Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          ZqAiMZCZynNO0U2aWq/Zwm0KyhCUgoA6KhX7hBQS3CA=
Subject key identifier:   C6:9E:57:49:68:C1:14:AB:F8:50:35:E9:59:F5:35:6E:A1:BF:F4:B9
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          72
Signing time:             Wed 15 May 2024 07:33:14 +0000
Manifest this update:     Wed 15 May 2024 07:33:13 +0000
Manifest next update:     Wed 22 May 2024 07:33:13 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: 3zFkpAPM02X6mzDw8TzxnA3SqAO1OS0IvRkluCVMRbs=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: bTfweIvY+y3ZMZkCz6Q+cwWd3fi+pjSC/fbiiQ6DHT0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: May 15 07:33:13 2024 GMT
            Not After : May 22 07:33:13 2024 GMT
        Subject: CN=66446539-25df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:99:ab:7e:dd:8a:d5:5d:d6:45:7b:63:61:
                    8a:82:44:6e:57:77:e6:d8:ca:e6:18:a0:a6:df:ca:
                    f2:24:91:b9:ef:89:51:d1:7f:40:d8:5a:4c:a6:c4:
                    be:b8:6e:0f:1d:56:e1:f5:30:a7:94:b4:21:40:b0:
                    26:d0:18:ad:20:6d:d0:39:8b:f8:b4:4e:bb:7f:ec:
                    23:ae:34:a1:0d:2c:2c:39:9f:86:f1:c1:e8:bb:4d:
                    34:95:b7:ac:1b:83:01:b5:08:05:7f:ea:9f:e3:62:
                    29:12:d4:22:f4:bf:ce:99:3b:36:39:ad:b9:c4:24:
                    27:ad:80:2e:97:69:3a:ab:d8:67:40:49:30:d0:7f:
                    2d:a0:94:fa:86:05:b6:50:75:9e:15:db:10:ea:12:
                    1f:15:8c:98:0e:97:55:be:96:35:5c:1b:ab:88:17:
                    a6:c2:62:37:2b:d5:18:13:a7:47:4b:40:02:49:46:
                    ad:37:b4:f7:e3:9f:7d:b9:83:59:d5:0b:3a:c4:85:
                    b4:bc:ab:31:d1:76:d3:0b:1c:0d:d8:1b:23:d9:bc:
                    e5:e7:80:74:48:5e:e9:b5:fb:eb:14:cd:ad:5f:30:
                    c5:8f:44:18:b7:ae:a8:9e:5e:bd:07:df:ae:6f:e5:
                    e7:c1:4e:56:05:4a:ca:3f:c2:19:a7:3c:dc:26:11:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:57:49:68:C1:14:AB:F8:50:35:E9:59:F5:35:6E:A1:BF:F4:B9
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:64:6a:43:f5:99:7a:ec:f5:62:46:94:10:33:46:48:fa:6b:
         f6:3d:0a:ea:25:13:5b:40:b5:37:f9:3e:69:53:cf:e2:bc:6c:
         78:31:96:90:1f:66:ac:93:7d:1a:65:96:13:40:cb:f7:3c:e9:
         95:a0:05:22:d5:cd:7b:72:d2:a5:bf:83:86:5d:cf:d0:5a:4f:
         0b:93:c6:a0:f7:44:60:0a:38:0a:9e:9e:13:57:f5:81:05:d0:
         1f:44:6b:aa:20:a5:95:b1:09:7a:f1:53:32:4b:f5:34:55:dc:
         33:82:c3:08:55:e0:4e:47:50:86:54:cb:00:2e:85:30:46:c5:
         c7:82:e5:7d:95:54:6b:1e:d4:87:29:c3:e6:38:c1:15:12:be:
         f7:d0:7c:6f:14:0f:e1:0d:1b:06:3f:8b:a0:23:44:2f:35:a3:
         ac:2a:07:66:24:a5:17:d8:cd:c6:9d:a5:e4:f5:9a:3b:e3:7a:
         82:b7:ad:9e:08:9f:dd:8b:6e:26:06:5d:2d:96:6b:5b:f0:15:
         fb:35:1a:a9:6c:bc:ce:be:00:a7:ec:1a:a5:d3:3e:18:43:d6:
         86:90:18:bd:64:dc:84:e2:f9:e0:28:90:1a:56:31:82:40:ed:
         22:d3:1f:80:f3:ec:72:9f:e5:5b:1d:95:24:7c:f3:d6:28:39:
         3d:cc:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org