Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          jsCxQHV5988zknToqHnFaTMx2wXUmzvFWqlFHJDpjB0=
Subject key identifier:   79:92:E1:0E:56:32:29:29:D9:0B:52:32:8F:6D:DB:8D:2E:D3:67:7D
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       160F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          15F0
Signing time:             Fri 31 May 2024 17:26:45 +0000
Manifest this update:     Fri 31 May 2024 17:26:44 +0000
Manifest next update:     Fri 07 Jun 2024 17:26:44 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: qES00gS+o+cSz5dGaZXOjpw+JkJ3NWGp2sG7eAsCo88=)
                          2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: jtrDIzEgJPw4GA1319KiWlklWXzfvc/n6mX65D7ay5s=)
                          3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: bTTt1DvpxuFx5YZflQWK2Y/CXtgXfthc+RWEVSQ2v+c=)
                          4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: yjky08AQY+dPwyP69s9GLdixTPFDsx3cxvRcWPlEUr4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5647 (0x160f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: May 31 17:26:44 2024 GMT
            Not After : Jun  7 17:26:44 2024 GMT
        Subject: CN=665a0854-84d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:27:21:fb:d8:10:de:25:72:7d:10:e1:08:
                    0d:37:68:b4:8c:ca:ef:63:5c:68:fd:f9:bc:40:1d:
                    56:26:c4:e4:1d:3f:c1:91:e9:f3:7c:21:40:83:80:
                    f2:23:5b:82:92:58:4d:17:82:ca:b3:dd:75:d7:9c:
                    59:fa:8e:d7:6d:bd:59:80:25:13:66:5c:c9:73:19:
                    30:db:42:37:e5:10:16:6d:42:07:64:94:5a:6b:5c:
                    5c:59:be:fc:5e:ce:13:a0:4d:dc:11:00:99:66:fb:
                    e5:a0:55:02:2e:01:32:3b:7f:77:1b:e7:0f:da:c0:
                    09:e8:c8:bd:3e:eb:fb:1d:ff:92:0a:79:f1:d5:65:
                    1f:c5:94:9f:df:28:46:6e:96:26:fd:7e:88:f8:10:
                    fa:6e:9c:c1:d1:bc:20:8f:c3:09:19:d1:28:7d:7c:
                    7a:2a:41:8d:68:7b:63:50:58:d0:0f:09:71:ad:38:
                    ac:32:c7:85:71:a9:bd:d7:78:de:c5:98:da:46:21:
                    27:42:07:7c:00:09:e2:64:02:37:72:ce:1d:e8:13:
                    83:b9:7b:bb:f9:a1:53:b6:85:1f:ca:a6:f2:09:cd:
                    d8:d1:7b:6a:e1:ea:03:24:79:4c:c4:dd:39:59:4f:
                    54:b2:cb:84:ca:05:aa:5f:27:2c:d3:9d:2e:7d:c7:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:92:E1:0E:56:32:29:29:D9:0B:52:32:8F:6D:DB:8D:2E:D3:67:7D
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d7:26:d7:e8:14:1c:32:fb:04:47:1b:20:e3:48:2f:59:f8:
         e5:4e:f8:03:58:ec:3b:f7:45:7c:cd:e4:41:c1:29:e0:b2:58:
         61:63:4c:83:5c:dd:6d:1c:0e:50:61:fa:86:09:78:19:1d:4e:
         5f:f3:d9:6f:21:a2:95:a1:98:13:8a:de:32:5d:02:0e:68:ba:
         6c:51:7e:86:b4:6e:c1:a5:60:84:9b:b6:6c:75:ae:ac:44:57:
         af:31:43:a9:25:54:12:42:90:b0:dd:9c:61:71:7b:81:ed:eb:
         7d:c9:fc:78:1e:5c:9c:ed:83:95:2b:bf:b9:12:15:d8:27:b6:
         b2:c8:62:e1:c9:71:19:8d:28:8b:d4:7c:18:28:00:47:9c:0b:
         5f:1e:43:cf:29:31:de:76:2e:cc:54:46:12:cb:7f:44:3a:4a:
         bb:a3:67:a1:e9:0f:f0:58:d5:6b:e8:d5:39:b6:b1:5d:19:7a:
         8c:50:b7:28:43:b9:6c:86:63:21:74:f9:39:5a:25:b1:c7:8b:
         f8:35:29:12:79:da:d3:cb:f8:dd:c4:77:ab:16:0a:1c:ef:c6:
         81:84:d7:9e:15:91:9c:c1:96:eb:bd:c8:e3:41:50:46:17:7b:
         f0:5b:b9:e5:26:fb:1d:a1:87:61:94:da:b5:50:35:30:b9:d5:
         1b:59:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org