Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
File:                     _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json)
Hash identifier:          Sb9TEiroiAR8l8MrKlL8NAAjNlvyE+Vxqu95Kh0meTk=
Subject key identifier:   BB:EC:58:F3:98:C8:8C:63:56:4F:31:6E:FD:73:F5:1A:AF:F7:74:13
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Certificate issuer:       /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial:       04DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
Manifest number:          04D9
Signing time:             Sun 05 May 2024 01:29:36 +0000
Manifest this update:     Sun 05 May 2024 01:29:36 +0000
Manifest next update:     Sun 12 May 2024 01:29:36 +0000
Files and hashes:         1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: icKtoaUYsKtdFdOFlee4dkh3Femk9hHZWKxonVv/wyk=)
                          2: 2F7C5A70968A11EEB50D1D33C4F9AE02.roa (hash: c6B2dC71vukgugxo6KRUnXh+Li2n+oReFnnYRex0tlI=)
                          3: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: xFx4flF9B5xFNDxwtZ9Zt2tJRkn0sV8V9Biy9wnb7V0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
        Validity
            Not Before: May  5 01:29:36 2024 GMT
            Not After : May 12 01:29:36 2024 GMT
        Subject: CN=6636e100-0611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:1b:0e:f0:a1:d8:06:ba:f8:97:91:75:6d:
                    07:81:4f:06:cc:6b:00:35:f0:9b:c4:d8:e3:6b:a9:
                    2f:14:19:e0:26:4b:52:a5:b3:1d:91:28:6b:fa:f4:
                    ed:e7:a6:a5:87:5a:f1:af:cb:98:20:1f:eb:4d:6a:
                    f4:d6:8d:cc:a4:02:80:63:38:26:04:4c:e3:f7:9c:
                    4c:99:f5:7f:92:69:2e:8b:99:13:d2:b7:7c:2a:2d:
                    79:bc:33:cb:a4:93:ea:80:91:6f:c5:a5:c6:12:40:
                    61:14:50:64:05:62:69:28:d7:b9:75:07:59:a5:8e:
                    cf:d5:36:51:45:95:19:00:9d:29:42:aa:c8:b4:0b:
                    64:78:f8:5d:a1:2f:1e:cc:47:3d:2a:ee:e7:e9:10:
                    ee:33:23:44:22:60:50:3f:ca:d7:73:42:85:3f:73:
                    74:1c:d2:74:3d:f7:1d:e2:40:01:b6:60:a5:d8:af:
                    3d:80:02:ce:05:45:e5:b8:c9:99:74:c8:d8:45:d4:
                    cf:42:f1:03:ab:bb:0a:04:6d:86:32:4e:a3:1e:c9:
                    f0:26:55:66:68:79:b9:83:d0:7b:37:86:6e:89:56:
                    28:ec:5b:1d:d3:ae:09:7e:0b:98:24:5c:ba:d5:76:
                    e3:00:5e:7b:97:e5:17:0e:54:47:8e:9c:2c:59:4b:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EC:58:F3:98:C8:8C:63:56:4F:31:6E:FD:73:F5:1A:AF:F7:74:13
            X509v3 Authority Key Identifier:
                keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:bf:3b:29:e8:ea:c7:7c:f9:80:35:65:53:ea:1d:3d:dc:
         74:55:21:4e:95:8f:10:67:6c:6e:71:3a:10:33:6f:07:e1:99:
         d0:de:87:af:b9:d4:8a:1f:22:83:53:28:f5:ce:9f:31:74:e4:
         b2:f0:5e:ea:6e:38:e6:25:31:9d:b2:cc:7d:62:54:d0:4d:8e:
         51:c2:05:69:46:50:e2:cb:b6:91:7f:db:77:bc:c2:12:53:b4:
         d4:dc:2c:b1:d9:22:4f:37:b1:7d:9d:c9:9c:9b:8e:d6:f8:b7:
         0c:60:7a:a7:b1:06:11:c5:48:2d:1b:d7:e1:86:c2:92:67:af:
         4e:ab:4d:6a:eb:2b:e3:c1:87:ef:20:ff:fa:a8:73:a3:cb:e9:
         c2:c8:d0:2f:90:97:43:0b:74:aa:9e:fa:6e:a1:7c:71:b7:d1:
         b0:cf:bd:14:c7:d4:d1:66:71:e1:3f:ed:48:ec:fb:2d:22:d0:
         01:e8:aa:72:c0:61:1b:cc:91:43:3a:c8:7d:b9:58:4c:07:7d:
         0f:45:fe:15:ae:bd:e0:9a:be:ca:e1:c8:f0:38:fb:99:1e:64:
         7c:cd:06:c1:69:fa:c2:91:f2:d0:91:8a:68:45:2f:2a:2c:77:
         15:fa:52:ac:35:06:7f:ad:7f:bb:1a:f3:18:a5:e1:f2:78:5c:
         0a:51:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org