Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File:                     _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier:          QrwP6P4IKeSj/5Xx6FnP3W4jomiPSDP4aTjz0QLi2Po=
Subject key identifier:   30:48:DC:54:32:3F:21:56:98:90:FA:96:0A:EC:1B:FF:EA:1C:39:D3
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number:          054F
Signing time:             Sat 27 Apr 2024 00:51:13 +0000
Manifest this update:     Sat 27 Apr 2024 00:51:13 +0000
Manifest next update:     Sat 04 May 2024 00:51:13 +0000
Files and hashes:         1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: eW0ky1SpuEy2zkJgOpeixH/lEMfC78vsua1s+F9Yrkc=)
                          2: 68219776A41311EBBF911855C4F9AE02.roa (hash: Y8K452VigWqPILIMO36XS1D+CNMeTQIDACnAHkjKXhM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 00:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Apr 27 00:51:13 2024 GMT
            Not After : May  4 00:51:13 2024 GMT
        Subject: CN=662c4c01-d2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:ac:94:ad:71:fa:95:17:03:15:85:a8:3d:
                    4b:9f:f0:0d:eb:b4:a0:26:9b:30:f4:12:66:2d:9a:
                    18:bc:b5:b1:da:89:00:57:d6:ee:c8:91:42:49:da:
                    55:07:47:2e:87:ba:6d:01:b0:b8:31:b0:92:fd:00:
                    e7:d4:d9:2d:fa:a5:9e:ba:44:b5:2a:db:f8:ae:fa:
                    84:ee:21:64:cb:52:0a:76:68:e1:c8:7b:2e:d1:e2:
                    f4:dd:34:52:2d:61:20:63:3f:8d:b1:4d:6f:29:42:
                    8b:62:93:86:13:7c:71:2a:6c:91:a9:12:9b:a5:de:
                    e1:0e:ef:c2:f1:30:fa:94:85:17:b4:e9:3b:02:18:
                    c6:27:18:05:9a:57:93:99:78:89:b9:02:a3:1a:c4:
                    9f:68:cf:5d:ed:bc:3b:16:b1:6a:7c:df:04:aa:6f:
                    35:ed:79:ff:bf:2f:d9:06:fb:21:e3:0d:77:1f:7f:
                    ad:cb:34:8d:8f:97:d4:f3:22:bd:2a:2d:a5:96:af:
                    14:94:86:97:73:33:9e:12:94:99:61:76:af:d7:1a:
                    e7:0a:40:4a:90:86:d7:21:ac:43:bd:eb:6e:87:4d:
                    26:eb:3d:20:da:68:a4:17:95:b0:8d:ee:f2:be:66:
                    f2:cb:91:0f:ab:66:e9:ec:a4:4d:b5:e0:6f:9a:f5:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:DC:54:32:3F:21:56:98:90:FA:96:0A:EC:1B:FF:EA:1C:39:D3
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:dd:7c:de:b1:d1:4f:ee:65:db:b7:3b:39:c4:a9:53:af:
         2d:59:4c:e7:39:59:6b:9b:ef:f0:c9:8a:a6:77:1e:d7:06:79:
         da:88:70:90:ad:ae:99:33:46:a7:a1:f6:5a:83:05:55:90:4c:
         f0:81:74:ce:cf:34:6a:c2:98:75:93:85:73:b0:34:97:e6:c2:
         9a:03:08:6c:11:b0:a7:a2:00:03:60:3c:90:aa:20:a8:e0:3a:
         d9:09:57:ef:24:6b:83:5d:f0:01:10:f0:63:f8:43:b8:ac:c3:
         22:3d:a7:22:21:ba:41:ba:28:3a:80:26:e6:6a:f4:db:03:af:
         0d:a9:be:1b:ec:35:fe:ae:f7:b4:00:56:d8:94:e4:14:59:4a:
         3f:9b:d7:74:f4:fa:ca:86:0d:53:91:91:40:1f:04:03:af:51:
         24:3a:67:5c:7f:2b:01:82:5f:7f:71:60:22:94:9e:ee:5a:58:
         09:d8:29:f7:a8:6c:ef:0a:82:61:5d:fd:14:f4:3c:83:1b:fa:
         3f:af:d2:ea:f2:53:0d:a0:94:79:0e:2e:c6:29:a0:bf:7d:39:
         83:4d:d3:60:95:cc:68:c5:d3:e9:23:12:5e:1e:21:d6:55:45:
         55:cd:61:c7:bc:83:29:98:d0:5e:e9:0c:9f:3b:9d:6e:9c:d2:
         bd:93:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:06 2024 by rpki-client on console-ams.rpki-client.org