Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File:                     Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier:          QRGH8Iuqaug2BnHfAEG/DsPmh5lH2QsUWPrsiHxVibo=
Subject key identifier:   25:60:9E:2B:B5:8B:C6:43:48:F2:D3:F1:3A:39:D8:7E:76:28:09:F3
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number:          04C6
Signing time:             Sun 19 May 2024 01:24:31 +0000
Manifest this update:     Sun 19 May 2024 01:24:30 +0000
Manifest next update:     Sun 26 May 2024 01:24:30 +0000
Files and hashes:         1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: Y95IpnkrvISg917eDAfQ9eTdhEY1ac+jlSB3Mb+PGWQ=)
                          2: 859FFE90D9B111EBA2B24243C4F9AE02.roa (hash: otixXu8i9YahARC25LtB9KIuLdHbhqBEx9lF6Uow8C4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: May 19 01:24:30 2024 GMT
            Not After : May 26 01:24:30 2024 GMT
        Subject: CN=664954ce-6bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:3c:08:91:b3:7a:2e:95:ae:9f:59:0e:60:
                    e8:fc:dd:14:67:34:1b:98:95:e5:eb:1f:e7:6d:e2:
                    89:57:b5:9c:55:5b:af:c2:f7:ff:bd:87:b6:ba:ea:
                    4c:d1:63:fa:4f:cd:ef:81:cb:91:37:8e:f5:32:36:
                    98:d0:c4:e1:42:28:24:11:4a:1a:35:61:b1:25:99:
                    fb:f6:68:31:c0:10:b2:40:7e:13:8a:e4:a3:08:ca:
                    08:12:4d:6c:a8:23:58:2a:1b:57:d4:b7:42:40:a9:
                    ea:ad:e7:96:56:b3:45:84:52:f7:66:8c:2a:5f:3e:
                    9b:e6:74:7d:a4:27:f0:06:65:68:e1:5b:62:b7:1c:
                    58:28:a4:b1:44:6a:a5:6a:75:03:b2:e9:68:47:91:
                    1f:c5:6f:73:b5:41:80:52:a2:30:5b:37:60:19:a4:
                    eb:e4:09:e3:af:68:ab:fa:fb:23:33:df:8c:07:96:
                    34:4e:0c:ff:da:68:db:a2:9a:a7:ec:b3:2b:80:ee:
                    29:59:ee:ff:be:50:91:46:b9:ee:7e:79:bf:4c:45:
                    39:ee:af:71:23:c5:ab:6f:86:3d:66:25:68:e0:12:
                    a0:9b:1e:dd:90:b8:8f:f6:f5:c7:0f:9b:22:5e:2a:
                    ba:64:c0:d5:b4:ab:e6:98:81:4c:7f:c9:1f:b4:88:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:9E:2B:B5:8B:C6:43:48:F2:D3:F1:3A:39:D8:7E:76:28:09:F3
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:93:48:dd:b9:b9:c0:a0:69:22:8a:c9:aa:b5:f6:03:24:7a:
         8b:df:8b:5e:87:26:e3:df:b4:e8:d8:e9:1e:22:2a:1d:70:49:
         79:be:c6:fd:6d:a4:5e:52:d3:f8:fb:65:0d:da:2a:4f:14:54:
         77:58:22:c1:9a:d8:99:f7:3a:eb:a7:db:2b:96:03:5b:71:95:
         16:c8:14:f4:79:aa:a3:2a:ee:c8:ee:2d:cd:5f:81:d5:15:ae:
         3a:3c:1f:69:74:e9:e7:71:28:2f:4e:aa:0d:1e:0d:c0:a8:72:
         d0:b8:59:3f:7d:a8:ef:52:dd:3c:d4:d8:90:d2:c4:f8:2f:cd:
         e0:88:78:11:cf:e7:1f:af:bf:89:8b:30:e0:bc:a4:55:fa:5a:
         46:bb:8f:52:9a:f4:33:ac:8f:f0:14:9c:7e:da:d6:24:64:29:
         53:fb:4d:ab:c2:e8:6b:03:c5:af:aa:d7:1e:e0:50:a0:ae:a7:
         57:84:94:00:0e:09:9f:55:8f:5d:79:14:35:96:29:ce:1f:6f:
         22:b5:50:6d:dd:2e:60:25:37:f6:90:43:15:01:5f:1b:cb:0c:
         bd:13:84:3d:96:d8:4f:3d:64:8c:23:4c:1f:08:a5:af:c3:3a:
         2f:07:36:ad:3d:27:f8:78:9e:ee:a4:68:fa:06:b6:84:29:34:
         6a:75:a9:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3
M0NGQkY0REYwHhcNMjQwNTE5MDEyNDMwWhcNMjQwNTI2MDEyNDMwWjAYMRYwFAYD
VQQDEw02NjQ5NTRjZS02YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Ts8CJGzei6Vrp9ZDmDo/N0UZzQbmJXl6x/nbeKJV7WcVVuvwvf/vYe2uupM
0WP6T83vgcuRN471MjaY0MThQigkEUoaNWGxJZn79mgxwBCyQH4TiuSjCMoIEk1s
qCNYKhtX1LdCQKnqreeWVrNFhFL3ZowqXz6b5nR9pCfwBmVo4VtitxxYKKSxRGql
anUDsuloR5EfxW9ztUGAUqIwWzdgGaTr5Anjr2ir+vsjM9+MB5Y0Tgz/2mjbopqn
7LMrgO4pWe7/vlCRRrnufnm/TEU57q9xI8Wrb4Y9ZiVo4BKgmx7dkLiP9vXHD5si
Xiq6ZMDVtKvmmIFMf8kftIiwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVgniu1
i8ZDSPLT8To52H52KAnzMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4
QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0
VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWk0jdubnAoGkiismqtfYDJHqL34tehybj37To2OkeIiodcEl5vsb9
baReUtP4+2UN2ipPFFR3WCLBmtiZ9zrrp9srlgNbcZUWyBT0eaqjKu7I7i3NX4HV
Fa46PB9pdOnncSgvTqoNHg3AqHLQuFk/fajvUt081NiQ0sT4L83giHgRz+cfr7+J
izDgvKRV+lpGu49SmvQzrI/wFJx+2tYkZClT+02rwuhrA8Wvqtce4FCgrqdXhJQA
DgmfVY9deRQ1linOH28itVBt3S5gJTf2kEMVAV8bywy9E4Q9lthPPWSMI0wfCKWv
wzovBzatPSf4eJ7upGj6BraEKTRqdalq
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org