Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          Dj/5dMrFl9SIbExSY/504VndoFWAd9iCFDZ74YaqrQg=
Subject key identifier:   45:8D:AE:AA:C1:3A:DF:61:E1:2F:74:06:F2:07:7C:27:13:5D:D8:59
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       7355B25A035DFEB281D6472925005BBB2DC9160C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          0612
Signing time:             Wed 01 May 2024 18:43:14 +0000
Manifest this update:     Wed 01 May 2024 18:38:14 +0000
Manifest next update:     Thu 02 May 2024 19:57:14 +0000
Files and hashes:         1: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: IcOJxHIi4+D79euTopYXiby7NiRE+6HZl4eEdSi1Yx4=)
                          2: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: kncx0QitZHv7BHcL9ZgGiQ43RImCDqGCY5zXkESPUjE=)
                          3: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: NpWyQCyQsSxBbQ8X/6vTsgzfbCmTE12P0urrji5+Kvg=)
                          4: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: YpLMDzsVkDKuZ4wh8mc+03AJNZBdhyLBl8+xr2WL+Uw=)
                          5: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: kpWszSFlQ/7w9dJ+DcBnP4zgs/7ZX9sT6OY4ryodIXo=)
                          6: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: 6JJmB2YmO/BTCE+XoC/8ZqqWFLCh8EMD0RHpPHcgN84=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 19:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:55:b2:5a:03:5d:fe:b2:81:d6:47:29:25:00:5b:bb:2d:c9:16:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: May  1 18:38:14 2024 GMT
            Not After : May  2 19:57:14 2024 GMT
        Subject: CN=458DAEAAC13ADF61E12F7406F2077C27135DD859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c7:b9:b5:1b:ce:38:06:b6:42:e7:08:8f:b3:
                    6c:10:28:f5:77:1a:d4:28:1d:48:bc:7a:0c:c7:6c:
                    32:02:5a:a7:15:23:17:2d:fd:ec:63:fc:ff:54:e7:
                    49:e0:8e:59:e0:45:5b:89:66:ee:9b:ae:ee:a6:e1:
                    af:e1:cc:14:33:b8:1e:90:e5:5b:70:2e:f3:f7:67:
                    f9:41:ca:6a:47:fe:2d:9d:cd:5e:fc:73:72:0e:46:
                    01:6d:01:58:43:09:31:20:bc:95:08:0a:e9:cc:c4:
                    d1:d0:85:e2:70:15:24:2c:38:fa:57:b3:0a:a8:e4:
                    ae:55:61:93:78:cd:1f:7b:85:55:c0:5b:68:2b:56:
                    02:c9:dc:30:6d:74:44:6c:70:8d:39:37:a4:83:ea:
                    44:27:b4:69:ff:e0:cc:59:05:6b:a3:f9:04:ee:58:
                    98:86:66:f7:9a:55:d6:70:32:bc:11:3d:ff:96:aa:
                    34:ea:c8:31:d1:ff:a7:ce:05:f3:18:4e:87:7b:2e:
                    9f:e0:b3:58:74:a3:6b:ec:22:f7:7d:a4:df:2e:36:
                    5c:56:a0:08:3e:11:11:3a:3c:8b:e1:c2:e6:62:1a:
                    68:19:b9:90:b4:fd:c1:fe:97:44:4a:7c:13:44:35:
                    20:26:6f:eb:96:6f:ef:c4:84:29:ce:49:aa:ee:5b:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:AE:AA:C1:3A:DF:61:E1:2F:74:06:F2:07:7C:27:13:5D:D8:59
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:f4:d6:4b:fd:bf:ed:64:9b:d5:9b:a0:0c:9d:68:4b:97:
         a2:77:59:2a:fd:1b:90:20:3c:db:4b:3d:93:7f:c1:6c:d1:16:
         e0:9c:e0:9b:16:66:d5:b0:0c:99:96:3f:b5:b5:ec:40:87:12:
         37:2f:d8:06:2b:95:0a:de:db:70:38:b6:0c:98:72:ff:8f:65:
         76:71:36:70:50:d2:99:cc:c6:de:c3:f9:39:48:c0:82:cc:6c:
         99:0f:7e:35:49:a7:54:80:15:3a:e3:8b:15:d1:7a:96:b0:e5:
         b5:39:a2:57:e6:fa:b7:81:f2:e0:47:09:a0:ef:ae:31:01:52:
         f4:fa:b2:87:dd:d7:35:26:60:1b:22:52:02:f4:bd:65:95:ac:
         fb:f4:42:ae:f1:74:e0:11:f8:b1:14:63:57:fa:4b:c2:e1:d2:
         d2:74:42:1e:0f:c7:ff:75:6e:0b:6b:c0:fd:74:7b:b5:9e:c2:
         87:08:87:b9:94:02:12:e5:ab:c2:4f:4f:b0:ea:aa:1f:a5:9c:
         f5:d8:af:63:66:55:1d:6f:38:a9:f8:cf:b1:db:d5:e5:eb:9e:
         ff:c6:82:e2:cd:9d:76:4c:45:a7:cc:1a:90:e1:f7:a2:19:7e:
         00:da:52:98:08:9b:f6:28:2b:e0:f9:33:17:11:9b:93:e3:78:
         38:de:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:10:28 2024 by rpki-client on console-ams.rpki-client.org