Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File:                     PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier:          qq7O191QKSUM5Q6JjVlJEtBRwia5abQ49VSFDze+ZfU=
Subject key identifier:   39:81:AA:AC:8C:F4:9B:14:2C:2A:67:E2:08:EE:BF:0E:91:EF:BB:71
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number:          9C
Signing time:             Fri 17 May 2024 06:54:28 +0000
Manifest this update:     Fri 17 May 2024 06:54:27 +0000
Manifest next update:     Fri 24 May 2024 06:54:27 +0000
Files and hashes:         1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: qVL4YOBSugsM2bp/IYuE3G6ZeYOd4GQMSEMHgXGVKvw=)
                          2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: N70eLsG02B2BGwfmJV5uRw1PEf+XtzqxkTETI6ESL0s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: May 17 06:54:27 2024 GMT
            Not After : May 24 06:54:27 2024 GMT
        Subject: CN=6646ff23-e030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:c9:95:26:11:82:01:12:18:09:68:e2:f5:
                    85:3b:cb:e6:19:ab:12:3d:79:55:4e:bb:eb:1b:0e:
                    c3:19:f0:8c:d6:d5:34:d5:88:69:d8:28:29:61:8a:
                    16:16:70:b9:64:38:af:f8:19:75:07:db:c9:e2:89:
                    25:91:4f:30:97:d1:07:03:7b:c5:f8:7e:2c:7e:94:
                    58:3c:c2:dc:08:2f:56:a6:c0:55:35:2b:ca:8a:78:
                    77:3a:48:49:61:32:23:e1:de:3c:b8:82:70:15:dc:
                    80:3b:90:eb:30:47:d1:14:3c:db:f8:64:2d:f3:69:
                    81:ae:85:c5:80:3c:f5:27:b1:8e:64:72:83:83:34:
                    e0:17:5c:3e:f6:5e:b7:92:15:cd:a4:14:e1:f6:95:
                    c9:a8:a8:0a:f1:7f:a7:25:a7:3c:ff:ff:e7:65:83:
                    12:8f:5a:c7:0c:34:30:e3:ab:e4:02:81:ce:e9:f2:
                    b8:c1:de:03:62:80:50:92:46:b6:7c:66:63:09:75:
                    ee:40:62:36:3c:74:30:c2:20:91:57:c0:a2:b7:8c:
                    db:b9:d9:61:99:f7:63:8f:0d:fd:cc:1a:c7:00:1e:
                    ae:a5:01:1f:68:37:53:1c:2d:7b:96:75:9b:b7:bc:
                    6a:84:20:66:6f:59:cb:1e:02:f5:6a:be:80:9b:3b:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:81:AA:AC:8C:F4:9B:14:2C:2A:67:E2:08:EE:BF:0E:91:EF:BB:71
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:cd:a9:34:22:51:d7:06:93:30:3f:f5:00:ec:3c:84:a4:
         c9:d3:2c:e3:d3:5c:20:08:d7:dc:4e:2c:9d:c4:dd:ad:35:e1:
         20:b9:ba:f4:0b:ea:0c:6d:fd:fc:53:07:71:96:ca:85:ab:30:
         4b:39:ee:53:44:a4:81:78:fc:99:bd:31:aa:58:cc:ff:53:d2:
         03:08:bc:6a:cf:ea:1f:2e:66:87:fa:45:16:ef:0b:fd:06:00:
         b3:23:64:24:be:06:64:6b:4e:76:d3:68:f0:e9:b6:48:3c:50:
         c9:30:1f:1b:40:e8:f0:a8:b6:6f:db:2d:86:6a:a4:3b:43:45:
         e9:54:1d:00:8c:84:1a:54:df:97:ff:10:d1:18:09:12:e4:50:
         2a:07:04:89:96:66:9d:dd:b0:10:14:fa:48:62:26:bd:d2:ca:
         20:8d:3b:a9:78:53:d6:12:f6:19:a7:08:12:3f:01:f0:8c:b6:
         2a:13:c1:e4:f4:ce:1f:ec:90:84:9a:bd:3b:8d:27:e0:9b:46:
         50:0b:be:07:ec:ab:0a:0e:e8:98:39:60:99:2a:3a:7a:3e:4e:
         fb:c2:41:1b:82:b3:0a:a7:96:4b:6a:e6:96:8c:08:03:01:90:
         10:bb:91:fa:e1:00:44:30:60:05:77:42:5c:5e:8a:01:bd:1d:
         d4:2a:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org