Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          8r0Z/o+X+CT8J43VIdeSgdfsNghOdWNNHG4DSbHMbiA=
Subject key identifier:   76:64:BA:4B:F6:A5:C6:C6:CF:94:9D:42:31:14:EB:E7:84:A4:DD:C6
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       1734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          16FD
Signing time:             Mon 06 May 2024 17:11:16 +0000
Manifest this update:     Mon 06 May 2024 17:11:16 +0000
Manifest next update:     Mon 13 May 2024 17:11:16 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: mzSWvNTuHBKA+DiwXf0n/G8NGjIEXP3SsrHl+e7OcJw=)
                          2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: EtDaxhToMUaXQqBpB7YShd7GhOWDJATl5CFZ4kv+tSc=)
                          3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: 7zvymsgGXJY5ymUoKW6Gj6uo9AlN5EXma2tXWDebJaM=)
                          4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: MHD+Vqr34LxIYPoPmX4LlFwonzJL0QSfCHfJusXHZes=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 17:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5940 (0x1734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: May  6 17:11:16 2024 GMT
            Not After : May 13 17:11:16 2024 GMT
        Subject: CN=66390f34-9c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:0f:d0:ba:58:77:6c:1e:9d:46:2e:e6:79:
                    3a:74:01:2f:33:b9:7b:8e:75:04:4f:a2:37:c3:d7:
                    17:00:02:6f:aa:de:e9:24:7f:db:2b:39:1d:e8:f1:
                    22:f3:b1:e5:d0:e0:82:0e:8b:dd:48:78:58:8a:13:
                    bc:9d:90:58:0d:5a:49:90:07:af:d4:60:3c:05:bb:
                    05:55:e7:44:9b:46:c5:79:92:dc:7b:33:02:a8:3c:
                    e0:fe:b0:31:37:ca:1c:74:bb:2b:61:65:e5:ce:1f:
                    d1:92:3f:84:05:31:11:a1:88:df:d4:c8:61:36:3e:
                    54:52:f0:3a:40:d8:56:d5:24:d0:f6:0b:ba:75:94:
                    4d:c5:7a:c4:e9:a9:f9:93:ce:86:8c:e3:3a:3f:b3:
                    e4:a7:4d:bf:fb:1a:bc:88:f2:15:1a:b5:fa:e4:34:
                    8c:6b:eb:2c:99:36:20:be:e1:bb:9c:7b:c0:c2:0d:
                    69:70:58:1d:94:21:30:cc:8f:db:0d:df:a0:b0:d6:
                    43:84:d5:94:84:09:5c:b2:11:8e:0f:3e:ee:de:27:
                    aa:d1:99:e6:e9:b7:f5:2e:8d:92:e6:9a:d8:42:b3:
                    92:e5:4f:b8:58:32:98:38:65:33:12:b4:dd:ee:d5:
                    b5:fe:89:85:81:e6:20:87:73:01:0e:ed:f7:d2:22:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:64:BA:4B:F6:A5:C6:C6:CF:94:9D:42:31:14:EB:E7:84:A4:DD:C6
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:44:9e:c6:13:8a:ed:5f:b0:81:e0:c3:40:51:36:ba:2a:4c:
         ef:0b:ec:ae:25:36:bf:d5:97:0c:a9:6e:54:9f:97:4a:81:fe:
         f9:ba:66:bf:08:9e:3e:01:c9:fb:e8:b5:71:33:0e:96:e0:68:
         3f:23:69:8b:0d:a9:99:46:10:68:91:37:e5:44:d0:e0:99:6e:
         8b:9e:95:21:7e:3a:65:c2:5b:ef:97:ef:33:f4:a3:ce:07:40:
         6b:fa:c4:5e:34:64:91:0a:c1:c6:7f:b8:31:f3:d0:b9:29:45:
         8a:a9:75:13:9b:02:0f:5f:16:14:4c:16:2b:78:fa:fb:66:f2:
         64:77:0e:48:2c:9b:ff:3a:d0:fe:f7:54:67:a8:90:d6:18:14:
         89:3e:6c:45:40:2c:22:45:61:72:78:88:e1:7f:55:72:2a:cd:
         6d:65:70:cb:58:96:e5:30:c6:5e:3a:ad:80:1a:90:0f:4c:3c:
         dc:da:0c:52:57:b2:d0:61:8a:1a:6d:03:91:6f:06:c3:8c:4e:
         4c:c9:4f:5f:ea:96:4b:e6:3e:20:90:19:43:6f:07:c1:80:19:
         04:79:55:f6:c4:c8:59:e8:1b:ee:1c:14:79:6d:4e:90:25:a5:
         1f:5d:4e:02:fe:ce:8c:ac:d6:2e:c1:d5:26:17:4f:27:b4:09:
         de:d3:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:19:12 2024 by rpki-client on console-fra.rpki-client.org