Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          7wfR2e22/5f5CS6ucKUG/QElZzinmnsnUhDbh3RY68Q=
Subject key identifier:   C7:14:E1:3E:5E:33:D3:4C:CF:83:8C:AB:17:69:4F:D0:43:7B:26:ED
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       18B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          1885
Signing time:             Sat 18 May 2024 16:54:42 +0000
Manifest this update:     Sat 18 May 2024 16:54:41 +0000
Manifest next update:     Sat 25 May 2024 16:54:41 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: e550R/puRQwr9/N6ukUlp2LoxHrOS+DiwOPdn8YsOQM=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0MbEEF6kdeQjNwgqumeC95sMb4C/GqBWTbNRh51G8ek=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: B8J4z4SHT1xw/Zl5RJwd8aAIUXPGiKqlrnvZuj9+G/g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6323 (0x18b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: May 18 16:54:41 2024 GMT
            Not After : May 25 16:54:41 2024 GMT
        Subject: CN=6648dd51-2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:29:89:09:23:b8:00:e6:ae:8e:2d:a4:49:e4:
                    c2:1a:9f:25:d7:e1:2a:17:e6:41:a2:9e:4d:0e:b9:
                    20:f7:e7:03:5a:74:11:d9:2f:bf:75:14:8c:ff:a3:
                    b7:a2:86:4d:b8:36:53:f5:a3:3d:a9:04:d0:4f:09:
                    87:93:54:ba:ae:95:c3:26:98:06:21:27:9d:12:82:
                    bc:3e:3c:99:18:4e:91:71:21:04:0c:a2:55:fd:91:
                    f6:5e:f3:03:84:ee:b2:3b:81:20:7c:29:04:af:56:
                    b5:5d:e1:31:c0:ee:fe:40:09:c1:79:16:db:d2:f1:
                    0a:75:05:0f:83:7b:ee:31:3c:3f:b0:ab:1e:7e:03:
                    59:9d:69:1f:56:b3:34:ed:dd:22:e9:a4:6b:a2:e5:
                    6b:61:76:f5:c3:08:f9:a3:ec:1f:2b:e7:88:b1:df:
                    f4:69:c6:f8:3f:34:8f:00:70:42:f8:2d:7b:ae:78:
                    2b:46:93:59:bc:a4:ea:14:42:1a:91:dc:97:10:a6:
                    12:72:42:85:b8:03:27:3c:58:71:6f:46:dd:41:c1:
                    f0:8c:86:a2:52:4e:21:6f:4b:77:c1:19:0e:5c:1b:
                    81:b3:b4:fd:7d:6b:02:e8:42:d3:d0:cc:fb:cc:62:
                    ae:fe:14:a3:9f:77:fa:1e:65:27:b0:4a:c3:9a:19:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:E1:3E:5E:33:D3:4C:CF:83:8C:AB:17:69:4F:D0:43:7B:26:ED
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:43:d2:55:b9:f9:a4:b5:a6:99:1b:b8:3b:71:86:0f:62:
         53:81:67:25:86:24:03:10:f2:3b:c2:53:46:e5:a4:25:2f:88:
         93:4b:4c:6d:fb:04:72:2a:f7:eb:56:43:ae:66:10:2c:05:8f:
         6f:4d:5f:db:fd:95:3d:5e:ae:03:9a:9c:97:93:47:a2:e0:ab:
         af:33:d7:07:b2:a1:14:62:30:c9:24:9c:7f:97:30:48:f9:45:
         0a:9f:79:5c:06:ff:3d:29:34:33:81:46:a8:0c:79:07:da:bf:
         f9:cd:81:a0:5e:4e:0d:f6:b4:ac:b0:34:56:0c:d9:5f:b2:a7:
         06:21:70:76:23:0c:cc:f0:f5:44:11:b6:e4:d7:95:a1:b1:fa:
         1a:6d:61:3b:75:73:5d:7b:c4:4b:6a:46:5b:67:19:10:db:34:
         9d:7b:87:c3:ca:12:d6:88:39:4e:2a:21:ee:3a:6b:92:ff:44:
         8c:7d:ea:f3:87:b8:44:36:c2:2a:db:a7:15:c7:1f:e9:74:5f:
         e5:97:69:16:df:34:e2:a3:6c:fc:48:4c:3c:b3:90:95:e7:35:
         43:28:47:d6:8c:4e:68:51:ee:21:25:f7:00:ef:c3:7d:c4:16:
         b9:a1:56:ca:88:cb:00:ba:f6:c3:30:5d:98:1b:9a:34:94:f3:
         df:98:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org