Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File:                     xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier:          7jBN0EAPFX1DjhoH6Vk+8GqC0anpxTrVsb3oyHRuD3A=
Subject key identifier:   D5:FC:BB:B5:F1:D3:BC:E4:BA:CD:33:90:29:7C:25:35:DA:6B:9D:41
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer:       /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial:       2253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number:          2229
Signing time:             Wed 22 May 2024 16:14:56 +0000
Manifest this update:     Wed 22 May 2024 16:14:56 +0000
Manifest next update:     Wed 29 May 2024 16:14:56 +0000
Files and hashes:         1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: l5wLFXntq6pm82QDtNVx5c0DU78Mf4K/tasWPG5qpK0=)
                          2: 3CB9EF84BF9511EEAD184E59C4F9AE02.roa (hash: 0E6kCAbBWjOzpnldz+3yyTPwXBQYeelPRq++GjN98pI=)
                          3: 1A519CD615DD11EBAA7C4D52C4F9AE02.roa (hash: LvnN9fDKCVzFVLCsoE1cCwf8BQyVry4uoLmQQxu2nXs=)
                          4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: 0oH2mmU5r5IU4xxxT30t56WYPFMGsM6PNMn8tM27vV4=)
                          5: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: ZjyNbUjTEmXclvfkUsDawMAFcngwwS/cepT6NtuGViI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
                          rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 16:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8787 (0x2253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
        Validity
            Not Before: May 22 16:14:56 2024 GMT
            Not After : May 29 16:14:56 2024 GMT
        Subject: CN=664e1a00-ea07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:da:cc:62:e7:e2:ab:0d:fd:5b:ef:82:f7:
                    38:65:0a:5f:da:d0:24:23:de:a9:39:2e:ae:ec:ea:
                    50:41:df:81:87:f5:95:01:ce:ac:f2:0a:d3:a6:12:
                    b6:26:0d:dc:3a:86:a6:ae:c8:af:ba:52:ab:f2:38:
                    aa:04:f0:93:06:eb:16:95:d7:06:85:8f:7c:a2:05:
                    b4:ec:99:2a:57:27:ee:d9:ee:f0:cd:31:1b:23:1b:
                    95:ad:c1:a8:7e:68:64:42:2c:1c:1a:4f:99:95:f7:
                    46:27:bd:f1:08:c4:4d:4f:de:56:58:06:16:a7:3c:
                    ad:68:bc:54:1d:90:07:7d:ca:28:18:ae:b5:6d:96:
                    c9:a7:68:ee:ab:21:08:3f:08:31:63:27:5e:6e:2d:
                    38:57:60:bf:73:f6:ba:3a:a1:83:92:5c:c3:3a:a9:
                    5f:87:f3:24:90:61:9e:0a:c6:91:2a:a2:7b:a7:c7:
                    1a:f4:a6:a2:71:6d:53:09:5d:55:8d:5c:a9:a6:1d:
                    25:50:ad:7a:ce:8b:5f:48:eb:4b:49:86:68:f6:88:
                    87:9d:71:ac:66:14:18:c9:1f:df:05:9b:6a:b5:09:
                    c7:6a:53:ea:a2:c9:2f:a8:16:8c:38:e3:6f:45:1f:
                    ab:ac:6c:42:f6:43:27:65:0f:d9:80:d1:20:e6:d2:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:BB:B5:F1:D3:BC:E4:BA:CD:33:90:29:7C:25:35:DA:6B:9D:41
            X509v3 Authority Key Identifier:
                keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:df:68:3f:13:4a:d5:e1:b9:50:e4:d6:78:54:01:22:ac:
         83:2a:9d:4a:cb:8d:c3:ec:c1:56:f8:06:4e:f6:79:12:cd:ab:
         03:7a:53:3a:9b:ab:25:67:d9:5d:ae:0a:64:de:84:e3:81:d0:
         ee:9f:66:3d:38:fa:92:92:6a:76:7b:5b:d2:99:3f:e8:47:e4:
         df:a6:99:ba:fc:fe:b4:bc:c0:b3:5a:9e:57:84:3b:98:2e:65:
         b3:34:75:5f:e7:ff:29:13:6e:cd:fb:79:fe:43:05:8b:63:07:
         44:34:3a:4c:33:91:b9:f5:3f:b0:4e:67:84:cc:f4:4f:47:6d:
         6a:49:bd:88:77:4b:1f:d6:f5:7f:91:03:f2:74:cd:13:3b:bf:
         3d:f8:69:a8:1f:48:2d:e2:37:5b:52:d3:f5:78:2d:80:8b:47:
         16:b7:7b:fb:d8:d4:cb:ae:b7:f2:6c:00:3e:25:9c:3a:39:ec:
         30:a4:ad:d0:b5:9e:e0:f8:2a:f7:f1:47:3e:c7:c4:5a:77:a0:
         5e:3f:2b:97:9b:0e:d1:8b:da:fe:3c:6e:9c:e3:4e:d0:04:2c:
         57:ce:80:9d:66:46:6d:25:f6:7a:7b:64:1c:8d:23:23:9b:7b:
         7f:8c:28:36:47:02:3c:31:6f:c8:c8:ce:32:7a:d6:82:63:7c:
         26:d5:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:07:58 2024 by rpki-client on console-ams.rpki-client.org