Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
File:                     D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft (raw, json)
Hash identifier:          5zJFBtqBIbiN30kSDifW/mXpgUPPEkD+8eGligwdivo=
Subject key identifier:   67:23:51:02:95:7F:6F:B0:A6:D4:F6:DE:AF:16:4B:92:EA:56:AF:93
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Certificate issuer:       /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial:       7F9AD10BE4B2D75629F1D5BC298CEC0138C13562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
Manifest number:          015D
Signing time:             Fri 17 May 2024 01:19:30 +0000
Manifest this update:     Fri 17 May 2024 01:14:30 +0000
Manifest next update:     Sat 18 May 2024 02:30:30 +0000
Files and hashes:         1: 3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa (hash: lAIKGbxFVCbuZH4Unn4B5dmf+xIFD6IcrD7k7TnBr/g=)
                          2: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (hash: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=)
                          3: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl (hash: OOIK7JKDbfwo/wrL+zUQf3psUGWGnQUkdYMJgtKDnbA=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 02:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9a:d1:0b:e4:b2:d7:56:29:f1:d5:bc:29:8c:ec:01:38:c1:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
        Validity
            Not Before: May 17 01:14:30 2024 GMT
            Not After : May 18 02:30:30 2024 GMT
        Subject: CN=67235102957F6FB0A6D4F6DEAF164B92EA56AF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:33:86:fe:a6:5e:d3:cd:d3:d9:28:14:b8:
                    71:b6:1a:fe:64:7c:ad:76:e6:31:14:29:a5:bf:ab:
                    b7:14:29:4e:a2:66:dd:44:c6:be:0e:a5:de:ee:7d:
                    2e:89:da:b6:fa:88:d6:d5:25:5d:25:d1:79:4f:14:
                    9d:8f:57:e6:6e:f8:32:14:83:d2:cd:3e:af:87:9f:
                    e1:7e:f8:89:f6:b1:9f:85:8a:87:ed:35:65:05:9c:
                    9b:8e:5c:22:3c:57:f5:df:52:1c:f4:bd:35:82:0c:
                    d3:8e:56:e0:21:21:3c:c4:4d:9d:eb:d6:ff:50:87:
                    84:b9:04:9c:df:bc:80:09:87:22:73:78:e9:b0:31:
                    4d:0a:81:cc:d2:b5:a0:29:85:d5:18:bb:9e:80:29:
                    06:69:30:e8:02:ac:e1:41:4f:2e:02:74:1a:ef:59:
                    cc:2f:22:d2:13:e5:3f:8e:89:3d:81:03:9a:39:8b:
                    fb:c2:1d:d2:ae:80:06:68:a4:b4:22:cf:e4:20:cb:
                    43:82:51:a9:d2:0b:85:9c:bd:68:6f:0a:e8:b7:49:
                    d1:05:b4:44:54:9c:9e:66:97:50:99:c9:5c:f9:4f:
                    7e:a9:d9:e8:91:b5:bf:fa:2d:41:af:42:72:5c:79:
                    bf:04:a5:3a:a8:7e:60:6a:0c:c1:fc:d4:20:bc:a0:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:51:02:95:7F:6F:B0:A6:D4:F6:DE:AF:16:4B:92:EA:56:AF:93
            X509v3 Authority Key Identifier:
                keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:01:26:e0:3d:37:8d:85:e4:5c:71:87:65:27:9c:f8:ab:d9:
         24:a6:2d:fe:4b:dd:c5:d2:84:6e:8d:04:91:1a:b9:1b:99:23:
         ae:99:01:3f:98:26:5c:66:c4:4f:ab:dc:ba:6e:8c:79:17:58:
         44:9d:a1:d1:33:ac:36:d6:19:af:92:fe:4c:3e:4f:b1:e9:21:
         43:d7:17:b1:50:0d:18:8c:23:b0:4d:6c:d1:18:40:da:cb:b1:
         73:c1:ff:59:2f:73:b4:7a:13:ce:38:73:90:4e:2c:cc:90:ab:
         95:6c:29:dc:ca:18:85:ec:ad:d2:b8:d5:82:83:fc:1e:a2:41:
         ee:72:d8:85:11:a3:9b:2d:b3:8e:ee:52:c8:0f:bd:dc:4a:1f:
         b0:16:b2:2d:83:b9:1c:31:f1:63:e9:d3:60:10:60:51:0b:ce:
         54:88:57:41:26:2a:29:21:03:df:56:e3:55:81:50:50:e3:69:
         df:23:db:82:2d:51:ce:a9:2b:39:05:41:9d:f6:53:a5:ba:ca:
         a6:ca:3c:09:7b:1d:11:27:1b:7c:bb:29:d5:04:40:9f:dd:e5:
         08:9f:15:7b:f4:e5:f8:47:39:c5:91:78:91:11:0e:39:f2:06:
         fd:ef:e6:43:a4:26:36:7b:13:7d:fd:98:d2:cb:78:7e:5a:35:
         d1:ce:19:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:03:22 2024 by rpki-client on console-fra.rpki-client.org