Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
File:                     ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft (raw, json)
Hash identifier:          qPkUkk8xtDbmSLcaMDqLgVHkU43h7CSXL/Lzapdu6Bg=
Subject key identifier:   99:D2:F0:88:37:48:2A:B3:24:5D:5D:08:EE:33:75:62:C2:94:37:EB
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Certificate issuer:       /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
Manifest number:          08B8
Signing time:             Thu 02 May 2024 21:36:41 +0000
Manifest this update:     Thu 02 May 2024 21:36:41 +0000
Manifest next update:     Thu 09 May 2024 21:36:41 +0000
Files and hashes:         1: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl (hash: gC15hNolBvnC2TKNWrXykODVNq1rOkjniHwYHLZdLJc=)
                          2: 9A26EF30CF6011EDBDB7BB31C4F9AE02.roa (hash: 3bno0Z4LYagNtb3V44ZvGS0PoARh0RoHgLRueHFWT1A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
                          rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
        Validity
            Not Before: May  2 21:36:41 2024 GMT
            Not After : May  9 21:36:41 2024 GMT
        Subject: CN=66340769-4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:f7:b2:1a:d9:07:89:a7:3d:33:ce:7f:c7:
                    49:da:a3:20:08:39:61:35:ed:f5:1b:c0:c3:90:03:
                    99:95:11:98:6e:34:72:54:22:84:d0:88:77:34:1d:
                    cb:9c:6d:8f:3c:3f:5c:60:2e:c5:ef:d7:37:a1:e6:
                    08:93:82:c1:3a:e1:f1:27:60:cd:9f:7f:fc:5c:70:
                    26:13:43:88:7b:4f:4a:aa:b6:8b:4a:82:8f:82:93:
                    ce:e0:21:bc:d0:47:ae:b5:2d:05:51:bf:d7:a8:9b:
                    31:80:c3:5f:9c:6b:88:4a:64:95:39:45:86:69:eb:
                    4b:15:13:5c:c9:1c:d7:2c:fe:31:36:07:c2:6a:59:
                    b3:25:3d:ed:ee:b4:65:7d:2b:4f:39:90:eb:0a:33:
                    e5:29:50:d4:6e:0d:86:8c:16:b1:af:c2:17:72:ab:
                    f7:96:31:35:79:34:1f:50:ff:74:a2:c0:82:2d:8d:
                    91:21:71:79:9a:fe:2f:6f:2d:08:12:f5:cd:cb:3d:
                    b4:6e:ff:e4:a0:56:c9:0c:8a:0b:bf:52:d5:25:a5:
                    f4:77:2a:36:21:4d:eb:19:9c:66:27:bc:78:f2:0e:
                    03:ff:62:57:6a:56:d9:00:33:99:7f:14:57:4e:75:
                    46:72:0d:84:e6:04:11:0a:bb:28:00:2e:37:1b:e1:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:F0:88:37:48:2A:B3:24:5D:5D:08:EE:33:75:62:C2:94:37:EB
            X509v3 Authority Key Identifier:
                keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:c8:06:ea:d9:ea:f7:79:0d:28:ee:b0:1f:9c:0c:2f:4e:
         aa:c7:cf:c8:f0:c3:18:84:7e:a6:14:97:71:a2:f6:5d:21:98:
         17:9c:44:0a:0a:e3:63:ac:c8:e1:63:cb:b5:76:b9:14:cc:fe:
         76:58:7e:bf:30:82:57:43:1f:e5:63:19:24:35:03:52:d7:82:
         09:82:e5:6c:16:1f:b1:d3:a8:e3:27:7a:33:d4:2b:20:9e:22:
         e1:71:22:cc:95:14:8f:80:5f:ba:1a:a1:0c:5f:a9:27:4d:94:
         6b:5c:05:bb:d3:76:14:9d:ac:63:e9:d4:fb:1e:ac:d6:36:f7:
         b2:33:8c:83:2f:36:bb:62:f1:88:b8:51:92:6f:28:5d:91:e6:
         ab:00:5e:b0:82:0a:fb:f8:b1:d2:65:bf:be:f3:e0:47:3e:54:
         fa:d8:f6:c0:95:4b:84:28:08:6b:07:4f:92:cf:94:50:a1:1d:
         24:6c:86:8e:cf:49:1d:ac:81:ca:54:58:cb:bd:72:3a:0e:0e:
         bb:6c:76:89:3d:4d:6c:fc:be:5c:10:fc:34:08:a3:4d:d3:4b:
         c6:78:43:bb:4c:35:aa:64:69:fd:6c:7c:f6:d3:ff:52:c3:2e:
         7b:3b:85:31:7c:da:b1:fb:fd:b0:4b:4b:ca:02:a1:3b:82:0d:
         89:2e:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:13:18 2024 by rpki-client on console-fra.rpki-client.org