Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          TK6/bBarrKtIXsIF3XkU4lHLd6bVXM4jWcNSY15tohc=
Subject key identifier:   79:56:01:DF:F3:AD:61:51:18:91:F0:8E:27:C2:CB:1C:EA:89:5D:4D
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          4C
Signing time:             Sun 19 May 2024 08:08:51 +0000
Manifest this update:     Sun 19 May 2024 08:08:51 +0000
Manifest next update:     Sun 26 May 2024 08:08:51 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: brUuqnbbyRuC2uzQNdpbItQ34oenAny+ZDfWCGZ45MA=)
                          2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vVNH40XtkiHAzgaJbll3kToyBC/aui+ZXTdh2wT62KA=)
                          3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 02yX7wylzSvAqODHOOq2bhEVbO+mgUt1nCgsJsh9nWQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: May 19 08:08:51 2024 GMT
            Not After : May 26 08:08:51 2024 GMT
        Subject: CN=6649b393-3b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:f9:6b:c6:a2:03:07:45:ad:da:22:32:6f:
                    e8:4c:21:30:a8:22:59:b1:1c:84:e7:11:3d:cb:f8:
                    fd:69:1b:a4:26:9f:3e:50:d2:06:3c:30:02:b3:d9:
                    c9:23:af:3f:4a:a9:d8:05:6d:eb:d4:b1:2e:e7:6c:
                    65:6d:13:db:dc:0a:4c:0f:4c:47:25:84:6c:2a:a8:
                    99:d5:60:23:3b:24:62:a8:8d:3a:33:22:58:21:1e:
                    20:14:c2:b6:ee:14:68:b1:5b:69:15:e7:75:33:6a:
                    3a:f9:01:24:d0:ef:39:24:42:bc:2b:15:1e:76:f7:
                    e1:09:87:02:cd:b7:c3:96:a8:cd:a1:4c:e8:7f:bc:
                    f9:71:8a:1d:31:b9:8b:ac:94:05:04:6a:46:a3:a8:
                    55:73:0b:51:7a:a4:35:31:50:a8:30:ba:79:9c:a8:
                    20:6e:77:25:8b:b1:c8:1d:f4:d4:47:cf:41:85:29:
                    f2:cc:59:b3:d5:43:c8:e4:42:85:6d:48:38:8c:b0:
                    b4:11:c2:d1:15:c9:c4:c5:7c:33:1f:24:55:d0:bd:
                    7c:86:4d:5c:51:e5:99:46:a7:35:cc:41:c0:e7:49:
                    4f:7a:72:83:9f:d7:c8:6d:f7:61:d8:ec:10:27:04:
                    70:23:ba:32:84:11:ab:af:56:9a:a4:cd:90:e1:38:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:56:01:DF:F3:AD:61:51:18:91:F0:8E:27:C2:CB:1C:EA:89:5D:4D
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:cf:85:8e:80:55:23:ce:7b:98:ac:6d:e1:9d:37:cd:c6:
         3a:3c:c8:fd:23:42:4b:01:8c:b3:08:0d:c9:a9:2f:bf:43:dc:
         e1:72:01:18:3e:50:7f:0f:d0:b4:6c:ec:48:b9:36:3c:62:fd:
         32:cd:97:50:6f:5e:2d:8a:da:ef:cf:72:cb:35:dc:8b:a0:70:
         b9:a9:d1:45:d4:e9:61:39:4f:5d:5f:c3:66:32:c9:0b:cb:89:
         68:f1:5f:3e:9e:77:1c:6b:74:db:64:4e:eb:5d:ba:ca:94:83:
         37:a4:1f:6d:0d:eb:9b:ef:ab:ad:60:ed:4f:07:b3:e7:38:0b:
         2d:44:7d:41:8b:c1:45:e0:71:0d:02:41:0c:a9:6b:c2:e8:91:
         98:69:0c:4f:30:fa:7b:13:25:23:82:1f:2a:c3:50:56:e2:63:
         2e:d0:f7:5c:1c:be:1e:9b:e2:96:80:28:7a:6f:00:29:4b:cc:
         cd:44:e9:06:30:9a:0f:bf:03:53:20:e0:2c:88:03:dd:88:35:
         4e:a0:55:a9:eb:f9:c6:b5:c1:07:32:a3:e1:8c:86:97:80:54:
         1e:49:df:39:95:14:39:d7:8f:20:34:0a:30:90:35:44:5f:b3:
         25:bf:52:a2:e4:f6:ac:eb:c4:63:cb:c4:0d:03:de:01:5f:64:
         62:5c:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org