Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
File:                     Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json)
Hash identifier:          EM0Ri00Aj4nodZ+tPyN+VVtzZAv9Oky+p1I33Ff2eLg=
Subject key identifier:   E3:CE:C1:C3:53:E5:CB:8A:DC:44:61:7F:2F:61:3A:CA:88:7F:68:79
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       0842
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
Manifest number:          083B
Signing time:             Fri 26 Apr 2024 21:42:32 +0000
Manifest this update:     Fri 26 Apr 2024 21:42:31 +0000
Manifest next update:     Fri 03 May 2024 21:42:31 +0000
Files and hashes:         1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: FXW20kLfB3FVuzaFa+XjcpKDTpOwzcBdG7ALj/OG6Uo=)
                          2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: dDoSbEUF8Pm06HgsKt60HfaN4PW2+PV/q0hwIz0fcG4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: Apr 26 21:42:31 2024 GMT
            Not After : May  3 21:42:31 2024 GMT
        Subject: CN=662c1fc7-a0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:a6:26:2d:15:bb:96:d4:6f:b0:9e:fb:a8:
                    0d:c1:75:9e:80:66:50:af:fc:74:7a:f7:58:c2:eb:
                    89:c3:41:83:88:ab:dc:70:e7:77:38:14:8a:67:5b:
                    3b:32:b4:f9:7a:d1:db:b6:0c:f9:5f:74:71:00:c6:
                    eb:bb:2b:ab:f0:11:13:4a:3d:ef:bd:cc:86:e8:a1:
                    2c:35:fa:1c:e1:45:1b:a8:44:9c:0d:19:2f:36:26:
                    cb:85:70:6a:c2:ff:47:e1:6c:63:07:cd:05:dc:00:
                    8d:65:dc:aa:e6:49:3b:06:2d:f4:e6:f3:3f:38:8b:
                    cd:29:7b:ea:61:e0:13:87:15:7a:46:c1:20:39:3b:
                    77:f6:d5:6a:8b:8c:c8:0d:c3:ae:d3:92:e0:36:f5:
                    2b:f5:cb:a2:3b:50:fd:a7:1d:ee:4a:98:f6:ac:6c:
                    7b:00:3c:ae:07:5f:43:05:60:ae:e8:7d:40:ae:5a:
                    b3:a2:a5:51:b4:20:73:3c:34:19:6d:94:91:31:08:
                    1c:ef:e9:8a:ee:a9:8f:ba:af:a8:52:70:83:03:62:
                    75:ff:77:73:c4:38:9c:8b:20:e5:b9:95:f1:f8:ac:
                    44:c3:c8:37:34:a4:49:52:48:09:9c:fa:90:e2:fa:
                    cd:c3:b5:f2:64:dd:bf:a4:a9:b4:cd:7e:7d:81:98:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:C1:C3:53:E5:CB:8A:DC:44:61:7F:2F:61:3A:CA:88:7F:68:79
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:3f:ec:da:67:b7:b3:49:99:22:d9:27:f5:2e:b9:e1:51:
         65:eb:bf:fe:2e:1d:78:9b:f5:eb:b2:42:78:bb:4c:33:01:f4:
         8b:56:66:87:16:5b:41:c3:b6:7c:ab:35:bc:64:7e:0e:1c:1d:
         ac:ba:97:52:d3:04:31:c9:8f:eb:fa:f4:3a:59:73:87:f1:b1:
         46:61:f2:b4:24:0c:2b:ac:40:01:26:b5:fc:46:ed:22:ce:8b:
         52:9e:9e:91:02:4b:6f:89:ac:47:2f:28:15:45:f2:4f:ca:f8:
         e9:ab:c6:f4:7c:c2:d7:9c:f1:c3:bb:e7:39:cc:6f:0b:67:8e:
         e8:b0:84:3f:85:df:59:69:29:53:3f:df:e7:f6:f1:a6:87:ef:
         b5:79:24:64:7e:4f:7a:73:b5:f4:a8:72:06:60:00:11:ba:45:
         e4:57:13:d4:f3:44:69:a5:0f:2c:55:fa:44:97:5f:51:2c:db:
         76:df:7e:37:ef:6d:00:7e:c5:87:cf:55:46:3f:d7:d2:64:79:
         49:49:c4:72:d2:c8:9f:78:fa:ee:82:09:1b:23:d8:42:93:b0:
         21:c5:b3:72:72:78:f6:12:84:e9:e9:3d:b9:0e:6b:68:a7:56:
         81:6a:69:c6:dc:c6:3d:75:5d:3f:54:24:87:2b:f6:da:96:df:
         6c:ac:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:52:27 2024 by rpki-client on console-fra.rpki-client.org