Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          ikqu8U3RZvSO8iXriEsL1f82pDSM3vatLX+AJKceUBY=
Subject key identifier:   85:03:96:DB:16:9E:CA:07:1F:15:AB:F5:F7:55:1A:FB:8C:3E:71:69
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          04D6
Signing time:             Wed 01 May 2024 01:54:16 +0000
Manifest this update:     Wed 01 May 2024 01:54:16 +0000
Manifest next update:     Wed 08 May 2024 01:54:16 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: cFwKbIDBbKQF+CzlVayfCUF1+N7q4eT7hDhaFSu0YVc=)
                          2: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: SUXVs1ZzAYU5i/L/yB6yAn4TLIXGBesTJdljmT2IXNw=)
                          3: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: UPjqVtuQblWZkgAF8WsFu+HAyCYW+0LeEDLWrsUwBMw=)
                          4: 5BCDBECC9D6311EE8C1C2B7AC4F9AE02.roa (hash: +dBDCCWrJ8tSR37qJcmeXo/gTnf5ts6kb/OgRlSFyVM=)
                          5: 82608162E53E11EB9E429C44C4F9AE02.roa (hash: 5++m/kOlfMBq6mMDQIOTUxMQfGevwHoL6rdYyR/XxKY=)
                          6: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: PBGZ2KnaCxwR5ftzHOcDVFeoe0tLStWRjZ4junJ58OY=)
                          7: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: PhfopnuJziyLZIeDEB2RNxZoX6sOg+Sd/H8Lm5oFqYY=)
                          8: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: PSuAPTb4JwBLk7y4XxWAuLrizraJ5V948KrQtVgk7S0=)
                          9: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: NbNJ/Lp4AiIGIDLEh0a+m7Al7spoloRx3mAw221v37U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 01:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: May  1 01:54:16 2024 GMT
            Not After : May  8 01:54:16 2024 GMT
        Subject: CN=6631a0c8-c1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:a1:75:04:5c:1d:12:69:6b:2f:f4:6a:ae:
                    a3:d5:ab:53:65:55:21:24:5c:f3:d5:12:28:b4:87:
                    00:85:5c:e0:36:fd:1b:14:e4:f9:6b:38:bd:63:b1:
                    3f:9e:b0:5c:a5:2b:6f:53:1f:a5:62:bf:c6:a3:32:
                    a0:ed:73:7d:19:60:83:c1:a5:d6:67:e9:59:42:18:
                    22:2a:6f:a5:41:ec:84:93:47:93:f8:23:08:9a:4a:
                    ff:88:ab:c3:39:6f:63:92:5b:84:5d:92:99:dd:c1:
                    98:7a:f8:95:64:ec:5e:78:ab:1e:d8:72:c3:80:4b:
                    d3:d0:ca:bc:0d:b4:22:17:f9:7b:25:a7:0d:47:82:
                    5d:0d:ce:66:2a:ba:6c:80:74:3c:bf:5f:d7:0e:95:
                    02:2c:51:38:3f:81:97:5a:18:21:c4:c3:34:8a:40:
                    a1:4b:19:bc:04:41:06:e7:89:5d:34:41:e9:6e:1c:
                    c0:81:64:96:63:ef:c8:34:b7:f3:f2:77:3d:11:7a:
                    ee:f6:e4:a9:39:34:29:cd:5b:a3:bf:a7:fb:60:a4:
                    25:bc:76:c6:68:a0:6b:e3:1c:fc:98:f8:ed:a3:c5:
                    f6:ca:c3:bb:b5:b0:f0:3d:b5:b2:8d:96:78:59:ab:
                    2b:c5:f0:dd:68:f3:1a:42:47:fb:04:50:55:83:e0:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:03:96:DB:16:9E:CA:07:1F:15:AB:F5:F7:55:1A:FB:8C:3E:71:69
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:0f:d1:90:06:c3:97:66:25:75:4b:d6:ac:b2:a2:8c:da:
         79:fc:aa:9d:b1:9e:e8:6b:e4:b6:1d:03:be:e7:21:90:4c:a7:
         f7:5c:37:1c:16:88:5b:30:31:d1:36:2a:89:9e:54:95:30:18:
         6a:b0:f2:9d:6d:8f:ad:6e:73:b8:a1:a7:9b:fb:64:85:c7:28:
         c9:7e:0b:8c:92:44:5b:5b:a2:91:8a:fe:3b:93:30:8f:17:25:
         9a:a8:7d:a0:4a:0d:30:fc:ce:b8:aa:39:eb:b0:e8:ab:76:96:
         05:96:34:b6:82:62:06:ed:ef:fc:54:ec:d3:26:96:c3:42:27:
         3c:f3:4e:6b:ec:98:7f:a8:6e:c5:9a:dd:fa:21:85:a8:ca:27:
         95:ac:83:cf:48:23:db:2e:86:96:8c:7c:43:59:c4:e4:78:a7:
         d1:36:cc:b0:ee:20:4a:0b:11:46:8e:f7:22:9a:02:ec:a6:8a:
         f2:5a:71:62:f7:ec:85:ab:43:19:4c:50:42:53:fc:2b:5f:ec:
         23:db:f6:33:85:90:f9:02:b3:67:e4:99:b8:1f:08:b3:65:ec:
         ba:ff:35:26:3c:0b:27:28:0a:73:e7:93:76:00:4c:2d:44:e5:
         5a:9e:02:87:84:be:f0:c1:f5:6e:bc:1d:49:82:d7:f9:14:68:
         af:35:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org