Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          Ma1XzuaNSc+6SSFFnxetr7ufql3Fj9J+kqetkAf7A7U=
Subject key identifier:   A4:D6:28:25:09:A6:D7:F9:BD:37:8D:5B:5D:83:38:C3:E5:00:CA:0A
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0510
Signing time:             Mon 29 Apr 2024 01:08:40 +0000
Manifest this update:     Mon 29 Apr 2024 01:08:40 +0000
Manifest next update:     Mon 06 May 2024 01:08:40 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: aB7AGaEqmkEvpdGMcpR+UMAt1BD1kegqtZC9THJFW+I=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: oXt1DPXjWPZcWGx2zmUdD8F+oWdjv59d4gp7Tb8aLTY=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: jf16jGHgsw9Bi43+g+52lKN0zxcWWkjn9c7jAjKHxEY=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: X/iupfoaml8hcebc5qQYJhHfQRJpbcfR9nZK+THvna4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 01:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Apr 29 01:08:40 2024 GMT
            Not After : May  6 01:08:40 2024 GMT
        Subject: CN=662ef318-3f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:2a:11:b3:e0:b9:49:77:b0:0c:04:05:94:
                    6f:c0:d5:ab:d1:08:47:85:33:db:93:58:7e:64:e4:
                    a2:6e:38:be:e6:06:b4:6f:52:2b:d9:13:02:25:04:
                    81:67:72:6c:72:57:fd:ab:4b:26:cb:4a:d2:fc:aa:
                    99:10:62:b3:ab:72:3b:45:87:95:c0:0a:61:4d:62:
                    55:29:bb:e1:61:6f:39:15:59:f0:a5:93:d5:b7:0b:
                    66:e8:74:4a:9b:9d:ab:89:4d:f8:9a:ad:03:7c:85:
                    43:06:3f:b8:2f:a2:4b:4b:49:bf:ab:f5:9b:09:dd:
                    f7:6f:ba:8c:29:b6:38:b1:18:98:a2:92:84:a6:20:
                    d9:44:b2:fc:c7:ff:77:67:bb:cb:0e:c5:a6:69:57:
                    ef:19:6a:77:9c:de:de:c8:78:f3:9f:e9:1b:ef:09:
                    50:0d:3a:2a:f1:6e:c3:fc:52:84:15:2a:4d:60:1f:
                    a5:04:8d:59:87:79:f7:e6:2a:38:3b:98:8c:69:b6:
                    d3:b4:f1:86:5f:93:f1:a5:c8:83:a4:3d:a0:cd:ff:
                    6e:30:0b:c2:a1:e5:7f:e6:d0:3b:eb:bb:a9:db:6c:
                    f1:4f:c2:df:42:72:73:5b:05:58:5a:c8:aa:9a:b7:
                    db:56:2c:39:e7:1d:07:c7:e5:d4:3a:23:a2:2e:8d:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D6:28:25:09:A6:D7:F9:BD:37:8D:5B:5D:83:38:C3:E5:00:CA:0A
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:38:15:74:25:f7:b1:d8:f0:9f:ab:cf:96:01:e8:b5:c5:c1:
         43:23:28:1a:0d:9a:66:fe:4c:c9:3b:f8:0f:4a:6e:0c:37:f0:
         b0:6d:44:ef:ad:21:a7:f8:55:96:a7:3e:dd:46:10:0e:51:b5:
         cc:09:b1:0f:3d:cf:9a:a7:02:d5:37:bf:a8:85:98:f6:aa:10:
         c2:62:bd:a7:ce:d9:86:da:e5:51:ef:ab:ac:97:4f:57:f9:6d:
         47:f3:19:32:f9:76:11:d0:be:c8:c6:04:79:e5:05:1e:f7:7c:
         17:07:68:66:3f:0c:b6:fe:4f:d6:16:b7:1e:52:2e:2e:17:94:
         fc:22:11:96:f0:b7:65:f8:e8:e8:c8:9a:61:bc:1e:85:4e:69:
         c5:01:e1:9e:0c:e0:4c:0c:10:43:18:3a:22:e6:36:20:b8:e5:
         0b:1d:32:05:f9:f9:29:ec:56:9a:c0:64:9a:a1:81:9b:1a:83:
         9e:4f:8d:5b:12:66:3b:dd:a2:05:bb:d8:0d:d8:8e:f3:e0:c7:
         c7:02:69:7c:b3:a9:64:1b:54:5c:24:42:28:b8:b7:0f:83:b2:
         96:5b:f2:8e:26:c7:ce:ea:d5:66:2a:d0:b4:f2:e7:62:1e:1e:
         6e:df:ed:79:9d:73:46:77:42:e5:bb:f4:30:d3:06:bb:a5:6b:
         39:7e:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:35:08 2024 by rpki-client on console-fra.rpki-client.org