Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier:          45IgD7IQjr6XNlP4f4xQ35UpG9Hjs8qem9+/eX/sS/Q=
Subject key identifier:   AA:7C:90:62:E2:76:0A:18:FF:4C:3D:63:0F:23:3E:5C:C0:A2:20:C2
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number:          E8
Signing time:             Fri 03 May 2024 05:58:37 +0000
Manifest this update:     Fri 03 May 2024 05:58:36 +0000
Manifest next update:     Fri 10 May 2024 05:58:36 +0000
Files and hashes:         1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: Mtv4OY4f7FIiNr6y8vUwhPCLwQcKTAinjRB/Q2O3s3k=)
                          2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: JfMofx6efmNrALly6LfWx1mO0pCrYZC1n6UcCfMKtOU=)
                          3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: u8kIsJVIp78SEEepgF6rWdlvVZL0QiUXSZNCFyMREy4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: May  3 05:58:36 2024 GMT
            Not After : May 10 05:58:36 2024 GMT
        Subject: CN=66347d0d-f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:0c:68:6c:cf:87:9e:10:e7:af:9e:d4:7b:
                    e3:35:77:40:b6:a2:35:77:07:0f:77:a4:46:bb:d9:
                    2b:83:b0:85:3a:9d:74:f6:72:c9:54:97:13:da:ff:
                    67:4b:2c:53:5e:7d:a5:99:cd:7a:bb:1f:7b:46:1a:
                    d6:cf:26:b1:4a:3a:e1:7c:7a:e9:bd:e2:32:33:19:
                    95:63:4c:50:a1:8f:74:14:49:99:05:9b:f2:e1:f8:
                    09:bb:f5:41:54:82:be:b1:2b:f4:39:89:2f:52:39:
                    d0:19:6b:cd:30:22:7d:3e:29:e1:e7:ee:75:98:09:
                    14:6e:f0:65:06:43:1b:71:6f:55:d7:83:10:8d:2f:
                    21:b7:f1:0f:0e:71:69:e8:99:b5:30:c5:02:7c:94:
                    3e:16:71:c1:39:89:e0:0e:09:72:c2:0b:b0:0c:b7:
                    1d:92:2e:a9:71:29:72:6f:97:fa:36:fd:44:cb:f0:
                    f5:21:5a:5f:52:ef:23:e5:32:c3:76:ef:98:db:9c:
                    54:74:ce:21:bd:61:17:58:6a:bd:1f:e9:66:c2:bc:
                    23:0c:4b:60:1d:03:f4:82:23:9a:a3:77:d4:b4:64:
                    e5:cb:1f:42:3f:3b:d8:7c:bb:7d:96:43:2b:b8:41:
                    c7:97:23:24:ee:2b:59:d2:d7:5e:3c:78:a6:e8:a9:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:90:62:E2:76:0A:18:FF:4C:3D:63:0F:23:3E:5C:C0:A2:20:C2
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:04:46:eb:83:c8:ad:0e:7b:d7:0f:e2:7c:6c:ef:c2:0c:
         a3:ea:ab:5e:5e:41:ed:9a:bd:82:2f:16:1e:6f:92:68:c3:b3:
         f4:d1:6d:ce:99:a2:7a:da:8b:50:61:a5:a5:71:43:76:5d:03:
         d8:d0:4c:26:0a:26:66:0b:5c:91:50:d5:aa:4a:3f:ca:07:3e:
         12:6a:99:08:25:2e:55:12:a1:dc:bd:cd:d1:17:c9:36:f8:02:
         c9:3e:76:a1:c7:a3:d4:33:37:5d:92:04:e6:36:3f:21:bb:d8:
         9f:4e:93:e2:e6:eb:e8:0e:24:65:c5:65:7f:7e:d1:7f:78:2a:
         77:6d:50:ef:81:08:2f:0a:bc:35:2e:49:26:9f:0a:67:8f:81:
         07:cb:07:60:f8:73:90:d8:a6:33:78:1c:23:3d:61:ba:2e:48:
         39:d4:59:59:d6:a7:5c:d8:e7:44:df:ea:6a:91:99:91:0a:06:
         e0:19:3b:91:84:fe:16:28:8e:cf:98:f1:32:a5:a7:27:1f:06:
         d8:99:0b:0e:5b:a0:09:54:35:19:e4:cf:6e:29:13:f4:d0:96:
         6e:90:90:a7:a4:5f:ed:60:f0:df:6a:f1:40:e6:2c:4e:9a:54:
         1a:a7:53:3d:d4:d2:df:9b:e3:37:21:6d:03:4b:db:9e:60:11:
         e1:5c:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:28:39 2024 by rpki-client on console-fra.rpki-client.org