Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File:                     Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier:          nbNAffAI91ZG+/qztgvl1J2ImPaeifEKnjnjtZ3MZfo=
Subject key identifier:   D5:70:E2:17:E6:B1:17:A6:9B:92:52:EF:5A:B2:DE:AC:27:50:3F:0D
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer:       /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number:          57
Signing time:             Wed 15 May 2024 08:01:20 +0000
Manifest this update:     Wed 15 May 2024 08:01:19 +0000
Manifest next update:     Wed 22 May 2024 08:01:19 +0000
Files and hashes:         1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: iK2dkY6NallI6SnU0AHYKPp41PAnHghYFGY+ugjEu1s=)
                          2: 4577475498C411EEA6B7355CC4F9AE02.roa (hash: OZgEFCTvMpBeifHl9LylEG15+GiRznLYf103lTpfNb8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
        Validity
            Not Before: May 15 08:01:19 2024 GMT
            Not After : May 22 08:01:19 2024 GMT
        Subject: CN=66446bcf-ad6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:87:f7:60:64:b1:27:43:f9:14:5a:1f:95:
                    b1:f6:db:06:ad:f7:34:20:e9:86:96:e9:1b:de:f9:
                    58:27:49:8e:ff:10:54:b6:16:03:f3:23:55:08:ef:
                    f4:e1:af:64:57:58:73:59:4c:c5:04:d0:80:bd:b1:
                    a8:e3:1a:c6:75:65:57:9f:db:0e:bc:5e:f9:3a:55:
                    41:8f:a2:b2:af:c2:19:04:b0:cd:b1:f7:36:4e:dc:
                    84:40:cf:ec:eb:d4:9a:b9:5a:c5:23:00:bb:26:db:
                    39:2b:73:29:ba:8f:9f:9e:f1:43:27:e3:33:3b:03:
                    a2:21:41:df:a6:0d:06:71:85:b0:29:e5:32:44:89:
                    13:c7:3e:e6:bb:67:71:2e:ac:3c:2d:91:3c:67:ae:
                    1e:8d:0d:36:e7:c5:be:d3:52:1d:b8:c1:fe:91:b5:
                    52:54:7f:c9:38:9e:98:cb:5d:78:a7:1c:44:ee:66:
                    1c:98:8a:32:8e:a2:ce:64:1c:a8:bc:e6:d2:65:1f:
                    bd:a7:ec:65:4b:b6:02:3a:64:b4:2d:71:aa:b3:52:
                    e5:28:aa:64:df:5e:56:22:23:f2:bb:c2:1d:8a:68:
                    c3:b6:bf:59:59:de:48:ee:e8:27:d2:45:4a:ae:e9:
                    30:cc:f8:49:1e:41:4c:16:ac:2d:f4:70:d6:48:48:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:E2:17:E6:B1:17:A6:9B:92:52:EF:5A:B2:DE:AC:27:50:3F:0D
            X509v3 Authority Key Identifier:
                keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:cf:a3:67:81:4c:eb:3c:2e:4f:8e:ba:f0:65:ba:32:77:
         d6:b3:78:a7:57:83:a8:b0:b8:27:af:ed:00:9c:3c:84:de:be:
         ba:f8:2f:4f:a1:8e:d1:ec:1f:0c:43:f2:d3:ac:8c:7f:2c:3b:
         d1:6b:0a:e6:3c:61:40:aa:cc:df:c6:8c:0d:6e:6e:49:d1:94:
         c2:7a:d2:65:6d:b1:a2:51:3b:db:e4:e2:fb:6e:7a:43:51:43:
         9a:e6:11:a9:4b:ce:60:88:60:da:20:dd:ff:12:62:eb:63:d8:
         2f:5e:08:bb:10:c2:f7:ea:65:81:b0:ef:82:37:88:26:e9:ba:
         18:f3:bc:68:9a:c9:ff:4e:a2:db:30:4a:a4:80:d9:f6:94:31:
         69:5b:0f:22:7e:ec:51:35:1e:ba:44:60:09:ef:d3:40:05:62:
         b2:16:7c:ec:54:a5:44:44:f2:5d:9f:c5:7e:b4:e2:50:be:2d:
         9b:3c:1f:98:6d:13:70:66:35:52:14:77:7b:05:9b:12:db:d9:
         e9:7b:0c:9a:d5:bd:18:c5:40:32:14:74:36:0f:07:c1:84:47:
         b0:69:6c:0b:68:21:b3:a5:9d:b2:99:09:88:52:17:22:34:88:
         1a:2d:1a:1f:98:c0:8f:c6:44:f7:07:2e:3c:cb:be:c1:7c:2f:
         08:dd:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org