Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          HGsWofgOZTIIFqK1IOoxJT5A9LcvrE4PcrWkrFCU1vQ=
Subject key identifier:   B7:DF:B9:F1:87:5E:86:A4:C6:80:A7:BB:C0:35:72:C6:5B:04:7F:0A
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       42532590689FC83B9C331826B4E08AFACB2C1FB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          0629
Signing time:             Sun 03 Nov 2024 05:08:58 +0000
Manifest this update:     Sun 03 Nov 2024 05:03:58 +0000
Manifest next update:     Mon 04 Nov 2024 08:58:58 +0000
Files and hashes:         1: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: 2WwNl1pB5rNdmdA0ZckBBDyrcj3CVHHtlaccRQqUQAY=)
                          2: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: xpwTWZBP7/eHtTbqk9F/apgXLOcT+0v7j0EpR9aSWOI=)
                          3: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: 7Xv6tB9T/KjUN8TySusNpmGTsOOvyBlLXRnYBKe44dU=)
                          4: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: Kxb90CXH6CMSXvWzjc9fpBhV8G0Ol0T3Vx0vlyxyafg=)
                          5: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: r4ECuFZt/L5fS+cZP8XPnWcJahGSY+Jt42LE76pHOT4=)
                          6: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ntRsyK9fzeeS8dMxETQpCxrPaauKuo+JBiWxiZzdtGE=)
                          7: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: gY4up6+bF5chU5hH1q7jAUfgJ0dy9fKP2zfDcrWbkK0=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 Nov 2024 08:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:53:25:90:68:9f:c8:3b:9c:33:18:26:b4:e0:8a:fa:cb:2c:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Nov  3 05:03:58 2024 GMT
            Not After : Nov  4 08:58:58 2024 GMT
        Subject: CN=B7DFB9F1875E86A4C680A7BBC03572C65B047F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:a2:d2:d5:46:70:2b:0a:b4:9b:69:d3:1a:
                    17:82:a5:78:c9:5b:99:20:52:87:e2:a5:bf:d4:c2:
                    3a:c6:cf:2a:66:64:02:fd:c5:d9:58:a9:b7:3d:bb:
                    bd:ad:5c:f3:3b:d1:4d:8c:e6:f5:45:0f:b6:b1:2a:
                    12:7d:d4:00:83:9e:ec:48:89:dd:e6:38:8d:be:c4:
                    75:5f:fa:cc:9b:cb:47:e2:ec:89:eb:0d:06:ce:6a:
                    5a:af:53:21:d6:99:03:38:52:06:47:18:a3:51:4b:
                    30:be:bf:c6:20:c1:d4:7f:a6:64:dd:03:f1:ea:35:
                    70:11:fe:80:02:2b:a0:3f:64:68:f3:1e:5a:dc:c1:
                    27:af:75:56:69:0d:33:15:d8:9d:78:94:2d:22:80:
                    d7:75:b0:19:65:14:35:94:b5:e2:00:91:8b:9d:93:
                    2b:ba:95:f7:3e:27:11:a2:c7:5c:34:cb:d2:a1:1e:
                    4f:d3:f8:4b:70:80:35:7e:0e:d4:d1:a4:fd:c8:0b:
                    a3:87:ba:fe:77:c5:e2:7b:64:7f:f6:6b:88:1c:5e:
                    17:1e:f2:4b:04:36:85:9c:12:84:dc:d4:91:b5:33:
                    b9:5c:4d:b9:84:00:00:04:db:dc:f1:f4:f7:49:86:
                    1e:2b:3c:08:20:4a:a0:17:b0:01:a7:c0:7b:c9:82:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:B9:F1:87:5E:86:A4:C6:80:A7:BB:C0:35:72:C6:5B:04:7F:0A
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:86:15:c8:b4:c9:cd:ca:69:76:ce:f3:ff:1d:43:1f:a4:
         7d:39:b7:b7:a5:76:69:3a:2c:d0:1f:b6:b7:2f:6e:3e:f0:47:
         a0:69:77:95:9a:29:67:ff:d7:66:80:a9:de:f9:68:66:3a:6b:
         f6:8c:9a:b9:3f:88:1f:73:3c:f9:c5:7a:a2:a1:1c:7f:2d:36:
         b4:a0:e5:60:1c:5a:9d:5a:69:03:ef:a0:90:5f:96:61:4a:bb:
         0f:8f:fb:99:37:0c:19:56:e1:c0:e6:1e:6b:4e:fb:11:7c:9e:
         96:6f:f0:b5:74:63:bc:3d:ba:9f:cd:04:1a:93:d7:71:c1:8a:
         8c:75:54:62:f4:23:1c:88:53:7a:af:a4:ed:1d:b6:5e:b9:1b:
         12:68:66:06:b8:20:dc:e5:30:2c:eb:0c:66:ea:51:90:7f:aa:
         4e:10:ab:e3:ec:59:98:83:4e:7a:aa:60:81:46:1e:7c:83:25:
         b9:68:df:9b:ab:4c:c4:7a:8c:68:a0:ac:87:c6:0d:3b:2b:86:
         91:01:a0:b3:e2:47:5f:a3:6f:03:96:7c:10:32:2c:9d:98:98:
         83:a4:bd:8b:54:b1:80:bf:84:1f:12:7f:08:8b:30:6d:08:18:
         fc:c3:a0:12:7e:dc:8e:43:08:1f:be:ae:e8:b2:23:b1:a7:0a:
         c0:c8:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 06:40:52 2024 by rpki-client on console-fra.rpki-client.org