Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File:                     ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier:          pG4mY3756iGNMaEfD1A6VGUChmGLV34YKnpOHiEKnmQ=
Subject key identifier:   A1:81:83:9B:67:30:83:0C:D9:CC:7D:3F:3F:F6:4D:D7:DC:4E:91:2B
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer:       /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number:          030E
Signing time:             Sun 05 May 2024 03:18:00 +0000
Manifest this update:     Sun 05 May 2024 03:17:59 +0000
Manifest next update:     Sun 12 May 2024 03:17:59 +0000
Files and hashes:         1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: OgqqxUEm/RW9wrAdv6CpTNuv1b35lifn+P6MLnXHSNA=)
                          2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: hPj+FOHLM41uPB7JyaWiRmNTCoGfo1f3eHc89Ap82eY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
        Validity
            Not Before: May  5 03:17:59 2024 GMT
            Not After : May 12 03:17:59 2024 GMT
        Subject: CN=6636fa67-6c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:6e:cf:9d:f9:2d:28:b5:1a:cb:f5:b2:b8:
                    ec:ac:d5:e6:0a:d6:8b:f6:df:ba:ad:c3:ae:d3:9c:
                    cb:bc:16:5e:94:cf:38:42:20:63:c1:ed:af:e3:df:
                    93:c2:d3:c0:72:c4:56:db:59:45:1e:14:66:b2:a3:
                    34:60:db:41:54:37:ab:02:9f:ec:bf:2f:c4:88:82:
                    d6:45:04:6d:da:47:62:44:8b:d7:8d:d4:83:c5:46:
                    61:42:11:de:7e:3f:47:1e:fd:29:bd:56:4c:07:3b:
                    1c:3b:31:e1:27:22:4a:34:87:22:e5:07:bf:c6:cc:
                    57:d3:bb:d8:56:b4:a7:e1:ee:ca:55:0d:86:bb:06:
                    45:02:a5:a2:29:3a:33:94:81:e9:fb:c0:d9:ff:52:
                    1f:6b:03:58:02:ab:a6:3d:7f:15:f1:86:60:6c:f5:
                    ca:a8:67:62:14:7c:70:d6:a5:56:f3:02:88:ae:1a:
                    3b:1d:09:ed:e9:e9:03:ef:a5:00:d7:2a:66:d9:14:
                    46:55:bb:c1:1f:f6:6d:09:9a:b0:42:2c:ff:8f:8c:
                    86:1a:8f:94:ce:3a:42:ab:51:fe:84:c9:13:e1:c1:
                    5e:0a:14:26:06:05:7a:60:46:9c:64:17:6b:bb:ec:
                    ea:a6:94:55:d5:fa:c9:11:ac:9d:dc:21:a6:3b:5d:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:83:9B:67:30:83:0C:D9:CC:7D:3F:3F:F6:4D:D7:DC:4E:91:2B
            X509v3 Authority Key Identifier:
                keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:ce:e0:bc:49:a7:93:47:96:43:86:d9:d4:01:5f:7d:5d:
         7c:8f:c1:b1:66:64:a9:25:4f:71:90:98:a8:b2:1c:a3:10:e9:
         eb:9f:ec:b9:49:96:47:e1:ed:19:1c:2c:dd:0a:7a:da:2c:92:
         ff:65:c0:17:28:5e:5d:b6:b9:f2:c3:0d:e4:21:e5:ba:75:b9:
         c3:cd:4a:90:1f:d0:d6:a5:7e:a0:a0:6c:0f:23:81:70:65:cf:
         79:3d:a8:73:95:a5:eb:99:86:6b:53:a1:2d:a3:0e:7a:82:27:
         53:4a:38:8e:c0:46:11:be:b0:ce:a1:76:de:8f:87:67:dd:e9:
         8b:ed:c3:34:45:c6:20:75:8e:1a:4c:5d:bd:12:fa:a4:88:24:
         d8:ee:d3:11:9e:21:66:b5:b6:52:e5:7c:c1:57:43:bc:83:cb:
         1b:ed:07:7f:8f:10:f1:36:d2:cf:b5:fa:2b:fd:7d:01:94:b7:
         42:74:1b:72:9c:c6:e5:cf:dd:78:c1:e7:27:7e:47:9f:2c:81:
         4d:93:6a:e0:b7:7f:77:56:2c:cb:43:29:9d:00:ce:dc:bc:36:
         77:70:82:68:9f:8f:2d:9e:8c:4f:30:16:c2:5d:f8:75:0a:72:
         0a:46:bd:6c:4f:a2:0e:36:5d:55:5b:f5:09:3b:52:94:33:91:
         45:ae:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:47:49 2024 by rpki-client on console-fra.rpki-client.org