Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
File:                     dqogyiSmwuMoh20ATRMU4Rem59A.mft (raw, json)
Hash identifier:          oF58JpMWgrRWUkXH+e2DQJesDeB75jZ4N+LI4VqEOrQ=
Subject key identifier:   75:32:E8:F2:64:20:DE:50:17:59:C2:13:12:A4:9A:99:69:26:48:61
Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
Certificate issuer:       /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
Manifest number:          AB
Signing time:             Wed 15 May 2024 06:44:43 +0000
Manifest this update:     Wed 15 May 2024 06:44:43 +0000
Manifest next update:     Wed 22 May 2024 06:44:43 +0000
Files and hashes:         1: dqogyiSmwuMoh20ATRMU4Rem59A.crl (hash: n+um35kiGb111gZrCJyenXDcVwXaUltVk4YPACfGeyQ=)
                          2: 7083BABC100311EE8B670F78C4F9AE02.roa (hash: qRj9qjC/xBQUGI8EHmc6bdfw8u9noUxyDnXZDm0hnPU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
        Validity
            Not Before: May 15 06:44:43 2024 GMT
            Not After : May 22 06:44:43 2024 GMT
        Subject: CN=664459db-024a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:01:e2:44:2b:f4:81:20:1a:e0:3c:58:d8:
                    a5:f6:a8:3e:4f:ff:d8:f3:34:25:46:54:8e:fc:69:
                    43:32:de:2d:ff:96:13:ca:d0:f9:23:4c:11:71:1a:
                    37:e0:17:14:d4:b8:df:37:04:e2:dd:6a:13:5f:e4:
                    09:10:1a:fb:17:29:a4:6b:68:2f:b0:b7:ca:29:7b:
                    79:9e:34:75:d4:93:3e:98:84:d5:bb:52:31:f5:bc:
                    0f:9d:0c:2b:af:83:89:f5:31:fb:0d:39:85:34:c6:
                    b6:e5:5f:3e:23:83:e0:16:50:70:25:a0:01:5d:81:
                    c0:f3:63:0c:6f:c7:a5:f1:b3:52:9a:07:47:21:f7:
                    b4:61:4d:e5:58:82:8b:61:f8:33:9d:bc:7e:6c:e7:
                    3c:14:f5:38:15:61:8f:20:bf:93:55:fd:6b:e6:cc:
                    c4:df:2d:62:4b:85:2b:2a:f2:ce:65:30:c1:8b:76:
                    ce:05:a0:cf:e4:4d:db:4b:16:76:93:65:4b:fd:1e:
                    ca:a3:ad:ef:a9:1c:7e:8e:b2:c0:8b:a5:8a:97:7f:
                    52:28:ee:1d:fc:59:95:75:21:54:1b:63:75:92:56:
                    85:df:ae:77:c1:ae:dd:ed:7a:e1:6e:8c:c8:45:5f:
                    4b:36:5c:26:16:3b:8f:8c:34:9c:13:31:68:68:83:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:E8:F2:64:20:DE:50:17:59:C2:13:12:A4:9A:99:69:26:48:61
            X509v3 Authority Key Identifier:
                keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:0c:cc:55:74:7f:5b:da:1d:6d:1d:7f:b8:b9:33:0a:1e:
         9b:f1:ef:b8:a2:72:f7:51:25:17:9b:cc:50:25:8b:f8:f3:c1:
         41:4d:29:9c:04:4a:f4:b6:03:a3:78:45:98:79:63:18:eb:f2:
         57:89:9c:e9:29:9b:32:6d:11:33:8e:d4:b0:4f:44:d6:76:48:
         d1:a5:c8:ba:8a:4e:b6:9c:8b:a5:f6:06:70:2a:04:65:7f:e1:
         e8:dd:00:c5:07:4e:37:a6:aa:f0:cd:6e:00:0f:58:9f:f8:6d:
         4a:ec:69:a4:28:96:41:cc:38:25:4d:f3:f5:e3:59:1d:8f:1c:
         d0:c5:fa:a8:f0:f5:10:80:11:3c:78:be:4f:46:9f:5c:70:60:
         97:ed:36:88:7e:d9:0f:18:b3:97:5c:b6:81:1b:4f:ab:15:5b:
         f9:d8:f0:7a:3d:1b:d4:b5:e9:99:36:d2:35:c5:0b:23:5d:58:
         1c:93:2b:b7:e0:c6:6f:7a:a1:68:2e:99:8c:c8:5d:2d:b5:a4:
         3e:8f:06:4f:d8:20:6b:2b:1f:fd:a0:a5:50:34:06:3d:f2:14:
         dc:82:c5:aa:e3:8d:bc:9a:16:9c:8e:18:7d:15:2c:ee:34:a5:
         64:95:44:38:09:03:69:dc:eb:c2:b8:a5:ac:fd:98:60:d7:c1:
         0e:f3:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org