Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          C9dy+GDEKX8gePV8Pf/89yurOCCo7CPPxLdalLyWZds=
Subject key identifier:   90:6E:24:18:3F:37:B4:11:82:EB:DF:1C:E4:7C:14:37:60:E7:9F:96
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          F4
Signing time:             Sat 23 Nov 2024 03:28:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:28:28 +0000
Manifest next update:     Sat 30 Nov 2024 03:28:28 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: FOcMTaVuWfIV/4FIMR+bijXv5IA1ZRFp3Cr5cYaCB3I=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Nov 23 03:28:28 2024 GMT
            Not After : Nov 30 03:28:28 2024 GMT
        Subject: CN=67414bdc-4513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:9d:86:5b:46:7b:40:2b:e0:07:9f:64:3c:
                    5b:f3:05:bf:e6:e3:bf:86:e2:04:28:b1:0e:6a:aa:
                    4d:ed:a6:18:2b:b6:52:d5:43:f0:ca:ed:80:da:bc:
                    88:29:85:f7:21:ac:cf:82:20:03:4c:e8:85:54:c4:
                    19:be:9e:82:b1:62:78:6b:23:57:e8:49:62:93:39:
                    72:fb:11:df:55:2a:0d:6b:89:aa:3d:5d:00:8b:04:
                    cc:14:38:3b:d4:77:e6:86:88:05:a0:b0:91:ab:8a:
                    0a:bf:9c:65:e2:4f:5e:f8:12:f4:b7:3a:d6:62:f7:
                    67:ce:57:e6:69:4f:7e:9a:c4:68:69:30:99:d5:5d:
                    fc:ac:2a:83:19:8e:fe:07:5a:29:67:48:28:cf:28:
                    b8:20:e9:1f:1f:0e:41:d5:d8:55:f6:c7:25:06:4d:
                    bf:d5:64:3a:7b:02:54:70:6a:e8:6c:99:23:0d:ed:
                    d1:06:0f:88:98:29:70:11:22:e8:74:c1:84:c1:16:
                    e5:39:db:03:07:96:9e:1f:5d:f8:60:60:2a:6d:fd:
                    13:e1:29:ba:9e:46:1c:1f:c6:d2:3e:68:0a:7f:c2:
                    1b:51:f4:65:f4:a2:24:23:9e:eb:14:98:a7:4a:63:
                    0b:0f:8a:4e:a0:c1:40:04:6a:1e:62:1c:cd:fb:e5:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:24:18:3F:37:B4:11:82:EB:DF:1C:E4:7C:14:37:60:E7:9F:96
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:d3:1d:9b:31:b4:66:4d:97:67:06:57:47:39:3f:5a:46:
         26:57:e7:3b:08:d4:28:e3:12:b0:75:90:2b:92:ab:22:f3:d1:
         2c:eb:5c:1b:32:8f:78:e6:a5:f2:4b:d1:55:87:8a:c9:27:38:
         12:1d:2b:1d:65:bf:36:78:74:93:53:7c:72:ef:f1:3c:83:2f:
         2d:5e:b2:cb:d7:fe:5b:c8:82:01:2c:95:d7:8b:5e:cc:d8:b1:
         03:a3:2b:f0:e8:71:6d:d2:35:ef:a1:80:fe:7a:44:d5:66:75:
         70:e1:7d:b6:14:6f:31:ee:de:69:3b:05:22:f3:66:49:74:d6:
         c4:6e:a1:e8:0e:7f:37:1c:46:18:0a:8e:1d:60:7e:b7:7e:48:
         f5:40:8e:81:ce:0e:3c:d8:b7:ac:b0:10:ae:40:e9:01:08:e4:
         3e:5b:11:54:e5:ef:81:ab:80:64:ae:c6:39:e8:c1:30:67:f4:
         99:54:9b:12:a3:5b:cf:f8:7d:f9:91:fa:67:05:0c:3a:8e:47:
         f6:02:c6:c9:38:d8:4f:ce:b3:29:5a:2e:1f:e9:39:55:79:eb:
         b8:31:81:04:bb:2f:b4:73:a7:91:25:1a:8c:e9:6a:b9:3d:82:
         e1:61:be:f6:e5:dc:0d:87:c0:75:5a:6d:6d:86:5f:f1:96:28:
         57:6f:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org