Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File:                     Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier:          NrPICPDUPY4don9WvzRdmqFuM9IFfw27vEH6lduk/f0=
Subject key identifier:   98:1E:5B:80:35:F4:7A:08:19:1D:27:DF:CD:9F:11:C3:E9:6B:7F:9C
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer:       /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial:       0BFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number:          0BDD
Signing time:             Fri 26 Apr 2024 19:08:10 +0000
Manifest this update:     Fri 26 Apr 2024 19:08:09 +0000
Manifest next update:     Fri 03 May 2024 19:08:09 +0000
Files and hashes:         1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: 4PfuJldSJgV7N81KcQPOoiUB0Pk/ixEGcByad3aDDqo=)
                          2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: 83OH0Wsd/y1ubngAT82t1pBg049gm5VgpR6zC5KRyEQ=)
                          3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: Qq3O50/II2fF8ZDKuNfLBJMdHudKQhPCei4uAD4b1ww=)
                          4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: qjRK1UsduZje7NigLFGo9IfaYJBsXsGYrorJ0nbh7Fg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
                          rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 19:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3071 (0xbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
        Validity
            Not Before: Apr 26 19:08:09 2024 GMT
            Not After : May  3 19:08:09 2024 GMT
        Subject: CN=662bfb99-38cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:ae:5d:3b:2a:7b:b4:4b:2f:8e:3c:ab:c9:
                    85:05:e9:17:ff:b7:45:aa:6b:f2:bd:c2:26:e3:e1:
                    4a:73:e6:05:bc:b9:42:80:d6:cf:e4:41:69:5d:f1:
                    cb:e9:2f:90:f5:9e:f0:16:67:5f:73:67:be:f7:a3:
                    b0:bf:ca:7f:6c:50:a1:74:f9:3f:01:3b:05:96:24:
                    2a:f0:6c:f8:d7:06:df:de:ab:15:05:bd:1e:aa:2c:
                    f3:0a:08:1a:4c:ee:d8:1e:34:f7:66:ff:a6:bf:85:
                    99:86:1b:ac:09:da:f5:e3:72:89:e9:12:44:d6:65:
                    4e:c9:4b:dd:03:61:02:79:ea:d3:7b:97:a9:a2:11:
                    42:2d:9e:83:24:40:14:bd:fc:fc:b3:d8:1f:7c:64:
                    6c:87:6a:58:51:f8:33:9e:65:2c:39:d7:1b:02:ec:
                    fa:91:ac:12:11:3e:50:8a:84:c8:76:5c:d6:0e:bc:
                    5e:f3:e4:ed:d6:81:95:c7:61:0f:b6:ac:f4:ca:f4:
                    97:a2:60:5a:80:52:d7:5a:f3:d2:5e:ab:cc:11:00:
                    06:53:d5:37:b2:f8:a6:c0:86:40:c9:f3:ca:f6:99:
                    69:3d:cd:0c:f7:23:50:7e:7b:1d:97:41:97:67:db:
                    da:13:7f:c4:45:a2:de:6e:60:a7:eb:d8:47:01:25:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1E:5B:80:35:F4:7A:08:19:1D:27:DF:CD:9F:11:C3:E9:6B:7F:9C
            X509v3 Authority Key Identifier:
                keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:cc:19:9a:0b:bb:82:be:f5:7c:01:1b:ef:01:e8:ec:35:
         27:32:6e:72:4d:ce:f9:7e:28:f5:35:bb:de:55:1b:0f:e1:80:
         75:d6:af:5d:6d:6b:b8:af:a4:07:72:30:5f:ad:6b:31:06:2b:
         d0:70:d5:15:30:48:3e:62:2c:6b:36:db:1e:39:e4:f8:d9:24:
         30:00:f4:45:c6:5b:12:ae:f9:2d:6a:43:8a:67:50:a0:45:97:
         30:9d:46:e4:7d:57:98:c1:76:87:63:cc:1b:8d:35:d4:f0:ad:
         1e:32:11:92:ba:78:f9:6b:fd:95:0b:9c:76:51:70:65:57:3d:
         28:27:bd:60:34:37:74:03:4b:19:ac:b6:75:2c:db:1f:23:44:
         8b:73:6b:42:92:8b:94:b6:26:40:56:74:49:39:56:b3:f9:87:
         80:4e:f1:01:22:88:f2:0e:f1:d7:7e:45:2d:5a:f7:0e:2a:8b:
         12:f6:82:97:14:c1:06:73:90:63:31:46:c7:42:d4:c3:74:0f:
         37:23:ab:9d:f1:7e:84:9e:96:4c:41:26:6b:a2:a9:b2:6f:51:
         05:29:8a:3b:99:56:f3:8b:5f:cd:75:7a:86:df:74:ab:e0:b7:
         67:ec:e5:bd:6b:4a:ce:4e:b7:30:39:f9:8e:4e:ee:e3:53:d7:
         f1:db:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:50:49 2024 by rpki-client on console-fra.rpki-client.org