Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File:                     gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier:          6wOhH/0Bw/q4eegqNVLBHVyVmFX1w7BtKWaFGC/ZwX8=
Subject key identifier:   7B:18:70:81:91:52:A6:E6:C8:7F:52:8F:5F:FB:F0:61:88:93:CF:E4
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3E8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number:          3A27
Signing time:             Wed 08 May 2024 14:21:16 +0000
Manifest this update:     Wed 08 May 2024 14:21:16 +0000
Manifest next update:     Wed 15 May 2024 14:21:16 +0000
Files and hashes:         1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: KYvNAGrGl7zQOAXqlNlWaQHBqMK7CtZTo5pA/puWeKs=)
                          2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: hJcQdmJiW/x39cC+4FrZJ9eLSi77X0UjxpYt9Ltt0kg=)
                          3: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: LaQUt3uITCWbGGrq7B5P13l9POhouqu7zMDBeTVkmqk=)
                          4: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: fNsgTUHzpXKVp4vMklhbAG0A6cCm/Jq7Z0ItTN8ghXI=)
                          5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: jwuK5ePHrBaL7CXKlyKa94RXbU7x9vsd7Z/Ijd7Nwio=)
                          6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 33N7tjDoUIrlkQOzwlY2avxsB6ldtgIm+ihpWBf1Xw0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16010 (0x3e8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May  8 14:21:16 2024 GMT
            Not After : May 15 14:21:16 2024 GMT
        Subject: CN=663b8a5c-a268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:2c:dc:a0:3b:0a:14:ff:54:6d:06:e4:ce:
                    55:cb:26:8a:dc:f2:64:07:31:c2:6c:18:0d:5e:1b:
                    ad:b9:fe:90:6e:46:43:4a:03:cc:77:af:0e:4f:5a:
                    a0:59:a8:f6:f1:f8:f6:d2:3d:51:7a:b5:aa:0a:42:
                    c3:9a:1b:e8:37:f3:4e:0f:eb:b4:4e:74:47:5f:d0:
                    60:b6:88:55:c8:7f:ab:20:9d:c5:11:01:47:57:1c:
                    55:76:0e:dc:64:5a:f3:79:9a:e0:db:30:85:7f:a9:
                    a3:2d:42:86:a9:17:c0:f2:4d:3c:6f:e4:06:fb:26:
                    55:02:d8:2f:f9:36:6e:ed:9b:51:34:6a:2e:ea:27:
                    87:32:97:a7:be:09:76:10:33:df:ff:89:67:49:75:
                    72:dd:c6:a8:91:91:8b:0a:b9:b5:c2:61:6c:4d:f1:
                    d3:7a:57:2b:19:c5:d7:59:0a:1c:ba:75:33:7f:1a:
                    ca:37:0f:d1:2b:1e:3f:7f:d2:07:6e:57:7d:1f:d3:
                    8e:bb:5d:20:29:29:ef:97:60:af:7b:ba:3e:83:c5:
                    8b:64:4e:30:7c:1c:e7:e5:6b:da:d3:ea:d0:9f:5f:
                    17:6b:91:e5:29:d0:2a:81:cb:8e:81:d7:a2:5a:ad:
                    b5:c9:a5:2c:83:c9:2c:2c:24:54:96:95:aa:06:a0:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:70:81:91:52:A6:E6:C8:7F:52:8F:5F:FB:F0:61:88:93:CF:E4
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:28:32:ed:cb:63:3e:55:06:46:86:97:59:1a:7d:b1:02:
         b2:09:e1:e1:79:ea:3e:2b:c1:15:7d:c5:ba:2d:57:ef:3f:ba:
         d2:04:16:b6:5d:f5:65:6c:c8:08:4d:5b:92:e9:55:73:f5:23:
         a0:36:63:03:df:05:f6:69:a8:22:c5:77:ae:3e:7f:fa:0f:e8:
         db:1f:a4:1e:39:db:ad:a6:28:0b:61:da:0d:a2:94:8b:b6:63:
         3d:4c:55:39:8f:33:0f:71:b1:53:e8:29:6f:84:71:4b:ae:b2:
         3f:76:96:bc:81:96:49:f5:23:d9:1c:0e:5d:0b:0b:7b:dc:51:
         d9:ef:00:e5:70:20:b0:99:83:70:7f:57:05:e0:97:08:1b:22:
         91:0f:2d:93:39:b7:22:cf:08:4f:d5:ef:a3:00:93:6a:9e:67:
         b3:eb:ca:f3:d5:a4:d5:5a:c6:e7:40:f7:96:9b:53:be:34:16:
         1a:fb:22:bf:af:69:f9:38:4e:c5:8a:b0:98:f0:2e:b1:38:18:
         b9:75:ae:4f:16:46:f8:c7:9f:c8:c8:a9:b1:54:73:51:e2:d6:
         96:06:1d:37:56:20:32:30:a8:9d:ce:74:b1:0e:57:31:a2:1c:
         63:49:4c:61:c2:df:58:fd:fc:46:69:bf:f9:cb:6d:b5:52:23:
         34:bc:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:01:19 2024 by rpki-client on console-ams.rpki-client.org