Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          Ghoxl9mlCcqaH48wCYFALX31aTldI7N4bcMkPjXTBRQ=
Subject key identifier:   02:DA:D9:C9:4B:39:D5:84:C5:2A:E9:F9:16:01:1D:F3:E5:AE:07:CA
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       09AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          09A1
Signing time:             Sat 04 May 2024 21:02:33 +0000
Manifest this update:     Sat 04 May 2024 21:02:33 +0000
Manifest next update:     Sat 11 May 2024 21:02:33 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: 9xr8rSpyrnzoUUp0L0Kqqs7lMGyFmxu9uOAzXA7je+A=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: 51+f+N7VXp/7OL2hBSX0Q0EYwRbTOFh25F3Rzwpfr1M=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: vu6FjtFfpAvonsrsFkxbPttB1Vgvs//29/RnvUMOyNI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: May  4 21:02:33 2024 GMT
            Not After : May 11 21:02:33 2024 GMT
        Subject: CN=6636a269-1551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:51:66:dc:78:9e:86:1e:6f:1c:da:b8:38:
                    2e:9c:49:ba:48:75:7a:21:09:e6:eb:69:07:77:40:
                    5d:7e:c2:4e:f8:d9:bb:60:e1:e9:da:11:17:cc:8a:
                    11:57:1a:cb:29:62:d3:b8:d8:ad:8a:56:b5:68:d9:
                    d4:6d:d2:42:9f:ba:8a:7d:ee:23:e5:1e:b4:45:1a:
                    79:d3:ad:18:83:d8:32:85:b8:67:be:a9:77:4f:4a:
                    34:c7:af:04:e8:64:ab:58:0b:8a:ee:1f:79:fa:08:
                    85:19:3e:7a:61:f2:88:6d:ec:66:5c:ba:de:55:00:
                    c4:da:78:56:0d:50:63:0c:88:5f:2e:f8:f5:da:ef:
                    83:ae:b1:b6:45:27:e1:f5:c7:7b:5d:2e:58:59:5e:
                    b6:71:3c:25:1f:88:7c:1d:fa:90:ab:56:b8:f1:e7:
                    06:30:7e:00:1f:7a:64:af:ca:b3:4a:82:30:f8:b9:
                    26:b7:59:7f:87:d0:c4:17:28:59:b4:2c:84:dc:7d:
                    f3:a7:fb:5a:3f:31:ce:a6:03:4a:84:44:74:25:cd:
                    fb:8f:ff:9c:51:cd:b7:a3:70:78:0d:bb:4c:f0:67:
                    ac:32:6c:1b:fc:e7:c5:83:ca:62:54:65:18:2f:6b:
                    de:d8:56:93:7e:6e:70:e7:85:32:49:17:11:20:8f:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:D9:C9:4B:39:D5:84:C5:2A:E9:F9:16:01:1D:F3:E5:AE:07:CA
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:55:89:ca:e1:10:cd:3c:fc:e9:a4:69:6f:5e:ce:bb:f8:
         2b:c5:08:98:af:e6:98:c9:66:38:99:90:31:50:40:99:93:e8:
         ff:99:7a:ab:d3:90:27:b2:60:53:1c:b1:21:6f:cd:61:9c:88:
         65:38:86:51:5c:83:7a:fb:10:cc:d7:17:d0:20:60:72:61:f8:
         df:bb:12:49:f0:5a:c6:fb:66:38:66:07:52:6e:2c:e2:07:d4:
         d8:31:81:aa:78:bf:86:88:e5:ec:21:39:43:29:10:80:79:5f:
         7e:64:bf:78:a9:ed:f0:f9:c7:e1:71:45:bd:70:ea:19:85:0d:
         5c:ed:fc:f7:86:58:fc:b1:f7:60:45:b9:42:ab:c4:49:2b:71:
         77:af:e8:62:d0:1a:5c:f9:33:7e:cd:f9:b5:46:c4:1d:79:06:
         53:47:07:29:9b:98:a5:a8:cd:bc:1e:39:30:b2:8d:69:56:5b:
         c9:26:c7:c3:f3:8f:e5:95:fd:ab:07:8b:98:ab:86:de:f2:22:
         14:05:4b:24:d6:8c:b2:dc:a7:40:82:33:94:9a:c3:d3:75:e6:
         4b:77:36:9b:d5:42:de:93:23:91:70:e9:07:75:55:58:28:a3:
         d5:83:ff:a5:ec:e0:14:55:52:20:f2:ec:85:27:90:fc:8b:8c:
         ba:c3:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org