Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
File:                     JVLURML17uUkxsAbqk-d8rrsoqo.mft (raw, json)
Hash identifier:          37IqV7RnBVN+DyWc9V9gLQWE5DNrPPGeiPd0iMlKqzc=
Subject key identifier:   BD:76:F8:5B:DB:19:0A:C2:5A:65:4C:CF:5C:FF:47:A5:16:33:26:33
Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA
Certificate issuer:       /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
Manifest number:          04E4
Signing time:             Sun 19 May 2024 01:20:59 +0000
Manifest this update:     Sun 19 May 2024 01:20:58 +0000
Manifest next update:     Sun 26 May 2024 01:20:58 +0000
Files and hashes:         1: JVLURML17uUkxsAbqk-d8rrsoqo.crl (hash: MqXWmTMzmL0MRaZqgUCeVQ8fXS+WGfmy/OZtEyCCC5w=)
                          2: C4563C423ABB11ECA7767769C4F9AE02.roa (hash: XQJ5AwXGz7YL0X6EgI6VQJCUZgm5JlBPEJdhdl5rPJE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl
                          rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
        Validity
            Not Before: May 19 01:20:58 2024 GMT
            Not After : May 26 01:20:58 2024 GMT
        Subject: CN=664953fa-6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:39:36:0b:49:84:29:3b:22:27:f2:7f:a0:
                    62:93:03:48:dd:91:64:88:3d:39:be:27:c1:56:18:
                    ae:18:21:50:ec:55:86:ca:71:90:28:d9:f1:d0:c9:
                    ec:ae:1b:6f:ea:ab:15:49:a6:ef:71:ac:61:dc:91:
                    13:1c:bc:c8:5f:dc:60:51:c4:43:1b:6f:09:6b:54:
                    26:d2:bd:9d:c8:e5:a7:88:c7:cf:80:b9:04:83:29:
                    5e:30:f9:c0:35:f2:ee:54:ca:9a:2f:f3:52:14:3c:
                    30:b5:2f:ab:db:44:c6:f3:45:f3:30:52:68:26:9a:
                    31:0f:1b:1f:72:32:18:66:e9:06:92:d5:b8:27:86:
                    4c:cf:db:ea:ae:87:dc:b7:f7:56:16:fa:77:e9:bb:
                    06:24:1c:3e:a5:08:c1:b3:5e:b0:92:32:6d:72:a8:
                    5d:07:3a:23:c2:d0:44:3c:5e:2b:78:40:91:1c:77:
                    d0:f7:48:49:a4:a9:a1:bc:00:f2:d0:27:a1:af:ab:
                    47:df:14:43:8c:d1:d7:fc:4a:5d:4f:ba:86:a7:a3:
                    b3:25:54:59:2d:e5:70:e7:5c:01:fc:74:e9:7a:61:
                    fc:43:5b:fa:12:09:62:8c:80:62:95:90:e3:70:b4:
                    3a:36:b4:c7:86:87:28:3d:d6:f0:03:99:54:4f:e7:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:F8:5B:DB:19:0A:C2:5A:65:4C:CF:5C:FF:47:A5:16:33:26:33
            X509v3 Authority Key Identifier:
                keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:46:cf:0f:0b:c2:8a:da:b2:eb:95:e0:6d:b4:7d:4f:d0:86:
         14:ed:fb:b5:44:c5:c8:99:bc:fd:a1:03:d9:aa:91:bf:b5:88:
         1a:e2:16:14:4f:48:b4:09:80:22:5b:77:70:ec:b0:50:64:54:
         50:45:22:43:9b:e2:49:c0:5e:01:4f:e7:7d:13:12:c7:fd:a9:
         83:ff:18:dd:05:ad:05:df:11:67:cb:8a:67:88:7d:f9:77:b1:
         6b:ab:1a:d1:f8:28:58:f4:77:51:15:e4:a3:d2:f3:19:c3:4c:
         6b:86:b0:b7:c0:0d:2e:99:fd:4f:4e:07:dd:00:ec:7a:d5:93:
         8e:39:87:6e:f8:2e:98:18:7a:c2:4d:42:92:8c:1d:bb:f1:c6:
         c2:7a:da:75:17:65:c6:f1:7d:f6:cf:b8:6d:01:76:7b:34:97:
         13:ef:ed:30:68:08:92:f9:9e:18:66:97:e1:31:47:b9:f1:21:
         47:cb:78:44:bf:15:f4:77:d9:b3:c2:ff:7c:72:e2:d3:4c:f8:
         99:53:35:09:83:2b:91:32:e1:c4:75:6f:ae:75:5d:40:f3:21:
         0e:66:7f:c3:b4:45:c7:e2:b5:45:c6:20:8a:8b:1b:79:17:28:
         f5:73:4c:60:ae:ea:4e:84:33:5a:40:b0:d6:bf:64:08:0a:be:
         ac:62:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org