Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File:                     5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier:          1LrlX1JVf791Rwo1yjYr0rOCaCcqeBmf1TiWHHqYW3M=
Subject key identifier:   EE:EA:19:DF:18:4C:08:2B:92:66:41:4D:76:8F:CE:EE:71:9D:FE:A9
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number:          B4
Signing time:             Fri 17 May 2024 07:06:45 +0000
Manifest this update:     Fri 17 May 2024 07:06:45 +0000
Manifest next update:     Fri 24 May 2024 07:06:45 +0000
Files and hashes:         1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: nfMb/dh6Pjfw1csq7d+ozDHs1ydVZG54cdJM/+eQ21o=)
                          2: 3300A8B0FBB911EE8D1F0F3AC4F9AE02.roa (hash: 2NDH6WSLRffSE57lRIE3IsFmyH//gcFvd6rSRXgCmgE=)
                          3: FD02F648C0DD11EE93560678C4F9AE02.roa (hash: QOcxCXaE5l3rLTsAPbmde9U5cqBVyell/5zMPhTwNWs=)
                          4: E4F793820D0F11EFA952D612C4F9AE02.roa (hash: OqzM42QXXFH2NckefeYA/OPzFySgAqDxSFM4hp52Nbc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: May 17 07:06:45 2024 GMT
            Not After : May 24 07:06:45 2024 GMT
        Subject: CN=66470205-c4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:42:3e:6e:6e:e6:9a:4b:d3:9e:24:9f:33:
                    6b:b6:1d:cb:ca:7f:e5:13:cb:4a:3f:f7:0c:d6:96:
                    35:3a:fc:e5:9b:91:5f:fa:7e:71:09:b0:b7:b8:f2:
                    42:ef:31:de:01:21:9e:cf:24:72:ef:af:ce:cb:f2:
                    bd:32:c1:ef:3e:34:36:2d:16:c3:3a:e1:ec:60:f2:
                    52:ba:b3:5e:16:fe:23:37:17:ce:5a:0d:d0:51:0a:
                    e8:fc:6e:f7:91:58:4a:ad:10:08:b3:cf:a4:9d:55:
                    5c:73:fa:e8:c0:5f:94:a4:04:64:d6:8f:3b:e5:84:
                    59:17:4c:f6:80:85:cb:af:ff:25:0d:2f:92:2f:6d:
                    02:9e:24:8d:88:8d:51:30:41:3b:2c:ef:b0:bf:5b:
                    64:89:a9:e1:55:66:e0:9c:02:a4:c1:47:7e:b3:ba:
                    fa:f4:90:4d:8f:ed:33:43:01:15:78:2c:5b:38:5e:
                    46:c8:70:62:5e:5e:93:a2:35:4f:ba:0d:20:07:70:
                    39:b0:41:ec:da:ae:a6:21:9f:33:58:7a:32:20:e6:
                    e9:3a:15:3b:00:f9:56:5c:70:8a:a4:fe:cd:c8:d5:
                    2f:d6:77:84:bf:ec:a9:46:48:3e:e8:f0:61:d4:90:
                    f5:0e:00:c1:5a:7f:f4:db:63:f9:dc:09:bd:19:15:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:19:DF:18:4C:08:2B:92:66:41:4D:76:8F:CE:EE:71:9D:FE:A9
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:13:af:10:91:b0:58:75:2c:0b:48:03:04:ca:74:ae:a8:
         66:f6:0b:4c:31:0c:c1:e0:31:48:28:e7:89:db:4d:e6:38:5a:
         49:f1:ad:cd:90:5e:10:24:bc:e1:1c:ff:a4:ca:4a:0d:df:fe:
         fe:ac:f2:f3:dc:98:8d:4d:7f:df:39:50:27:e7:dd:b0:41:4d:
         bd:ff:b2:6e:53:cc:62:c3:e6:63:95:f5:2c:c3:a4:a6:1d:5b:
         f6:cc:18:6c:1e:05:a7:26:34:73:92:9c:24:0b:00:c9:d8:a9:
         54:4b:a1:d1:c3:5b:fa:b3:fc:4f:9b:6a:cb:b6:90:a2:b9:a5:
         ab:cb:9e:f4:a5:ef:83:59:f6:03:04:7d:d3:92:9c:29:af:09:
         5e:8a:e0:fe:c5:b7:19:8d:43:63:ea:84:b4:ca:7a:28:f5:cc:
         cb:2b:15:d0:2a:5f:bd:6e:7c:80:66:5c:9b:03:93:d5:8f:2b:
         d1:8f:1f:84:2f:95:1f:c7:55:7f:03:d5:1b:9e:5d:40:3a:01:
         79:67:f8:dd:f7:db:0c:a4:17:70:01:3c:47:44:13:10:dc:f3:
         b0:18:fa:81:92:f7:e0:8d:30:c4:48:d7:76:b9:96:a2:d1:e7:
         9d:c0:9f:d2:b0:01:92:9c:2f:d5:e9:cd:01:82:46:22:90:8c:
         60:b7:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org