Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          K63JCIcscRfHkRS8brJ62B6GF8NDTIZA62lXkPUpe6Y=
Subject key identifier:   8E:89:48:AB:EE:5E:DB:B6:ED:BA:46:90:75:C4:68:BF:B3:D8:EB:8D
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0940
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0937
Signing time:             Sat 04 May 2024 21:18:47 +0000
Manifest this update:     Sat 04 May 2024 21:18:46 +0000
Manifest next update:     Sat 11 May 2024 21:18:46 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: g38xQ4QEfg57fQ/ckqPfYgSTX1LlLFDaGOrOYwu4WbE=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: 3enXPqnFzMHU9dBHb+GMjG4Ixqaeyokw5ixU8F4DMjc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: May  4 21:18:46 2024 GMT
            Not After : May 11 21:18:46 2024 GMT
        Subject: CN=6636a637-2718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:3c:69:48:e3:47:db:e4:5b:ac:b4:e8:13:
                    b5:74:66:49:6a:c4:5c:8e:d5:ed:3f:f7:5b:08:8b:
                    45:0f:85:48:c7:0b:b5:7c:e7:56:c1:03:c0:1b:fe:
                    c5:3d:91:93:2f:70:38:a2:45:e4:79:82:cc:a4:53:
                    d0:3f:63:32:2d:a3:39:1c:ec:3b:05:93:74:56:6e:
                    ef:a4:3c:93:e7:09:0a:6c:71:17:9e:08:3c:0a:5d:
                    a6:c6:e4:25:a9:30:5f:55:6f:95:c3:e6:d7:a8:c8:
                    74:45:ce:fd:ff:99:72:89:67:8c:a3:06:58:40:5b:
                    19:32:20:d2:74:b2:8e:fe:52:25:45:2c:ec:e9:c9:
                    8e:7b:f3:24:65:86:69:4c:94:48:69:2a:7e:e6:94:
                    a3:2e:52:a6:76:67:db:71:93:65:17:1b:07:db:04:
                    3c:cc:4e:27:a7:bd:e7:90:4a:36:83:3a:4d:d8:b5:
                    dd:a8:0d:e0:68:95:c0:50:06:57:b6:9f:29:f2:17:
                    e1:96:50:8a:a5:5b:df:37:5c:00:37:a4:3c:47:d6:
                    ea:08:ef:d3:07:61:c3:20:07:18:5b:53:49:0c:51:
                    8e:ae:2c:e5:0e:12:d4:9d:7c:84:ea:14:e9:5a:31:
                    c8:e1:36:36:14:08:8f:d2:0a:6b:2e:42:6b:3b:10:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:48:AB:EE:5E:DB:B6:ED:BA:46:90:75:C4:68:BF:B3:D8:EB:8D
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:5e:d9:3b:c1:cd:14:39:ab:84:04:dc:30:63:61:5c:9c:
         e0:dd:8e:13:f0:de:93:2d:6b:64:62:c2:97:9a:a0:94:07:c8:
         a5:aa:79:99:71:fb:57:ca:96:0d:b2:61:e2:28:10:f1:28:64:
         7b:6f:ac:97:43:6f:62:1d:82:c4:cc:2a:d3:be:de:9c:13:5e:
         17:96:9f:1e:9f:13:be:e8:71:f4:38:a9:a8:f8:33:87:12:b0:
         00:fb:72:8b:b6:f0:46:29:96:55:1c:10:8c:a8:0a:59:3e:42:
         8d:e7:84:c2:1f:2d:14:6e:71:92:df:1e:e1:f9:ad:72:64:69:
         c8:5c:74:26:63:4d:93:21:4b:30:14:71:8d:5a:9b:f2:04:dc:
         37:f2:b1:69:24:b9:d3:80:26:14:57:dc:af:8c:4b:ed:b2:f9:
         36:09:f9:37:bc:7e:01:ec:11:76:fc:1a:2a:a9:2f:2a:e9:66:
         13:ed:f6:61:3c:d8:4a:55:94:d8:f6:2b:70:66:31:95:46:08:
         72:14:3e:2a:99:4b:54:00:e2:0a:6e:64:db:bb:16:87:59:af:
         0f:12:52:b7:cc:ab:3e:27:bb:e6:05:27:e6:92:63:7c:ec:fa:
         e3:b1:af:0c:f6:89:00:a9:45:7a:c3:ce:88:55:1f:bf:1c:7f:
         45:28:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:12:29 2024 by rpki-client on console-fra.rpki-client.org