Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          32jaaC1OgW078nmfB8edhxJQzS8jdcyCc6TewtXJDFk=
Subject key identifier:   A9:0A:86:C6:0C:84:18:E6:65:4C:43:7F:5C:AA:79:54:C9:16:5D:89
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       44EC80BB5512C5A102C9175B918D4B82A3418D96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          062C
Signing time:             Sun 03 Nov 2024 05:08:57 +0000
Manifest this update:     Sun 03 Nov 2024 05:03:57 +0000
Manifest next update:     Mon 04 Nov 2024 05:39:57 +0000
Files and hashes:         1: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: J+FUgqMAZ/nkwtsD2zKAhqlr0qOP+X5xj7taX5tVccg=)
                          2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: V65t3qYEGbB95hU6CB69RKYBZX60qujWmWdv9lMxpNQ=)
                          3: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: L0lWQ5cza5vzg//b4IOx6GUQ2FbNhEwtk8QfgcTn3pQ=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: SEXH3rTr3ODp+cxeCWzzWssiWyunrAWFKrobJPJjdpw=)
                          5: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 1Z9NFwu84Arj0S4sz3h+29lvpdXrfwUJ9GXMB4OkKsQ=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 Nov 2024 05:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:80:bb:55:12:c5:a1:02:c9:17:5b:91:8d:4b:82:a3:41:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Nov  3 05:03:57 2024 GMT
            Not After : Nov  4 05:39:57 2024 GMT
        Subject: CN=A90A86C60C8418E6654C437F5CAA7954C9165D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:75:c0:bd:40:7a:8d:f3:c9:42:30:8a:b7:
                    2e:51:3a:27:cf:2d:b5:87:15:3d:08:ac:eb:57:ef:
                    9b:d7:cf:1a:68:0f:3b:fb:93:a9:09:e9:59:98:6d:
                    c7:e7:5d:a3:29:b3:d6:ab:8f:bd:22:e4:88:93:2d:
                    45:55:b4:ba:fb:cd:5b:4f:05:31:47:66:48:ca:aa:
                    86:f8:37:ba:42:77:f7:56:c0:95:f5:bf:61:3e:f3:
                    77:d7:59:9c:53:08:52:07:ed:24:fe:55:6b:dd:5d:
                    6f:03:95:fc:76:7e:e7:f1:61:0c:05:34:43:7d:46:
                    62:18:ba:3d:51:23:b4:11:6b:2f:bc:a2:6a:64:cf:
                    9c:59:ae:73:b7:28:06:a8:a3:54:cb:48:03:71:bf:
                    aa:87:7b:83:d2:bc:8b:2a:5c:44:74:b6:6c:33:9e:
                    4b:d2:bd:1c:20:00:27:cb:74:35:47:2e:45:69:e8:
                    a5:de:f2:66:0d:31:d4:77:48:b6:ef:6f:80:e1:55:
                    d5:30:70:1f:36:81:55:5a:f7:1e:41:29:d7:ca:1e:
                    eb:14:01:e0:09:5e:54:9d:a0:1d:03:ac:f7:e6:82:
                    f5:ab:36:3d:48:e8:3e:26:f2:91:c9:80:11:6b:c0:
                    98:df:41:28:ce:b8:6a:19:05:9b:d3:f4:6a:19:ac:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:86:C6:0C:84:18:E6:65:4C:43:7F:5C:AA:79:54:C9:16:5D:89
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:5f:e6:4b:61:64:87:78:5c:37:8d:a5:e4:d1:90:3b:0e:
         0b:7a:e0:de:30:40:f7:d3:6a:ba:38:85:4d:f7:0f:73:33:37:
         6f:c0:f5:bd:79:2d:07:ca:67:63:bc:4b:a5:59:ac:13:19:95:
         49:32:e1:81:ee:e1:34:dc:32:48:88:25:ff:ed:48:28:9e:02:
         2b:ea:09:04:9d:a7:2e:ab:11:a0:7d:fe:59:27:58:5a:0a:ab:
         14:c8:80:68:a5:1d:07:cc:82:ec:94:e5:d4:62:00:e6:d8:5a:
         07:79:f2:31:78:51:c3:10:54:76:c0:8b:aa:6c:9c:d0:57:88:
         7d:14:de:b3:0a:54:6c:85:fa:7d:d2:9b:a9:ce:66:cf:b3:79:
         fb:c1:a4:f5:45:59:05:7f:b1:c5:e8:cb:75:24:76:70:ae:16:
         f0:d1:12:0d:00:0d:4e:d4:b6:b8:3e:cc:46:44:27:c0:81:55:
         c2:d2:1c:6e:95:a4:49:9c:03:0b:68:57:0e:18:63:da:d9:be:
         3f:5c:88:b1:f9:f5:3e:9d:73:ff:12:10:ac:18:51:ab:99:1d:
         0f:6e:99:31:f5:b8:ec:8c:1c:cc:e9:88:89:ed:5b:2f:ba:a7:
         fa:7e:9b:cf:da:be:18:41:9a:29:7e:f8:df:a4:c3:57:6f:9f:
         25:d2:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:35:45 2024 by rpki-client on console-ams.rpki-client.org