Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          3VHoWnqUhdji2/bYOtfEC/l3iso22jg3xzS1+MuZndI=
Subject key identifier:   7B:EF:D7:E6:B5:01:D1:BE:71:8C:2E:8F:2F:4A:AB:C4:11:A9:04:56
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          0119
Signing time:             Tue 07 May 2024 05:13:00 +0000
Manifest this update:     Tue 07 May 2024 05:12:59 +0000
Manifest next update:     Tue 14 May 2024 05:12:59 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: niMxE3bTvg/rCeqXCt1kp7tRtGhnsKhcbTSYc8xugOM=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: wX4x7oM1mrdnNZS/h1UzVVC+/MIzmiu9MISDolryeIk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: May  7 05:12:59 2024 GMT
            Not After : May 14 05:12:59 2024 GMT
        Subject: CN=6639b85b-18ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3c:94:5b:a2:e7:86:79:31:75:01:3d:34:1d:
                    fe:6a:df:4f:c4:50:0f:74:6b:b4:99:0c:da:23:40:
                    87:f5:d0:fc:e6:8e:6d:8a:07:64:89:c5:67:9c:c9:
                    bb:4b:9e:35:22:d1:56:37:52:25:b8:c4:f1:15:32:
                    dd:83:9f:6f:c8:a9:8d:a9:aa:9f:0b:d0:a4:9e:0f:
                    16:07:ae:a9:b8:26:9c:fe:2f:cc:35:ac:0e:e3:22:
                    3a:fe:af:e8:e7:6e:ea:e1:d7:da:2a:c4:ab:5a:d2:
                    c9:49:b8:91:36:83:2b:78:aa:6f:da:1f:66:4e:24:
                    93:0c:3f:bc:ec:f7:67:bc:b3:fc:8f:c8:1b:75:e9:
                    94:c3:18:09:db:c3:94:7b:76:da:ce:2d:0a:2f:8d:
                    9f:b0:45:b7:5b:e9:51:ac:ac:b7:c1:44:72:74:66:
                    38:dd:82:16:a0:60:d1:c6:de:27:25:af:8c:ee:6d:
                    df:d2:cf:70:9e:38:c2:ab:ab:5b:fd:28:59:b8:b9:
                    80:57:08:79:8b:5c:3c:e2:52:69:cd:ca:54:5d:2b:
                    ac:aa:a0:2c:07:ad:fa:32:1c:e7:5a:93:94:51:74:
                    d4:1a:dc:f5:94:79:59:18:7c:a8:4e:43:28:d4:dd:
                    66:b3:ce:de:23:c1:ba:87:1c:17:1a:0c:3a:b5:37:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EF:D7:E6:B5:01:D1:BE:71:8C:2E:8F:2F:4A:AB:C4:11:A9:04:56
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:af:c8:ce:d2:58:2d:cc:b0:6b:db:e0:60:be:3d:8c:3a:5b:
         4c:57:35:06:19:0d:93:15:74:f3:17:94:7e:d4:19:97:dd:40:
         e0:f3:8f:ec:f8:76:9d:09:e4:f1:f1:57:80:60:51:ca:2d:16:
         fc:a9:57:50:6c:82:bc:29:51:95:43:f7:8e:88:d0:78:55:db:
         30:f8:c6:36:bc:cf:b9:bc:19:f4:11:c9:45:1c:2b:c5:d2:25:
         13:d4:d4:75:ca:90:f0:1c:a2:6d:5f:63:52:69:26:01:b4:ed:
         1a:84:ba:0a:44:b5:e7:bc:aa:69:d7:09:c6:af:91:7e:40:ab:
         4b:22:82:2d:90:46:8a:ce:e8:69:f9:d5:7c:2b:cf:f3:ac:53:
         56:2c:f5:37:8b:79:f8:15:c5:2c:fc:35:79:4e:c8:a8:80:21:
         a6:1a:65:6e:14:06:77:3c:da:7a:11:6d:2e:39:65:da:8e:10:
         f6:61:6d:c9:08:4c:52:a4:a3:c5:3c:9f:93:e1:ca:f3:9b:69:
         05:02:1c:dc:24:4e:28:78:cd:34:cf:86:0e:65:69:c2:2b:f0:
         d6:8f:35:99:0b:86:89:d6:31:b4:ea:48:84:83:89:46:37:ea:
         d5:18:77:2c:21:58:4f:5a:65:d6:e1:35:ac:22:fb:0b:75:f8:
         8f:5f:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 06:29:48 2024 by rpki-client on console-ams.rpki-client.org