Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
File:                     F6Zubv3tEF6BIZCZBTal32A7qA4.mft (raw, json)
Hash identifier:          6/RGGv/5vo/wJKBiBDRymTje6i/Bk9OJZo4sW/SL8Sw=
Subject key identifier:   6D:CA:B7:B3:00:DF:0E:15:EF:E0:05:95:0B:0E:0D:78:01:28:1F:70
Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
Certificate issuer:       /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
Manifest number:          3E
Signing time:             Wed 15 May 2024 08:19:29 +0000
Manifest this update:     Wed 15 May 2024 08:19:28 +0000
Manifest next update:     Wed 22 May 2024 08:19:28 +0000
Files and hashes:         1: F6Zubv3tEF6BIZCZBTal32A7qA4.crl (hash: SD8XGCsgZV0vuuLWUAnlByaEseGWjpfRE7G1yGxxf4Q=)
                          2: BC75F7EEB69511EEA0196A79C4F9AE02.roa (hash: kkdAlFSE+tCHqDF8THqrdDK9DXb0r2SRnzjT7LJ3/GM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
                          rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 08:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
        Validity
            Not Before: May 15 08:19:28 2024 GMT
            Not After : May 22 08:19:28 2024 GMT
        Subject: CN=66447010-8d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:7e:7f:74:b6:fe:db:fb:58:0e:12:0f:a2:
                    a2:81:a9:23:9e:b7:eb:12:4f:62:0b:f3:6b:95:3e:
                    2f:f9:3d:15:70:f9:79:84:86:a6:95:b8:5b:2b:12:
                    a8:c8:6e:c2:aa:fc:f0:8f:5e:90:62:5a:8d:ce:2e:
                    c0:43:d9:86:d1:ba:06:ab:4c:74:09:53:36:0b:b7:
                    22:aa:31:7e:05:34:c2:85:eb:7d:77:de:c8:e3:c5:
                    b2:c7:1b:3f:05:e7:db:49:0b:85:79:4a:9a:0e:2a:
                    97:79:90:25:96:b2:84:25:31:1f:94:73:93:de:5b:
                    09:0c:b3:d9:16:72:bb:2d:cb:c6:07:8b:4e:16:55:
                    18:f4:ed:a8:aa:ca:76:f4:aa:12:60:b8:c7:b9:02:
                    e4:29:29:63:11:f4:1b:38:28:44:de:22:62:87:bc:
                    16:27:15:bc:44:db:2a:e9:99:7b:e0:62:04:39:b1:
                    54:ed:d7:6a:87:50:bb:38:0f:4f:b4:94:6b:7a:51:
                    d7:cd:a4:66:1b:d7:24:60:08:98:f5:6c:2a:66:6c:
                    a4:30:75:1a:66:12:48:12:6e:c9:5a:6a:f2:6a:bd:
                    a2:2e:8f:9a:32:cc:44:fe:f9:39:bf:ec:6d:29:85:
                    a2:b1:a9:dd:7b:37:b4:9a:5f:94:c2:3d:26:fd:74:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:B7:B3:00:DF:0E:15:EF:E0:05:95:0B:0E:0D:78:01:28:1F:70
            X509v3 Authority Key Identifier:
                keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:91:84:1c:42:a7:fe:48:0c:90:92:db:9f:4a:3f:95:df:73:
         3a:26:71:f9:de:45:b5:5c:f9:9d:89:83:92:79:8d:a5:2d:28:
         ad:39:1d:f0:81:e0:26:9a:0e:1a:1a:6a:7a:7f:31:c5:f2:a9:
         86:c6:1b:1c:2d:fc:11:0a:8a:d5:86:a6:1c:96:09:1e:59:c6:
         ae:dd:42:b0:74:97:a1:29:11:35:27:ca:f7:e2:03:98:d6:1a:
         86:d8:b5:d1:8e:15:b8:2d:bd:54:93:37:d8:82:08:54:cc:fb:
         26:62:48:fe:c3:37:45:6d:ce:fa:92:97:aa:aa:08:93:ec:85:
         6e:32:12:d7:bf:88:8c:98:d4:f9:0d:8e:1a:fd:6a:0c:2c:10:
         3a:28:fb:7a:81:07:2f:2c:b0:8a:64:c1:7f:cf:eb:ff:be:db:
         90:e4:9a:98:0e:f4:90:eb:77:74:5f:a7:e5:4b:c0:67:49:17:
         7f:56:b8:3d:31:e3:02:33:0f:3b:dc:01:bc:c0:c5:74:48:d0:
         80:c9:33:ab:e9:3e:92:41:32:05:1a:df:d1:83:73:c7:22:3d:
         2a:3b:ce:9e:6a:5c:9a:f2:92:21:6f:22:cc:09:a2:69:96:de:
         58:c3:6f:cc:37:d9:b2:59:ac:99:2f:77:08:6c:49:1c:01:c7:
         f7:06:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org