Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File:                     99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier:          KiEyImScXqDxgCjiK8Yog6WfOHEeO4zLiqPIghidH5w=
Subject key identifier:   AE:0B:A8:DA:33:C4:F9:93:BA:F6:F1:F2:BF:6F:67:CC:8D:49:FD:84
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       19BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number:          1979
Signing time:             Thu 28 Mar 2024 16:51:13 +0000
Manifest this update:     Thu 28 Mar 2024 16:51:13 +0000
Manifest next update:     Thu 04 Apr 2024 16:51:13 +0000
Files and hashes:         1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: VkSt/pO1VFkAmCc6Io5/jFPGh0W5bl9mU2L8Pda1hh8=)
                          2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: nhktiXwJ7iHK3Wj/0sf6Qz2/HFfTQYtOEkm9kkgcpHU=)
                          3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 5jCFEGJ+y0/EFMvAjDtFKZiWoUrMwvqP5vPwW4FAMoI=)
                          4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: Tslvvd6A3vq5orEegc5BkWKMw7PNmLOCXJG/wdgxI+M=)
                          5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: RqTbvTVka6nvPutiX4Ns6fgYJ1u6NM4l42wz0rKhM7M=)
                          6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: p4TAw3awGqb1xN0F0p/GBdQga/I6VID2Xr7hbpSccuw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 16:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6586 (0x19ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Mar 28 16:51:13 2024 GMT
            Not After : Apr  4 16:51:13 2024 GMT
        Subject: CN=6605a001-19c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:b7:e3:da:7b:82:dd:11:91:5c:f5:13:10:
                    62:72:43:a3:50:46:e9:8a:52:29:52:9c:28:c3:86:
                    ec:f4:e7:4f:13:40:bc:74:54:cd:be:ed:19:92:72:
                    dc:57:b0:43:aa:a7:84:88:ce:4f:cf:bf:14:4f:65:
                    ac:ac:b3:21:7c:03:a4:b5:73:e5:1d:f9:f1:46:55:
                    f0:49:6b:76:7e:52:f9:32:c2:ec:61:81:88:4b:51:
                    fc:d7:64:a5:62:9e:0c:fc:b0:dc:f3:f5:73:4c:6b:
                    75:be:ef:d8:82:48:ac:a7:fa:67:56:db:1f:91:72:
                    a3:86:fe:06:a2:fc:33:0e:1e:c6:b1:13:68:d8:56:
                    67:3b:52:85:ca:20:86:06:9f:a6:cd:3c:e6:00:72:
                    61:6e:0f:7f:8b:c0:68:8f:63:fd:d9:4b:1b:17:66:
                    7b:a2:93:63:c7:19:74:aa:ed:fc:a5:9d:f6:e6:53:
                    3e:45:5c:69:e2:72:a5:af:40:aa:b2:d7:6e:fc:05:
                    31:14:fc:70:0d:6e:62:cb:2e:c2:0c:57:d3:2d:0b:
                    9e:f0:7c:ad:f9:5c:a6:e2:7d:a5:a8:13:b0:9f:d1:
                    f8:f0:be:1f:56:c8:d0:24:c3:49:9e:9a:53:20:14:
                    68:9e:01:f0:2b:d3:73:d0:79:d7:74:66:3d:1b:16:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:A8:DA:33:C4:F9:93:BA:F6:F1:F2:BF:6F:67:CC:8D:49:FD:84
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:47:16:00:e3:36:fe:16:e8:36:67:dc:fd:ca:e2:5d:52:81:
         ee:40:00:9f:6e:81:57:26:19:b2:90:6a:66:a2:bb:15:87:67:
         2f:0c:56:94:28:4e:7c:ef:6f:a8:10:c3:e1:d8:e2:53:47:c4:
         69:ad:73:f8:89:11:c2:3e:6f:a0:ae:9f:76:6f:17:24:be:d2:
         a6:56:64:30:b2:46:60:5e:ef:de:69:2e:95:c9:89:30:6c:49:
         46:10:23:4c:0d:21:cd:86:11:63:43:bd:e5:fb:96:9b:84:11:
         66:fe:84:43:3f:66:29:e2:13:00:a9:84:3f:0b:d6:d5:00:3f:
         e7:d2:db:e8:a7:d0:f7:a6:5d:5c:24:c2:af:1e:1d:f7:b1:24:
         38:da:4a:4c:da:8a:d8:cc:1c:c6:a3:0d:9a:4f:56:56:45:41:
         5f:7e:d9:a6:9f:a2:23:2b:d6:0d:cf:e4:7b:2b:94:a0:9e:73:
         78:69:61:52:ac:4a:cb:bb:bb:c6:f5:9f:8f:f3:65:ab:de:40:
         99:23:b3:70:15:f7:a6:79:a3:f8:f0:1a:70:f9:f3:b5:fb:08:
         d1:64:53:f5:cc:6d:fb:7c:38:54:13:74:d7:68:f0:05:0f:69:
         10:07:09:05:f5:60:a1:c0:80:88:7a:82:a6:1a:84:5b:9c:08:
         c6:0d:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:44:20 2024 by rpki-client on console-fra.rpki-client.org