Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
File:                     BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft (raw, json)
Hash identifier:          9ol6n68LRbZfcN/qZIlJHx6Y+pM7xzZl/0Cco89M9Jw=
Subject key identifier:   80:DC:40:5A:5F:84:39:5D:4F:98:AC:43:7F:CD:EB:7D:3C:EF:7F:AF
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Certificate issuer:       /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial:       13E152E752066E42FA60AA691D4F7F0E6C918EB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
Manifest number:          022F
Signing time:             Fri 17 May 2024 21:57:51 +0000
Manifest this update:     Fri 17 May 2024 21:52:51 +0000
Manifest next update:     Sun 19 May 2024 00:54:51 +0000
Files and hashes:         1: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (hash: T3lI5I0ibMwot2kfzDeDXjdHqZ3J+lsRr0fSaqNQxq8=)
                          2: BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl (hash: yG12yDb+meZN6P5Pks3j0UfOyqIFY1OLTrGgqK2Tgro=)
                          3: 3130332e3134312e36382e302f32332d3234203d3e20383334.roa (hash: oZ1FfZRe8bZrSaP+qYylXbwCltzBW73qMGRdZbl2km8=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl
                          rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 00:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e1:52:e7:52:06:6e:42:fa:60:aa:69:1d:4f:7f:0e:6c:91:8e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
        Validity
            Not Before: May 17 21:52:51 2024 GMT
            Not After : May 19 00:54:51 2024 GMT
        Subject: CN=80DC405A5F84395D4F98AC437FCDEB7D3CEF7FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:b9:99:a6:ee:32:de:a5:dd:6c:0c:70:a1:
                    2d:6a:0f:5d:0a:cd:3f:ff:db:51:d5:43:41:7c:c4:
                    75:a9:2e:65:d2:a5:3c:75:4b:08:6e:69:63:4d:c4:
                    78:fe:c4:38:09:4e:cc:36:c1:75:1c:f5:05:eb:90:
                    b3:1d:7b:6a:64:72:3b:e7:e1:b8:5b:a6:1f:e9:a7:
                    f3:3d:c1:83:64:be:6a:89:78:f9:cb:f3:ca:22:ae:
                    6a:cc:a9:fc:d0:31:a1:31:46:b5:a5:00:f3:5d:a8:
                    df:b2:41:79:7a:3d:17:9a:60:d7:fa:a0:88:27:4b:
                    a6:92:1c:6a:3d:73:55:e4:7d:f7:6f:99:2f:6e:e7:
                    09:f8:4a:be:c6:c8:87:7e:de:a0:26:18:6c:4f:f0:
                    8d:be:53:d0:34:9b:64:a5:eb:cb:ec:07:63:7d:47:
                    87:c7:c9:bf:9c:33:64:8f:fa:ba:12:0f:0b:83:db:
                    56:bb:d9:79:a0:c2:af:7f:b5:99:7c:ff:e2:13:c9:
                    7c:42:f8:60:f4:c5:2d:ca:28:27:8a:a1:c6:0e:f0:
                    bb:1c:a5:52:20:40:32:e2:c4:cd:cc:4a:f2:07:fd:
                    f7:60:54:11:ba:af:e0:4e:41:8f:ee:d1:ea:26:22:
                    d8:63:72:6b:5a:e1:06:63:1d:21:70:73:a2:13:24:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DC:40:5A:5F:84:39:5D:4F:98:AC:43:7F:CD:EB:7D:3C:EF:7F:AF
            X509v3 Authority Key Identifier:
                keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:34:ec:fc:94:c0:12:d9:f1:fd:74:58:b5:91:1b:5f:b5:
         44:97:fe:45:a5:d3:fb:a6:b9:68:61:a0:49:01:42:96:08:48:
         2d:04:ae:ab:34:fc:8b:2f:07:75:c6:6a:1f:c8:a6:00:f5:ea:
         80:33:bf:ea:e5:af:71:3c:80:d6:9d:d5:ad:dc:00:80:56:70:
         4f:13:45:04:c2:7f:c6:ba:e2:83:66:60:71:31:58:07:44:41:
         24:18:f2:f6:9c:7a:99:7e:cb:64:f0:1d:0b:c6:8a:bc:e9:ab:
         b0:19:36:12:f6:61:f9:fa:ed:46:94:50:fa:10:6d:76:3d:6a:
         a6:a1:d5:87:8f:12:23:35:1b:7c:eb:0f:69:7a:4e:5c:e3:68:
         2e:39:b9:1e:70:f5:e8:75:6b:6d:7b:a6:af:35:d4:ae:13:99:
         36:be:d6:11:ad:69:87:a8:f9:11:48:c5:e3:9b:4f:c7:44:4a:
         7d:48:b7:52:45:6c:df:3e:45:fe:58:f5:0b:80:85:a5:d4:ad:
         1d:8d:d3:34:7b:9a:e3:0c:10:87:3a:42:a3:d6:0c:69:a5:04:
         da:73:9a:39:8e:5b:fe:b7:5b:c9:09:ea:f9:94:e7:3c:fa:5f:
         12:63:8c:75:c2:3a:8e:b0:49:f7:fc:0e:4c:61:29:c5:12:b1:
         e9:c9:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:19:26 2024 by rpki-client on console-fra.rpki-client.org