Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
File:                     jhahBq30E6__xY8QEZJ09wDPpZM.mft (raw, json)
Hash identifier:          WoK1j4s8jZPCo2NEJor0i4w0U6W3Odvs+X1+OZkeYKE=
Subject key identifier:   18:88:DC:1F:9B:EB:7B:EF:E5:FA:28:4E:4B:C8:AF:7C:B3:BC:92:33
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
Manifest number:          01FF
Signing time:             Sat 23 Nov 2024 01:37:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:37:19 +0000
Manifest next update:     Sat 30 Nov 2024 01:37:19 +0000
Files and hashes:         1: jhahBq30E6__xY8QEZJ09wDPpZM.crl (hash: kXHeDkr8OiGWj17r+xMaZxqdHE8sFkTiYYemQqs3PWg=)
                          2: 92F8EAF428F511EDA8D1655FC4F9AE02.roa (hash: eWEKn2C8Q5U4Dbtdbo63L8x5F49ZJgmIxX3AKCcfHMU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Nov 23 01:37:19 2024 GMT
            Not After : Nov 30 01:37:19 2024 GMT
        Subject: CN=674131cf-5d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:ee:ab:6f:07:44:a5:c3:4d:d7:f3:c3:95:
                    45:6e:8a:93:e6:9c:99:6d:53:95:1e:37:fa:d0:4b:
                    dd:e4:30:ca:73:3c:0e:cf:2f:cb:76:8c:37:cf:1c:
                    6d:21:d9:80:c8:92:d9:31:81:90:dc:10:a7:a7:3d:
                    ab:9b:49:27:e3:8f:c6:3f:4e:d0:7e:89:fe:5d:33:
                    de:9d:4d:5e:13:72:d0:b6:c1:77:59:c6:2e:d1:c1:
                    3b:05:63:e6:a2:a6:56:d4:6b:cf:a3:19:2e:a9:bf:
                    90:a3:93:83:b1:bd:8b:fe:ee:93:44:19:30:fd:4a:
                    0a:84:29:69:29:9e:01:c8:af:1c:9b:79:f3:55:c8:
                    57:bc:53:af:73:ed:56:99:44:40:b5:90:3a:f9:34:
                    d5:4e:de:da:95:cb:3e:2f:9f:22:5f:72:63:13:73:
                    79:04:22:22:b0:cb:95:97:c0:4b:8f:62:f9:50:15:
                    fc:ae:b3:a1:7f:b9:e2:49:a4:8e:c0:9c:6a:1d:c8:
                    92:b9:36:f6:02:14:44:6a:bb:d9:4b:29:95:a6:f2:
                    a5:32:7c:90:33:e1:6b:ed:bb:d0:9d:2a:82:5b:ed:
                    82:f2:da:12:77:c0:a8:94:e9:cd:dd:51:26:cb:b1:
                    c2:40:fa:39:3e:83:e7:4e:8d:24:43:04:f6:f9:78:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:DC:1F:9B:EB:7B:EF:E5:FA:28:4E:4B:C8:AF:7C:B3:BC:92:33
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:07:2e:ec:fd:6a:15:d1:b1:a4:9d:af:8b:72:93:7e:1b:61:
         4b:6c:1c:7f:c3:43:97:20:2d:e0:ae:02:60:11:6a:ee:2c:76:
         50:00:17:31:41:7d:43:c8:57:28:39:82:ef:13:42:ef:5f:3d:
         63:98:46:94:5b:6b:5f:95:0c:95:e8:71:8b:1d:45:c3:1e:d3:
         9e:41:25:d3:e4:5d:d9:87:fc:f3:fa:16:75:84:2f:5b:62:fe:
         33:bb:e9:45:9d:3b:3f:d7:e8:e1:4f:07:c7:e5:39:31:d4:2b:
         e5:e3:7c:69:b5:ce:78:48:a7:c6:3f:c2:d7:e0:51:74:16:21:
         3b:ee:39:8e:7b:a5:85:a0:d7:52:4e:3a:98:1b:c6:0f:cb:78:
         54:72:8e:0c:77:ec:2c:a3:a6:2f:94:15:33:1d:7c:8b:d2:a0:
         ab:8a:43:17:74:85:68:e3:c7:ed:bc:00:4e:04:f8:ad:76:4b:
         01:48:e4:c0:dd:ab:6f:41:0a:08:68:64:a1:14:f7:f4:cb:53:
         f9:58:1b:2a:bf:2d:d3:00:d6:24:c6:68:1c:dc:ca:c5:cd:f8:
         f3:e3:84:5f:8e:3b:3e:4f:58:a3:7d:2f:1c:8c:09:25:92:d2:
         13:15:1b:03:ce:f5:8c:1b:30:f8:15:f6:eb:f4:df:86:46:41:
         0e:a4:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org