Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft
File:                     jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft (raw, json)
Hash identifier:          y62QU2J1hL/053kAXzXtNXmJSYmK7Q8wMFoF0KbicaI=
Subject key identifier:   FC:32:55:71:E6:C0:FE:A5:07:D5:38:AB:C1:D2:D4:14:66:40:27:F1
Authority key identifier: 8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48
Certificate issuer:       /CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48
Certificate serial:       0E89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft
Manifest number:          1611
Signing time:             Fri 04 Apr 2025 17:49:20 +0000
Manifest this update:     Fri 04 Apr 2025 17:49:19 +0000
Manifest next update:     Fri 11 Apr 2025 17:49:19 +0000
Files and hashes:         1: jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl (hash: smp/1wTrOKurZbEtEA7bCq6jn68Zx6HuXUw59VszJ98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl
                          rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3721 (0xe89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDCF
        Validity
            Not Before: Apr  4 17:49:19 2025 GMT
            Not After : Apr 11 17:49:19 2025 GMT
        Subject: CN=67f01b9f-31a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:25:c1:d3:1c:92:bc:02:b6:dc:14:3a:4c:
                    23:ea:ff:97:6b:13:57:87:80:9c:c9:75:49:08:e0:
                    fd:07:77:1c:2d:9b:4c:af:72:18:8b:c6:4f:78:ff:
                    83:b9:61:3e:ca:0d:43:80:f3:78:ad:5c:62:98:19:
                    73:69:6c:50:0c:fe:c7:86:18:0b:90:d5:50:52:2c:
                    b9:6f:48:c9:cb:3a:59:5f:cf:32:db:ed:ba:7e:32:
                    41:ef:0f:fb:5c:7a:5c:1d:47:ee:c6:df:f9:67:f7:
                    cf:10:9a:82:02:6e:b7:42:82:7c:fb:a4:ec:de:ab:
                    82:dd:1f:a7:47:0a:ba:a8:e1:5c:d9:60:01:98:b8:
                    aa:27:f8:72:28:86:1a:ad:89:bb:5d:72:cf:f0:9c:
                    30:78:50:8e:0b:40:f5:74:99:a0:27:39:c7:87:ba:
                    54:20:86:fc:89:31:97:e7:c3:0d:7b:87:0f:f0:6a:
                    55:d9:a0:28:12:91:98:17:f8:be:47:c5:fb:f9:5d:
                    46:09:7f:ed:e6:38:01:46:90:3c:3e:6c:ae:3c:d2:
                    94:b9:b0:84:07:bb:98:6c:1d:c9:b0:1a:93:7e:8e:
                    7c:dd:f3:72:0a:a5:43:2c:0f:ae:22:3b:a1:39:e2:
                    7d:05:50:ea:1d:8d:e9:c4:ac:26:b6:fa:98:1f:8d:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:55:71:E6:C0:FE:A5:07:D5:38:AB:C1:D2:D4:14:66:40:27:F1
            X509v3 Authority Key Identifier:
                keyid:8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:94:38:b0:8c:28:9e:ea:28:4e:5a:0f:6f:11:45:26:67:64:
         4f:79:08:35:cf:6d:1b:a8:63:c5:aa:76:39:7c:a9:ca:8a:6f:
         59:7c:cf:57:d3:77:27:80:6f:6c:1b:cc:bd:3f:62:1a:2e:3c:
         eb:3a:71:36:ed:5b:ed:e4:66:49:77:91:3c:71:4d:23:8f:23:
         6e:d1:99:82:74:ce:e6:77:d6:34:86:3a:70:eb:9d:18:a0:9b:
         8b:3b:fe:36:b7:cc:36:85:b3:11:6c:09:2d:ce:bb:db:51:b4:
         34:c6:20:54:61:20:ab:9f:af:58:80:e0:34:c2:de:27:75:65:
         cd:ef:3e:06:e5:f6:c8:e2:3e:10:44:a3:96:57:07:34:36:cd:
         da:6c:f7:cb:70:29:33:16:81:82:17:a5:c1:0d:16:c5:96:99:
         0c:83:b5:56:c9:aa:34:d3:b8:48:4e:18:18:53:66:b3:61:4b:
         02:a1:75:fa:a0:03:76:e0:f1:14:72:86:35:d7:3d:a0:af:c5:
         19:92:ba:74:e4:53:2b:9e:c5:51:b4:1a:36:2a:2a:9a:40:6d:
         b5:6f:35:8c:75:22:93:cc:22:9b:fe:31:6a:2f:7a:d4:ea:9f:
         0c:a1:c6:bb:ad:44:52:72:e0:dd:d9:5f:8e:4b:d0:f7:f6:d5:
         6f:fc:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:06 2025 by rpki-client