Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
File:                     qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json)
Hash identifier:          rHNsWxMUtVx410CXgvcSGB2Fxv7+KRat/hamx7F6Bpo=
Subject key identifier:   D9:1B:6F:08:DB:D1:6C:EE:E9:16:A8:85:76:20:37:AC:FE:AD:07:13
Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B
Certificate issuer:       /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
Certificate serial:       0590
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
Manifest number:          058C
Signing time:             Sat 01 Jun 2024 01:23:52 +0000
Manifest this update:     Sat 01 Jun 2024 01:23:51 +0000
Manifest next update:     Sat 08 Jun 2024 01:23:51 +0000
Files and hashes:         1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: c+0DUXhBBV8GKlLAE0g3ZhX34ZV9SaSckWB1XUehBpQ=)
                          2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: C/81jIV8YO4+/1jy8YhOC6SC1nH71ReSQpKzFpw53eU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl
                          rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
        Validity
            Not Before: Jun  1 01:23:51 2024 GMT
            Not After : Jun  8 01:23:51 2024 GMT
        Subject: CN=665a7827-5946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:fe:d3:78:8f:dc:16:81:1a:9a:d6:ac:6b:
                    0c:21:c6:61:52:b2:67:c3:9c:89:92:bf:ff:b8:41:
                    14:6c:53:4c:40:4f:fd:ab:04:f4:c2:a9:4e:b1:b9:
                    43:67:6a:9d:d4:f9:78:29:f4:2a:3c:14:ae:0f:8b:
                    14:4d:d1:a0:9b:38:ec:77:30:d3:e9:f8:18:02:55:
                    a0:e5:79:0d:2b:3c:83:d8:2e:33:39:bc:55:20:6c:
                    63:8f:ce:fd:ba:7d:5e:1b:25:50:d0:01:66:1f:68:
                    53:5a:a5:73:eb:09:06:e0:f7:e2:f6:44:8f:e7:9e:
                    ad:c9:60:e8:fc:93:7f:71:b9:54:58:67:c4:22:f0:
                    6a:e2:fc:a4:8d:20:13:82:b2:9d:75:d4:50:8e:d6:
                    73:66:a6:86:7a:fa:b3:dd:b7:62:38:f8:d9:74:52:
                    37:ba:00:86:c4:09:2d:13:51:61:fd:26:3b:aa:4a:
                    33:c1:59:3a:62:69:b5:85:fa:a2:87:0e:51:27:67:
                    8f:eb:5c:04:f2:56:0c:ab:d5:af:2a:3e:04:41:fe:
                    33:0f:9d:8a:48:95:b0:fc:f6:18:14:33:3e:99:d1:
                    b9:bb:10:4f:be:f5:ea:fd:4d:39:ec:2b:b2:1d:cf:
                    da:9e:ef:73:0d:a2:a0:cd:5e:0c:6b:36:e9:d8:c5:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:6F:08:DB:D1:6C:EE:E9:16:A8:85:76:20:37:AC:FE:AD:07:13
            X509v3 Authority Key Identifier:
                keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:74:8d:12:75:7a:a7:84:9c:f6:5b:bb:46:d0:55:32:9b:a2:
         59:c5:74:44:8b:52:f9:aa:7a:93:d8:78:1c:c7:29:ef:3a:0a:
         1d:f4:14:15:cd:3b:4b:ce:3a:50:82:9c:2f:7d:3a:ff:1d:11:
         2f:6e:a8:6c:ee:1f:e9:d3:2c:92:4f:69:0e:49:d2:6d:e7:43:
         13:51:32:5a:e8:9a:a4:d7:c6:18:7c:5e:60:3d:88:ee:d5:fc:
         e3:0a:b3:ce:31:09:4d:34:40:04:09:67:36:ab:5b:cb:c1:a2:
         f3:ed:a8:0a:63:e4:58:d0:97:6c:fd:b3:c8:e0:24:aa:f2:53:
         51:70:4f:fd:d3:ce:82:0b:d6:98:58:1c:b3:89:45:c7:68:45:
         42:cc:b8:36:0c:59:bc:7b:b1:b6:44:e1:2c:1b:7e:b5:0d:e2:
         79:f3:bd:d2:39:70:47:50:62:42:93:c7:e4:0a:96:c2:07:3a:
         1f:b5:ba:02:38:24:40:ab:f5:ef:e1:b9:69:61:6f:c5:44:bf:
         54:fc:5b:22:ab:82:9b:9c:d7:68:00:2f:16:7f:61:4c:17:30:
         c5:bf:f8:50:00:96:ff:57:60:d7:08:e2:52:71:bc:a2:c3:d4:
         57:cc:46:de:55:c8:e0:31:88:e3:31:7a:c6:4e:6b:db:55:19:
         1c:df:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org