Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          1PipfySe7r75d7lFlahMUYIcym3SR3yE3dptLLzeGYg=
Subject key identifier:   78:33:A7:35:39:29:1A:8C:51:CC:BC:F5:3A:E5:60:8A:CB:17:88:70
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       7062D5C97CBD4A386E0DDEE144DF59B8CBEBF836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          BE
Signing time:             Thu 16 May 2024 21:42:51 +0000
Manifest this update:     Thu 16 May 2024 21:37:51 +0000
Manifest next update:     Sat 18 May 2024 01:01:51 +0000
Files and hashes:         1: 3130332e3233382e3133312e302f32342d3234203d3e203630353034.roa (hash: poRpmHvpMg6O51AMOa3VJhZ8OPWN17DPfWdGbVue4JM=)
                          2: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: xG7CYq6UnhRxO8Dbi/u2Jqy4bkrQIIFCo4pRCFgs5+0=)
                          3: 3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa (hash: UMNXEpu8hLijUeztXgOzyJs3H7NAjKVw0/cn/H+DSnI=)
                          4: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: +h+030tuXrtnslI4a+rIy0efHGV3buFMNDa5LeMPY8s=)
                          5: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: zTb8ql1p6Fs6BB0oV1g0J8hnu59nBjyUuyB+lufxxN0=)
                          6: 3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa (hash: WQE1+VxviEKZyZzTZtyFhUZY8mHceWVObh0yTtwi8Vo=)
                          7: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: 5WV1i+bmxuiors5k14JoewwUls66NXGha9r1Vc5zx+A=)
                          8: 3130332e3233382e3133302e302f32332d3233203d3e203630353034.roa (hash: hSgeFRDNgcytawmZFFf1q2DYiUjtHHnWORTt4OdXqug=)
                          9: 34332e3235352e38312e302f32342d3234203d3e20313431313538.roa (hash: h6di5JU9M99tiCp6Fk71YuElkT1RNcweqk+7/FsPxNA=)
                          10: 34332e3235352e38302e302f32342d3234203d3e20323032363632.roa (hash: y4HBpOHOB8CUf9/S7tMQfE6OqGcGtre2vFGZjVWXbWY=)
                          11: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: koN3m+5vDonD19xHUxIlMjPKw9wAE7Tgr4bm47buMEc=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:62:d5:c9:7c:bd:4a:38:6e:0d:de:e1:44:df:59:b8:cb:eb:f8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: May 16 21:37:51 2024 GMT
            Not After : May 18 01:01:51 2024 GMT
        Subject: CN=7833A73539291A8C51CCBCF53AE5608ACB178870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:d9:e7:f2:b0:c8:b5:24:0c:a6:60:05:30:
                    5d:01:32:59:6a:37:c0:12:25:7c:73:00:98:3e:b1:
                    27:05:94:21:ec:40:5e:e7:a1:2a:ee:5c:51:33:f2:
                    fa:0e:71:51:e8:c1:be:70:1c:2b:33:9e:63:43:67:
                    35:ab:06:3f:47:e9:3f:1f:ec:1b:ad:d9:b9:75:74:
                    53:c3:00:41:e4:04:a6:51:30:32:ed:71:b4:31:3f:
                    34:82:02:73:b7:11:fd:13:e1:d6:2a:13:7e:51:96:
                    c0:b0:f2:98:e2:b3:60:98:f1:eb:ab:02:e6:8a:49:
                    3a:93:25:9a:70:b3:1e:4d:63:42:21:68:fc:56:ff:
                    ab:aa:78:44:69:2c:74:d4:83:66:db:b8:a2:91:2a:
                    0a:a6:7e:6e:93:16:ae:35:1b:94:ca:33:f8:51:24:
                    a6:21:cc:c1:b9:46:d8:eb:dd:47:ba:cb:5f:56:5b:
                    56:9f:74:a9:60:ee:98:de:16:15:19:57:57:c7:54:
                    fc:12:1b:ee:27:17:17:8a:3a:30:ca:a0:42:99:64:
                    e0:ac:d8:85:e8:dd:c3:7c:57:bc:e6:35:95:45:f9:
                    29:88:5d:17:7a:6d:9c:c1:f4:49:67:33:8d:78:f9:
                    d1:aa:b5:df:15:15:80:c9:fb:f5:f6:23:5c:aa:c3:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:A7:35:39:29:1A:8C:51:CC:BC:F5:3A:E5:60:8A:CB:17:88:70
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:32:85:3a:6a:3d:48:5b:29:ff:18:1a:7b:eb:65:ef:95:
         b6:12:be:9e:cc:5c:e2:5b:87:aa:48:e4:d9:4e:83:e3:d8:f2:
         bc:87:9c:fa:98:2a:ae:7e:3d:ad:e4:d4:78:c6:76:13:00:6a:
         7b:48:a8:15:5b:dc:5d:c5:73:69:9e:e5:2a:ab:d5:23:d6:ea:
         8e:1c:1e:80:ff:42:54:69:cc:94:36:44:35:96:cd:c0:4e:72:
         d8:68:99:12:94:bd:74:c3:a7:e9:4b:01:64:2b:f7:7c:88:21:
         32:0d:c1:24:da:83:fd:31:b8:79:9a:5c:e5:c0:15:bf:60:10:
         2a:ec:f4:93:90:66:3d:b4:71:a7:4e:2f:43:c7:a9:16:f7:0b:
         c8:25:d7:70:3b:83:bf:f8:3b:c7:b2:8a:a5:af:c4:35:d0:da:
         7c:79:c3:f6:64:e5:0e:34:8b:ce:b6:33:4e:65:38:52:19:87:
         8e:90:90:80:70:2a:e1:5b:ab:a6:03:74:49:da:b8:05:1d:a3:
         ca:3b:e6:2b:4d:c9:4d:73:68:be:aa:f8:92:7d:c1:f2:9c:0b:
         36:b1:31:2b:2d:f7:ec:09:c2:d6:cb:2f:8e:7c:54:be:3d:a8:
         66:a3:1d:51:07:e0:9b:03:f2:cd:14:95:eb:20:2b:c4:b6:3a:
         4a:8a:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:56:33 2024 by rpki-client on console-ams.rpki-client.org