91:23:a6:98:cc:13:9e:84:42:89:b6:e2:2f:85:de:98:
         b7:f2:3f:9e:4b:48:63:45:5a:63:75:1c:00:bc:93:27:fd:dd:
         54:2b:2c:bd:ff:2b:7f:d3:18:e4:bf:21:56:db:06:4f:38:3e:
         f3:b1:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:16 2024 by rpki-client on console-ams.rpki-client.org