Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          KK7rLB6i4zVtrN27T2JJuPUYtpSxQv0yKkrDf7txhKo=
Subject key identifier:   8A:4C:D9:31:99:6C:DE:E5:8B:44:31:7E:60:F3:F8:79:61:00:3B:D0
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          06DD
Signing time:             Sat 04 May 2024 23:02:52 +0000
Manifest this update:     Sat 04 May 2024 23:02:51 +0000
Manifest next update:     Sat 11 May 2024 23:02:51 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: fqV8VzaBLEvJ75LKNSvrQ6zPUuKgvTq8/mD5trVLIv8=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: 1YjhnpcwYRY3mJE3BgnRA4xtPMKkhOZTYS7bbBwFKRg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: May  4 23:02:51 2024 GMT
            Not After : May 11 23:02:51 2024 GMT
        Subject: CN=6636be9b-5a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:ca:6e:67:05:b7:c6:b8:0f:8f:7a:7f:35:
                    bd:d9:91:51:30:71:c9:50:9e:e4:11:06:14:46:23:
                    52:7a:29:95:6a:81:2e:b7:83:ee:61:9d:27:93:e6:
                    3d:d0:c2:23:21:8f:b2:1c:a8:d7:bd:6d:65:fe:39:
                    ba:79:73:05:48:1f:18:33:76:c2:f1:c3:7c:d3:c2:
                    51:01:bf:a1:5e:e6:3e:93:d8:cc:d3:d4:9b:e7:2c:
                    30:78:4a:e2:b6:25:bf:8d:eb:37:96:8a:96:93:59:
                    c7:c9:fa:74:0f:f3:92:9f:da:df:87:ca:e9:a9:be:
                    d8:8a:df:b2:93:30:28:a1:36:a9:8e:8c:ad:52:3c:
                    ae:d7:03:62:95:46:6f:68:69:f8:48:f9:cb:06:35:
                    ce:7c:2b:ff:c6:88:98:1c:90:b4:d3:02:02:c2:fa:
                    66:90:1b:2f:d8:0b:e6:f0:49:d8:a5:fc:19:d7:e6:
                    fa:09:f2:ce:60:f5:0c:b1:62:2d:23:9d:f3:26:00:
                    28:2d:1c:26:c5:c9:ac:27:cb:8a:2a:e6:75:e9:d7:
                    16:4c:28:89:32:18:81:7f:c7:3e:e7:ff:ed:c9:0c:
                    5f:13:1c:7e:69:6b:89:d9:b2:e1:37:48:ea:fe:7c:
                    1c:54:04:fc:70:77:44:2a:52:6b:b7:9e:43:ab:e8:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4C:D9:31:99:6C:DE:E5:8B:44:31:7E:60:F3:F8:79:61:00:3B:D0
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:91:13:af:19:80:18:d1:c1:83:d7:c4:28:14:37:57:50:02:
         00:d6:57:13:10:e5:88:66:f9:88:84:c7:79:ed:06:ab:be:6d:
         fd:79:12:27:6f:5f:6f:51:80:98:66:0f:0a:83:e5:b7:16:d6:
         24:7c:0a:e0:6a:e3:74:10:9a:38:fa:ad:42:b5:d5:df:e3:29:
         40:8d:b3:86:c1:6f:22:27:dc:93:93:03:92:df:5b:ec:9b:76:
         a4:9d:48:0e:a4:df:ad:d6:94:21:de:f5:da:ef:f0:1d:eb:ff:
         cc:5d:fb:67:7f:d0:c2:d0:89:54:c0:8d:18:ee:e2:7f:fa:98:
         d1:59:24:7a:0f:11:91:c1:9e:52:19:96:16:30:81:d5:91:19:
         4f:38:69:f9:86:00:75:86:93:7c:23:c2:7d:a2:a8:5d:06:37:
         9e:fa:61:4e:58:e0:49:0f:8c:46:ae:e9:3d:f7:5e:d9:25:60:
         49:12:80:18:fd:4c:38:69:fd:cb:94:bf:0f:45:06:1c:90:cc:
         c3:18:9f:ce:6e:a3:a4:29:63:45:94:a9:7b:4d:a4:85:96:de:
         ad:ea:5d:b2:d2:a3:4f:e3:40:ac:94:0c:bc:f8:ab:54:59:48:
         f6:33:1a:01:37:9d:1a:66:e1:bb:1c:75:87:b3:31:02:06:71:
         3a:3e:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:44 2024 by rpki-client on console-ams.rpki-client.org