Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          SCZku1QQ2qDt5cfX/cs3pAyBWi688dqTqtoSoeOVUbY=
Subject key identifier:   E6:F1:4A:B7:C0:23:54:16:B3:8F:73:07:79:03:20:DA:FB:9D:AC:E3
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       13BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          13B3
Signing time:             Sat 04 May 2024 17:37:15 +0000
Manifest this update:     Sat 04 May 2024 17:37:15 +0000
Manifest next update:     Sat 11 May 2024 17:37:15 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: QnuaxQ7gVGvV5hnLcPdL8FYwAvSx3e8DDD0cj5bddBg=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: AMKohd2NXyHxU0epilwDzSeCCE0dAIfSEgi1/gi9uSg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 17:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5051 (0x13bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: May  4 17:37:15 2024 GMT
            Not After : May 11 17:37:15 2024 GMT
        Subject: CN=6636724b-d2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:02:91:e6:4a:c6:e8:56:07:b4:e2:6e:b2:
                    ca:b1:81:52:a6:b3:98:48:64:70:50:35:89:f7:31:
                    4f:ac:65:f8:d0:7a:81:21:1a:65:6e:b6:f5:bf:d6:
                    0a:b0:22:db:46:fe:7b:ee:f1:50:10:07:bd:b3:2c:
                    dc:81:2a:04:d1:89:25:10:2f:6f:a1:7c:c1:b2:d4:
                    9d:82:10:b5:99:8c:28:94:9e:ca:41:bd:16:c5:ad:
                    cc:29:cb:78:97:56:2e:62:ad:69:59:6e:6e:26:76:
                    83:24:73:e9:0a:d7:b8:2a:66:de:39:de:1c:7b:62:
                    7f:7e:13:ee:25:35:d3:3e:a1:92:10:43:45:9e:3e:
                    5f:fd:73:81:9d:4b:e9:a2:2f:07:d8:01:c5:77:df:
                    a7:f3:bf:97:f7:cb:f4:6a:97:ef:ae:cf:a0:0c:d6:
                    f6:e1:49:02:63:72:26:9e:08:d1:d1:58:15:19:f4:
                    47:5d:a7:f7:27:62:de:7d:2e:fb:92:1f:4e:df:44:
                    d5:fc:f4:d1:c3:c3:7d:e4:7a:2d:9b:c7:9d:f7:b5:
                    e5:7e:7c:bf:ec:6c:cc:c6:08:17:3e:62:15:1a:31:
                    c5:b5:cc:92:0c:79:16:b6:54:79:27:e3:d1:0d:2a:
                    b5:d8:c9:79:ef:b7:52:ff:7e:61:b5:38:4e:e6:b0:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:4A:B7:C0:23:54:16:B3:8F:73:07:79:03:20:DA:FB:9D:AC:E3
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:a5:bc:6b:73:77:e0:dc:03:a2:24:a2:ab:78:70:f3:92:
         40:57:19:0f:18:e2:4e:29:9a:7f:1c:1e:44:9e:2d:20:24:45:
         50:d5:43:af:2b:2b:32:6f:3d:c8:e2:0d:fa:24:f5:43:2d:bc:
         0e:72:66:e2:8c:1a:6d:2b:11:95:17:b4:77:05:9e:bf:d2:3d:
         0c:ec:bb:f4:ff:40:cf:d6:57:43:69:69:92:f4:2f:e6:af:d1:
         a9:a5:d3:55:b1:49:cb:fc:13:9c:35:15:63:e3:eb:0c:31:42:
         44:ff:c9:7f:23:c9:09:45:65:1e:06:ba:3e:83:23:b1:17:48:
         7d:8a:7b:e8:c4:f2:4b:6b:55:dd:e6:ab:48:83:a3:ad:a2:2f:
         b8:85:33:8b:2b:23:91:70:6c:fc:08:ef:fd:45:8d:44:da:33:
         14:ec:20:e2:3a:5e:68:98:21:37:89:f3:4d:98:2f:f3:7b:77:
         90:fa:46:2f:d7:05:8c:14:2d:cd:27:62:a6:1a:c1:72:2b:05:
         da:40:71:b5:2e:ab:cc:e7:d0:d5:17:07:3c:d4:14:46:27:a1:
         53:fe:d8:ac:ef:26:2d:33:db:91:3d:c5:84:a2:7d:7c:c2:34:
         1d:f5:1a:bf:da:b2:e6:57:2f:3e:d6:8d:37:ac:75:64:72:fa:
         f5:c2:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:58:45 2024 by rpki-client on console-ams.rpki-client.org