Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File:                     oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier:          Migcx1Cbvg091Zt0o3rAddZW2/90UcMHO/IK5qIuzaM=
Subject key identifier:   9B:EE:A0:68:5F:EF:57:9C:E3:AD:20:79:9A:82:57:5E:C2:08:84:B4
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number:          02E9
Signing time:             Fri 03 May 2024 03:25:46 +0000
Manifest this update:     Fri 03 May 2024 03:25:46 +0000
Manifest next update:     Fri 10 May 2024 03:25:46 +0000
Files and hashes:         1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: whHH2QzRTmtwQYg4SRgVPfsbXXLV9CxLcbBJaTaTt00=)
                          2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: WpCfV48MxVsvrCFja30wG20lXynE945EHFIKLttGYCo=)
                          3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: yNU/Mr3/TjvBPBhCoBid3sjZxAp8GNMAmJbEuw8jfTo=)
                          4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: Vwxx6xhJaUHJItb6aa+WAVKu+FlRyk7MdIYaendPGXU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
                          rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: May  3 03:25:46 2024 GMT
            Not After : May 10 03:25:46 2024 GMT
        Subject: CN=6634593a-1c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:cc:64:55:6b:70:38:cc:dd:a7:52:20:55:
                    6b:ae:f2:81:e7:75:55:4f:25:43:d3:6d:71:58:81:
                    20:c4:87:32:40:6e:f0:bd:03:5e:5a:70:ee:56:64:
                    78:c8:91:60:98:29:ce:6b:0b:ec:b7:d6:0c:74:71:
                    77:8f:7c:aa:e0:b5:d9:02:d5:d5:4a:53:37:52:55:
                    43:7b:d2:fb:17:42:ad:26:ca:72:77:4f:eb:9a:1b:
                    3b:9f:4d:01:5f:57:f2:0e:eb:63:6c:86:65:ac:25:
                    32:a9:54:c7:28:bf:0d:07:04:81:55:cd:5b:32:a5:
                    f1:86:6e:bd:5c:80:d7:21:4c:b9:66:58:5f:dd:fe:
                    f1:e8:c4:9e:2e:4c:e6:fd:37:9f:a6:b8:0e:23:8e:
                    35:54:f1:2c:c6:dd:0f:05:34:5f:9a:05:84:ad:1b:
                    35:f0:93:44:bc:1e:56:0e:54:59:6c:2f:fb:bb:0d:
                    21:a6:73:d4:c2:64:66:ab:75:9f:37:c7:d1:c6:5e:
                    d8:5d:d3:34:db:f0:86:fe:2d:8e:8c:c9:da:c9:20:
                    39:78:af:d0:d1:72:f5:f9:12:20:b7:8a:43:84:7a:
                    61:d8:6b:9f:88:96:ca:cb:f5:21:ac:69:cc:52:e2:
                    5a:91:5a:8e:ea:74:e8:4d:ad:a2:01:26:ea:a8:35:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EE:A0:68:5F:EF:57:9C:E3:AD:20:79:9A:82:57:5E:C2:08:84:B4
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:d2:4e:ae:8b:26:02:91:e0:7a:11:2d:6f:47:7a:3e:8c:
         f4:c8:b6:f2:a2:ff:ae:bc:31:63:b0:c3:7a:36:88:b4:8e:88:
         ef:40:a1:26:b2:7c:3c:82:05:50:34:7b:30:55:37:a1:79:30:
         f8:d9:31:29:fe:a2:f3:ca:92:4a:5a:61:c5:03:cf:9c:f8:ba:
         3b:ba:bd:d3:e6:75:78:db:88:b8:d2:32:b0:1a:4a:55:14:06:
         f5:91:07:43:d5:85:55:7c:b2:87:56:82:ba:34:f1:45:fd:80:
         a0:f4:44:8d:f0:70:e3:6c:0d:5e:fa:25:51:31:e9:d9:59:e1:
         34:24:43:5b:f4:3b:6f:86:37:cb:4e:7a:9a:81:b9:6b:dd:ff:
         54:c9:cb:0e:fd:ed:4a:86:98:4e:52:21:3e:e8:00:2d:24:7b:
         fa:54:a6:df:a6:76:7c:c4:c3:a3:78:e3:30:b1:cc:60:72:b9:
         ca:2a:f3:21:e0:5e:0d:ea:51:df:ac:32:dd:3d:98:2f:59:96:
         18:50:cd:91:6a:20:03:22:35:1d:e9:9f:14:91:c2:3d:a1:b4:
         50:ff:83:a4:b6:9d:1b:76:f6:01:9a:cf:78:0e:8e:f0:87:4f:
         88:9f:cf:d9:25:9e:4f:32:4c:98:39:a1:95:bd:e6:77:3d:59:
         72:4c:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:28 2024 by rpki-client on console-fra.rpki-client.org