Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
File:                     IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json)
Hash identifier:          D2Pq2eosigB7gC1fIRgmLHuMnto/z3KFJ8Fh9hK7FMo=
Subject key identifier:   9B:1A:8D:74:6F:0B:DC:18:39:FB:BB:86:3A:74:1B:1D:37:B6:BF:E8
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Certificate issuer:       /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial:       0BC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
Manifest number:          0B9E
Signing time:             Thu 02 May 2024 19:24:44 +0000
Manifest this update:     Thu 02 May 2024 19:24:44 +0000
Manifest next update:     Thu 09 May 2024 19:24:44 +0000
Files and hashes:         1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: SGwD3Tm9krlCsX9sBkWnHPniA8rxirsZJ4/BnFWrWfY=)
                          2: 65F631C0B5E411EDA143B259C4F9AE02.roa (hash: ITLNf+xAEKjAWhXm6FjOyGl4IXrVUlSU1rhTA0XKsLw=)
                          3: 2948A912B6A511EDAF611B68C4F9AE02.roa (hash: 1+I5VIpA+YWUDSc9cWat+eMtaNj2l0No1cGIx72qy3c=)
                          4: 674743FCB5E411EDA143B259C4F9AE02.roa (hash: 99SzWTchwz/heq5hSs3tXaMqMVZV43TqEvRt9UZciB0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
                          rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 18:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
        Validity
            Not Before: May  2 19:24:44 2024 GMT
            Not After : May  9 19:24:44 2024 GMT
        Subject: CN=6633e87c-7a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:98:72:1b:8d:e5:73:e9:39:f5:c3:e2:36:
                    58:7d:b6:28:bf:42:51:1d:4c:18:31:d1:5a:b0:d6:
                    99:da:f5:5c:2f:dc:5d:c5:cf:12:41:b0:ec:1f:c1:
                    28:84:85:62:ae:c9:3e:d9:9a:ca:41:0e:e1:77:bb:
                    ba:8c:d5:3f:3b:a0:55:3a:bb:d8:19:09:4b:ce:67:
                    34:1b:b4:f4:d6:2b:da:18:5f:6d:b3:4a:37:9d:e2:
                    4f:80:96:f7:56:3f:9c:28:d9:10:31:f1:4a:57:53:
                    c2:83:8b:27:44:ea:01:d7:9a:56:9c:c0:d1:50:df:
                    c3:41:54:55:a5:5a:eb:c8:fc:5c:2d:84:39:1e:cc:
                    a7:09:23:2e:9b:77:12:11:32:7a:27:a1:84:87:a7:
                    5b:8e:d3:34:20:9f:39:7c:f7:73:5b:07:73:1f:14:
                    06:3a:eb:a1:0d:d2:3b:30:da:25:60:54:04:32:ba:
                    a5:82:01:d7:09:df:31:a8:b3:50:65:41:25:1c:2f:
                    95:f7:9c:a6:ea:e7:95:c4:49:f3:69:8e:12:0d:80:
                    15:fa:b0:5f:d8:08:86:e8:e1:c8:c3:b2:3f:31:94:
                    15:c2:18:0b:a8:9a:7a:2d:8b:2e:41:16:3b:54:41:
                    3c:e5:e5:44:a9:82:12:22:e5:db:8b:da:12:bd:a0:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1A:8D:74:6F:0B:DC:18:39:FB:BB:86:3A:74:1B:1D:37:B6:BF:E8
            X509v3 Authority Key Identifier:
                keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:de:ae:a9:c4:ce:8a:47:64:a4:5e:41:43:da:7b:f7:88:
         93:f1:f7:75:4e:54:7b:f7:92:63:79:1e:79:1f:0a:fc:0c:8e:
         26:27:a6:93:11:b3:04:78:eb:65:72:92:a4:75:24:b5:6f:73:
         af:31:c9:b9:d1:5f:92:14:43:94:62:66:c1:5f:2c:99:9f:30:
         93:de:6f:c6:1a:ea:7c:85:fc:19:79:35:f3:ed:9c:4b:cc:ab:
         f9:97:1a:6f:d3:d1:c3:e0:0c:12:96:02:3a:98:7e:76:86:d5:
         86:8e:1b:5d:97:40:1a:26:87:20:88:1c:d5:4c:7d:5b:ac:44:
         ea:ff:ff:fc:e2:b7:23:7e:97:15:8d:4c:07:43:1f:01:a9:90:
         c4:ec:90:23:d0:5a:0a:1e:47:ea:69:da:54:9b:32:6c:6d:82:
         6a:18:9c:c0:8c:4a:ba:d1:61:1a:09:34:a2:75:17:d3:83:04:
         0d:3d:5e:ee:9c:41:10:61:7b:81:40:69:18:cf:79:27:c8:e7:
         ef:c0:aa:bd:f4:25:4e:ce:6e:97:d3:0a:30:b2:26:75:d4:62:
         de:e6:69:5b:13:a5:6b:bf:27:5d:e8:8a:c4:41:fc:a3:2f:e8:
         e7:6f:d9:69:16:97:f8:3d:9b:80:81:c1:33:d2:11:f6:0e:0e:
         09:cc:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org