Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          ejw+VaK0bTBz1xA3aFIDLOaiGXzp8Eo3DlIEL1PZ+nM=
Subject key identifier:   E5:75:0A:DE:C4:61:BE:7F:8E:00:73:EA:30:40:68:F2:87:93:E6:13
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       17B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          1787
Signing time:             Sat 04 May 2024 17:06:17 +0000
Manifest this update:     Sat 04 May 2024 17:06:17 +0000
Manifest next update:     Sat 11 May 2024 17:06:17 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: KOIYVjLt0mdcngI0MEgvw68AS4ZaneBJk8mgua8E4qY=)
                          2: 4EE90B48FFC211EC84726555C4F9AE02.roa (hash: sFiWTJceu4/UTiI1oXVofQeEavds19KYj/GxwrV5Vus=)
                          3: 8EF27886A20C11EDB188BD36C4F9AE02.roa (hash: htsN9VgrFaZQd5G3D34MctGMoDcdCqMktRJrAUeBacs=)
                          4: C6EB748CDE7911EDB5D88539C4F9AE02.roa (hash: 7fKwiSsMMoQHnQC31e8QRHapGRIqT8JN5lJamdleDyY=)
                          5: 7B9B345895F711EBB7B18033C4F9AE02.roa (hash: gXA0T2sm+aUntgiMZD6m5It+O3dDoCZcKAmnkESLmF4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6069 (0x17b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: May  4 17:06:17 2024 GMT
            Not After : May 11 17:06:17 2024 GMT
        Subject: CN=66366b09-88c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:2e:7d:c1:33:5a:11:40:c7:aa:0d:ef:f4:
                    b9:67:79:55:86:8a:ac:94:33:6e:7e:58:25:84:67:
                    37:a9:d1:c0:67:3c:ae:e2:60:65:ac:23:52:ab:2e:
                    64:0f:ca:52:97:76:02:46:22:ba:e5:5a:b6:95:2b:
                    96:cd:ff:18:e6:19:57:95:56:e7:d1:41:02:19:bb:
                    1a:db:ce:26:7c:e5:1f:2b:71:16:6d:cf:59:4b:23:
                    5a:1e:0c:c6:52:2d:a5:e9:8b:95:62:86:94:d6:b2:
                    11:27:32:2d:a6:ea:5c:6f:5a:83:c2:12:38:66:5f:
                    54:47:b3:2e:2f:a5:76:88:81:0d:d5:f8:4a:f8:e2:
                    7b:dc:be:05:36:48:00:27:1c:7c:bc:85:9b:09:01:
                    03:39:dd:a2:db:f2:4d:1a:f1:87:87:95:61:f7:6a:
                    72:32:f8:68:13:89:dc:19:ce:da:2e:66:a2:01:7e:
                    23:7e:db:81:29:71:dd:78:58:63:21:81:9e:06:d2:
                    92:15:4e:04:6e:5c:0b:a0:46:ec:43:a7:6c:1d:e9:
                    a1:fa:da:10:8e:48:f3:dc:26:a3:06:84:e3:d9:f3:
                    51:ef:89:7c:be:f6:6f:8e:16:4d:a8:5e:b9:50:5e:
                    89:d8:c5:73:58:53:17:6c:1b:71:ab:9f:5d:f0:8a:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:75:0A:DE:C4:61:BE:7F:8E:00:73:EA:30:40:68:F2:87:93:E6:13
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:12:56:10:ac:cb:b1:0e:60:e8:e3:ff:57:01:9d:82:7f:5e:
         fc:17:9a:ae:af:a6:26:8a:0a:f4:30:e6:46:6a:8f:51:99:1f:
         81:9b:e7:e4:8c:e2:39:9e:7d:8a:66:7b:41:df:ed:0c:03:c7:
         77:0e:c5:68:1e:d6:e2:be:8f:88:49:ca:68:5b:e1:bb:5e:22:
         f7:3a:8d:b2:29:16:e6:92:5b:70:3b:f0:23:ea:38:6a:6f:01:
         a2:f8:d4:dc:9c:ea:61:00:55:65:5b:59:95:18:f9:bb:a3:70:
         c8:28:8e:0b:e0:22:e8:30:cf:26:c2:e4:bb:89:97:a0:48:cb:
         9b:fe:c2:cc:5c:75:a0:f9:41:44:72:7f:c6:94:cb:ff:bf:6a:
         70:03:3b:97:84:83:f2:0f:9c:f2:0a:fa:b9:b9:ec:b2:ad:83:
         aa:a2:20:f5:99:22:f5:e4:5a:b7:b4:da:f3:2f:1d:53:34:81:
         3b:35:b6:43:db:4b:16:94:eb:9d:a8:57:65:7e:6d:fc:f3:e5:
         71:0a:4a:5f:ee:fa:08:c6:4b:ae:64:a4:e2:70:8d:8d:4a:3c:
         c6:56:74:5c:35:3d:61:1c:81:57:9f:57:6c:52:b1:f3:97:d2:
         45:03:00:d8:a1:31:d5:60:7b:5a:ae:d0:87:b5:40:20:f3:92:
         43:27:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:00:12 2024 by rpki-client on console-fra.rpki-client.org