Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File:                     OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier:          GRyMcjcTj6lHlDopUc4RfNoBw9VsgEZHgS5D7rDRpTE=
Subject key identifier:   B6:A3:3F:2F:E8:27:E8:0D:D9:3E:88:D8:08:05:B2:42:35:29:F7:7A
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       0F54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number:          0F3D
Signing time:             Thu 02 May 2024 18:16:19 +0000
Manifest this update:     Thu 02 May 2024 18:16:19 +0000
Manifest next update:     Thu 09 May 2024 18:16:19 +0000
Files and hashes:         1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: lqT9xn6QYqccC749eLSIBbP/0E8X9Qod/L57UHoDpuI=)
                          2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: Fsu/HK3XMCbKO/w8ZndR2l8l0xehLMWKk/qGPWPuAq0=)
                          3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: 39mX3IX9pYMGhg+lAltH04+RClycrIMLf8tSBKfKxMQ=)
                          4: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: WWDG7mQcCO6CJmDovWLKgavVqiKSslPPV3ShGqBLRuI=)
                          5: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: NA7MbbDRUSBxV3PCs31niXpj8WSKsRA23B+v15PLDy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 18:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3924 (0xf54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May  2 18:16:19 2024 GMT
            Not After : May  9 18:16:19 2024 GMT
        Subject: CN=6633d873-c2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:ae:db:a6:fa:89:28:bd:5d:e3:1e:78:69:
                    2a:69:38:32:f7:c5:fa:39:6c:87:6d:11:b8:bf:f8:
                    4a:bd:e3:e5:e5:25:61:fe:f8:4c:0e:0f:c7:e6:57:
                    1e:fa:4a:f1:45:9f:06:ec:8e:b4:b4:b0:fd:a3:be:
                    fa:18:74:d7:f9:78:c8:a3:6b:37:a1:e5:c3:2d:2f:
                    d5:5c:56:0c:e7:a6:f1:71:ae:20:f0:3e:df:25:8b:
                    69:40:8a:8f:f4:f2:c5:18:be:cf:8b:de:6c:07:91:
                    42:5f:a6:d8:c7:3f:e6:a7:f8:e1:65:01:e8:68:2b:
                    82:bd:55:22:40:10:bd:1e:6c:5c:82:c7:1b:0b:eb:
                    d7:63:33:1e:89:b2:7f:9b:3d:22:5a:8c:b3:c5:41:
                    d6:49:c2:db:34:46:82:67:46:4d:d8:d3:ef:42:a3:
                    68:0f:4e:86:ac:69:68:6c:11:10:a2:e3:59:d9:8e:
                    68:06:d2:3a:f5:b2:b1:dc:93:fd:da:83:49:9f:95:
                    79:4b:8c:4a:1e:53:bd:54:95:93:16:96:db:b3:e4:
                    4e:88:f6:f4:e3:65:0c:02:5b:7d:66:2d:cc:99:92:
                    83:52:f7:1b:32:93:a7:bf:88:c2:7f:e4:14:01:66:
                    41:30:f6:76:08:d0:25:70:55:6e:16:0c:90:ee:21:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:3F:2F:E8:27:E8:0D:D9:3E:88:D8:08:05:B2:42:35:29:F7:7A
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:85:86:4f:d8:5d:6a:b4:4a:16:1c:9f:08:33:ab:03:07:
         02:f0:f3:2d:20:dc:65:3c:ef:0d:ac:a5:31:ab:d2:3b:e3:35:
         7f:8a:41:82:40:3c:d7:47:3a:44:e9:91:8b:0d:44:3b:46:6c:
         88:81:45:b0:5e:58:d1:7b:aa:b3:cf:81:a5:e2:98:1d:26:ea:
         e5:d9:0b:b4:b1:9f:9c:9c:9a:a2:5a:13:63:33:e7:77:c5:0e:
         f4:21:4f:c3:95:65:c6:e9:ca:3f:14:8f:cf:27:d1:24:53:5a:
         ec:72:7f:e8:da:ae:7c:47:d0:4a:03:92:1e:59:6f:9e:78:44:
         14:15:c1:c5:90:3f:93:10:05:2c:f8:2f:9f:7d:e6:34:94:49:
         a9:b0:9c:b4:e0:dd:d7:8d:6e:81:93:35:9b:2c:55:ed:c4:0e:
         d8:c1:90:6a:9c:7f:e7:51:70:35:48:27:47:56:e5:19:15:2b:
         ba:59:cf:8f:85:3e:90:3a:99:47:52:4c:94:63:32:9d:51:aa:
         cd:9a:73:7b:92:e3:ab:85:4a:d5:28:23:c3:a4:11:93:ba:42:
         3a:54:63:d4:c1:35:47:db:61:f6:09:10:87:7e:8a:b6:ef:13:
         91:0e:d2:bd:7c:2d:6c:28:d6:3e:9b:2a:06:73:42:dd:4e:7b:
         2e:73:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:40 2024 by rpki-client on console-ams.rpki-client.org