Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
File:                     Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json)
Hash identifier:          zi8k7mRdrcPtwoqMPy8RUE1FGVx6l/2SWpd4JV954HI=
Subject key identifier:   00:E9:39:D7:C2:83:02:15:5F:40:59:3A:36:1E:83:A2:C7:F5:BE:D4
Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
Certificate issuer:       /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
Manifest number:          06FA
Signing time:             Sat 18 May 2024 22:44:00 +0000
Manifest this update:     Sat 18 May 2024 22:44:00 +0000
Manifest next update:     Sat 25 May 2024 22:44:00 +0000
Files and hashes:         1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: NswQf1rRpOEsoUSQacLRinukxRZWjMEs8q6Tj2qvmpY=)
                          2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: Slsgm/XyPWXddQe9wtHNCn3rxqpUrjHbTUoCYiCwnB4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
        Validity
            Not Before: May 18 22:44:00 2024 GMT
            Not After : May 25 22:44:00 2024 GMT
        Subject: CN=66492f30-c578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:09:1e:8a:82:c2:bf:6c:b6:73:a7:19:a4:
                    17:0d:31:5b:46:3e:a1:6f:fb:16:64:57:e8:e2:66:
                    71:69:20:02:d8:b3:4c:e6:08:ff:9d:2b:71:48:c5:
                    03:56:8e:88:6e:b7:62:60:e6:c4:c0:89:f1:e5:6e:
                    3d:44:5e:c4:74:cb:9a:f3:25:2a:a0:3f:39:5b:54:
                    6c:3a:54:e0:73:64:00:4a:c0:c7:71:dc:74:a7:c1:
                    65:f9:24:f3:e0:32:ae:b5:8c:ab:7b:d0:df:d9:49:
                    a3:e9:2d:48:c6:af:78:c7:d3:ce:27:bf:aa:8d:64:
                    74:8d:85:ad:53:b5:86:99:0d:5e:dd:61:8b:6a:21:
                    c6:41:14:78:5f:d0:a5:9f:45:bd:13:6a:90:49:39:
                    50:76:ca:c8:87:8b:0c:bb:91:87:57:0b:84:72:69:
                    fb:cf:44:d1:ce:85:69:4d:2b:27:24:17:48:f8:0d:
                    48:79:22:99:1a:fb:e6:f9:bb:1b:48:a3:88:4e:9c:
                    f8:7a:f7:4c:25:06:4d:82:21:c3:f8:68:3f:3a:ad:
                    6c:14:82:72:67:d5:3f:cc:98:7d:2c:f7:30:66:c2:
                    13:f8:11:81:4b:bc:7d:33:13:19:5b:bb:ae:23:0d:
                    a6:84:32:d0:0f:fd:3d:e3:14:f8:95:57:77:a0:4d:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:39:D7:C2:83:02:15:5F:40:59:3A:36:1E:83:A2:C7:F5:BE:D4
            X509v3 Authority Key Identifier:
                keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:4c:73:9c:88:00:c7:9d:03:47:1a:b7:4a:4a:ad:5e:d3:
         d5:6d:ea:a6:20:8e:0e:c1:0a:62:fd:87:b2:f8:4a:5b:1e:46:
         9f:5c:56:6c:c9:dc:9e:00:2c:e7:03:3d:7d:40:52:56:ab:06:
         54:92:38:e1:31:28:a6:f3:a6:d2:24:fb:93:ca:33:54:58:7f:
         09:95:b0:ac:6a:57:07:bb:75:70:95:60:d3:da:9e:cb:26:34:
         b4:8d:d9:dc:4f:e7:bc:97:80:0e:03:7d:6b:d8:87:81:33:c1:
         62:de:3b:7d:e6:99:80:b8:5b:c4:27:f9:b1:c0:7d:4a:82:7d:
         a4:87:07:4f:11:98:fd:95:03:3c:37:22:d5:58:a9:f3:da:68:
         64:bd:54:0c:75:e5:3d:6a:6d:a3:0d:3f:80:fa:c1:08:1a:81:
         3b:7e:ea:ff:18:14:77:6c:8b:b9:92:b1:f7:f1:ed:f1:ab:f5:
         a7:d7:f8:4f:7d:e4:d9:f6:c8:25:ee:25:c7:48:e0:9a:15:76:
         8f:8c:dc:8f:7f:77:93:39:c5:31:b5:54:dc:5d:a4:fa:db:3a:
         82:9e:f2:ca:90:61:55:e3:af:5e:dd:44:55:e9:67:69:e5:59:
         25:03:49:2f:bb:4a:8e:83:96:ed:55:fb:8f:5f:6a:c3:ee:d0:
         0d:ec:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org