Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          3DusmjE2eYrXIdmBb+/0nspgzuWmseNqyf6+s0+rONs=
Subject key identifier:   70:EB:FD:7D:82:2E:43:A6:2F:CC:BE:F8:13:2D:76:AF:BC:CB:1F:AC
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       38810E44A6A4D682E3AF438E9FFF1324AFF171D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          061A
Signing time:             Sat 04 May 2024 23:09:44 +0000
Manifest this update:     Sat 04 May 2024 23:04:44 +0000
Manifest next update:     Mon 06 May 2024 01:37:44 +0000
Files and hashes:         1: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: Pq/ZNV+oWKzjrdP/LoxNEFQdQ1OqwZsuZtzh4zv6PM4=)
                          2: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 1Z9NFwu84Arj0S4sz3h+29lvpdXrfwUJ9GXMB4OkKsQ=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: SEXH3rTr3ODp+cxeCWzzWssiWyunrAWFKrobJPJjdpw=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: V65t3qYEGbB95hU6CB69RKYBZX60qujWmWdv9lMxpNQ=)
                          5: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: 25BOTIP5zFQLcIzVhlMczCY/NJ2Q2YWQEDgFGA6Cv4Y=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 01:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:81:0e:44:a6:a4:d6:82:e3:af:43:8e:9f:ff:13:24:af:f1:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: May  4 23:04:44 2024 GMT
            Not After : May  6 01:37:44 2024 GMT
        Subject: CN=70EBFD7D822E43A62FCCBEF8132D76AFBCCB1FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:01:22:5d:9e:40:17:0f:55:c2:13:ca:5f:
                    79:bc:81:62:66:47:29:7c:a2:70:0a:60:6a:fe:69:
                    d8:1a:23:c5:05:88:d0:86:6a:57:95:91:1d:43:55:
                    4b:53:58:88:a0:dd:b2:3f:b0:da:6b:1c:95:25:0c:
                    fb:cd:5d:13:a3:5b:44:2f:3d:c1:5f:ff:79:7c:72:
                    58:3d:ce:72:6d:7d:eb:93:a7:18:f8:0c:84:ca:6d:
                    61:64:ec:1b:d7:b4:d2:5b:ab:19:e1:44:d3:f5:02:
                    b5:9a:dd:5f:83:e0:dc:f0:ae:8f:f3:7b:43:ef:e5:
                    75:70:32:c7:1b:4e:42:23:9a:ab:64:09:9d:cc:53:
                    0d:3d:35:0e:92:72:c4:e7:7a:cc:71:56:21:f6:0a:
                    69:e9:a6:cd:28:9d:bf:fe:46:7e:35:ff:f1:8b:b6:
                    e1:7f:52:da:c2:3c:92:d4:d6:c7:0e:bc:d9:ca:03:
                    93:e3:93:23:ac:3e:73:76:a5:e1:30:33:d5:33:58:
                    27:96:fd:d6:ac:b9:5d:fa:c8:47:1a:47:84:60:7b:
                    1c:4e:60:20:5c:3c:8c:30:79:db:b0:6e:ca:66:a4:
                    cf:d6:c2:b1:31:2a:9f:57:0e:76:e3:6c:fc:89:3d:
                    e4:b1:f2:52:a7:e3:57:d6:35:82:56:92:a9:fc:67:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:FD:7D:82:2E:43:A6:2F:CC:BE:F8:13:2D:76:AF:BC:CB:1F:AC
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:de:e8:27:90:e8:4e:92:c6:99:b6:ac:bc:f0:f3:b4:1d:70:
         69:d3:e5:fb:77:a6:e9:ad:af:b0:4b:fd:9d:39:83:62:ec:eb:
         7b:2f:c3:00:06:d8:ea:90:c8:f8:2f:14:4f:3c:6d:e9:54:1b:
         9d:16:fd:3f:1f:ce:e3:a1:83:f7:3f:51:ac:bb:d4:fd:8a:55:
         c6:7e:3b:e0:63:fb:47:16:81:62:3f:8f:71:89:48:96:c0:cf:
         68:9c:83:50:83:b6:80:dc:fd:18:b7:11:92:b0:7c:4c:c7:49:
         25:c7:b3:f5:54:a7:f9:93:5d:47:54:90:34:83:06:e2:cb:3f:
         2f:15:53:f6:05:af:47:b9:16:95:1d:0f:00:69:06:b1:84:00:
         91:50:ec:24:1f:16:6d:9f:7e:8d:bf:ef:08:66:62:13:35:af:
         da:00:a9:a9:cd:75:b1:48:bf:0c:83:8c:c2:ac:47:c7:9d:f9:
         0b:ad:20:88:d8:94:8d:d6:a0:fc:18:ca:c1:0c:58:c6:dc:d6:
         c6:2a:70:bb:35:0b:ec:3a:9b:1b:c7:bf:b5:fa:7c:fb:21:0d:
         ec:09:64:85:d9:c1:2a:7a:e8:a0:81:9e:8c:5e:7c:1d:c2:2b:
         30:c4:2a:93:55:7e:f2:93:95:2c:6d:82:c7:a4:78:f1:cf:32:
         2d:e5:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:32:13 2024 by rpki-client on console-ams.rpki-client.org