Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          BfIF49Xvtw7pz/79mQpKY8GMPDPUWVP6TDvvI0yqHEA=
Subject key identifier:   B7:88:C8:7C:97:06:0C:E8:0E:AA:13:D3:11:02:A7:32:7E:1E:90:42
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       06DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          06CF
Signing time:             Sat 04 May 2024 23:10:06 +0000
Manifest this update:     Sat 04 May 2024 23:10:06 +0000
Manifest next update:     Sat 11 May 2024 23:10:06 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: NGzHTP2eC5RjKdJONyn92QvS5RYy6txQraKhHSKshJQ=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: IzlO4PEZ6TJqN+vF6zxFN0seCjb2xtchcqkkRjxaWWE=)
                          3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: 1mef7sCeEgr8XHNcBiru4PpfGdJ6zV+Jcgq3KyvzOOo=)
                          4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: +e7sOTObNv9V4akgSfm53HPF/or0aAg4iIPUn3gQ2Eo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756 (0x6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: May  4 23:10:06 2024 GMT
            Not After : May 11 23:10:06 2024 GMT
        Subject: CN=6636c04e-e1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:eb:0b:4b:28:52:d8:84:f8:86:6e:42:eb:
                    c0:32:17:16:bb:86:c2:a5:14:28:db:d0:1f:fc:9c:
                    42:9b:2f:01:dc:0f:54:6d:8e:3e:f4:e2:ad:2f:ae:
                    98:38:75:d2:b5:f6:cc:98:2c:5b:64:6c:1e:62:08:
                    47:dd:39:34:e3:17:de:46:79:7c:77:01:50:d5:a0:
                    11:b6:53:c6:15:90:7d:a3:0d:8c:6a:a8:6c:e1:9a:
                    46:b6:b9:d9:ff:ca:b6:79:27:eb:48:25:cc:9e:07:
                    6b:bd:44:02:73:2b:26:b9:4d:f9:74:63:4c:38:70:
                    7e:ab:21:2e:ef:40:ea:00:58:c0:b6:1e:16:10:0f:
                    9f:e2:2a:fa:8c:00:b9:3e:27:80:3a:84:23:af:49:
                    cd:88:2b:5b:50:1c:21:cd:cc:85:a6:22:9a:ac:23:
                    37:02:7e:e1:ed:cf:0d:81:c8:c8:94:fe:40:fe:bd:
                    aa:d5:79:ee:db:0c:df:bf:e6:40:5a:64:36:cc:19:
                    5e:2d:61:5d:3a:5e:43:5d:21:e7:86:7c:eb:2a:4f:
                    6c:85:7a:ef:15:7d:e3:48:c7:6c:b9:b5:47:ea:da:
                    6b:ba:26:b8:e0:1a:af:55:1e:d1:c6:68:fe:d5:df:
                    a5:7a:25:11:f1:3e:24:73:d2:5d:46:23:56:96:e9:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:C8:7C:97:06:0C:E8:0E:AA:13:D3:11:02:A7:32:7E:1E:90:42
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:d7:2f:1f:76:57:d7:98:c7:c2:8c:ce:7f:a8:22:29:5a:
         7c:59:14:48:62:0e:3b:e3:2d:f3:00:1e:eb:db:c3:88:ce:f2:
         18:6b:f7:a5:06:18:e0:8c:46:6a:48:f9:87:00:9e:46:57:11:
         fc:91:74:72:2a:d9:97:65:96:80:67:5f:66:19:5b:2a:bf:06:
         7a:5c:25:7e:29:61:8f:4b:b1:4c:cc:78:e9:f2:ea:62:5d:01:
         c2:53:0f:26:a7:9a:ef:64:e8:21:8a:29:ce:94:49:2f:f4:fe:
         7b:ed:26:b2:5d:86:1b:ba:01:8c:a2:cd:f4:ce:a8:68:98:d5:
         59:8b:5d:12:59:a0:1f:87:69:a7:02:40:7f:39:e1:23:1b:c6:
         e1:85:da:67:63:c9:3f:bd:77:27:59:1c:d3:4d:3c:69:dc:05:
         0d:81:76:d1:9f:6a:e7:3c:27:65:8c:ff:ea:0b:fa:4d:b1:90:
         b7:1a:a3:5e:72:6d:0f:6c:f9:14:e3:d1:6b:ce:03:75:c7:e2:
         1c:2a:11:30:74:eb:c3:f3:d0:e5:24:b6:1f:96:85:32:05:b5:
         f1:4f:13:ad:eb:c5:bb:b2:a3:dd:4d:a5:6c:d0:13:1f:b9:bc:
         92:45:39:fe:2b:29:d9:69:38:6b:b0:dd:29:28:75:0d:cd:f5:
         b4:f9:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:12:27 2024 by rpki-client on console-fra.rpki-client.org