Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          KXsRX35aSJ2cbypiZJWAZ+4pOXCUvKDVJ4e2Ou3hWhk=
Subject key identifier:   3C:93:62:2E:EF:DF:F8:2F:42:32:29:91:C0:4D:FE:A9:24:F2:58:A1
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          0261
Signing time:             Sun 19 May 2024 03:50:44 +0000
Manifest this update:     Sun 19 May 2024 03:50:43 +0000
Manifest next update:     Sun 26 May 2024 03:50:43 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: wGwX0wJnAGmLV0GEwrmhtXO6UaFNjOFlRAVUta+DqVY=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: OYNdYi1bozxcaoUI6QQq6o5EstuNZsTp1pz8ri3kBn0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: May 19 03:50:43 2024 GMT
            Not After : May 26 03:50:43 2024 GMT
        Subject: CN=66497714-8241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:07:00:a3:73:79:fe:6c:07:d9:6c:a9:61:
                    de:e0:42:85:e4:cb:d6:70:92:aa:ed:d6:cf:5e:1b:
                    68:51:5c:43:f0:75:c0:e1:ae:ae:61:19:c6:0a:6a:
                    e0:60:24:ab:d7:3b:63:76:49:ec:5c:23:e3:a1:f1:
                    b0:c0:fd:f0:f0:b5:5e:6b:4e:99:85:2e:b0:e6:6d:
                    14:e3:00:6f:da:e4:9a:f0:79:4d:0b:7e:24:e4:f7:
                    e9:51:18:86:26:e7:53:ee:eb:b7:75:88:10:38:0b:
                    2a:35:fd:fc:0c:9b:3f:09:df:fb:39:7f:9d:5a:e5:
                    be:aa:fd:7e:06:c1:e1:0d:2b:24:6a:4d:f5:79:c3:
                    24:30:a1:d4:e0:3e:67:cd:0f:90:4d:28:eb:6f:0a:
                    43:e9:1c:66:6d:cd:9f:28:ff:46:ba:2b:e6:44:c6:
                    ce:7b:46:c9:ac:58:0c:8b:ae:8f:f0:2a:1d:28:63:
                    a8:92:c1:3c:8c:93:41:2a:27:dc:cb:8a:5f:83:68:
                    f7:6f:e6:47:d9:0b:99:02:3b:e7:cb:6e:6d:f1:93:
                    56:dd:ec:12:fc:8f:4c:cd:22:7e:fc:e0:c5:02:b0:
                    01:80:69:18:11:d3:c9:00:ab:c8:a4:8c:03:71:37:
                    2d:43:41:47:65:0f:ea:0f:27:a4:46:fb:c4:e5:1e:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:62:2E:EF:DF:F8:2F:42:32:29:91:C0:4D:FE:A9:24:F2:58:A1
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:3e:81:da:c3:85:14:e5:a3:9e:6f:3b:1e:7d:36:68:c6:
         87:4f:b5:7a:59:70:b6:73:f1:d3:cd:f6:28:e1:10:1e:01:91:
         91:4f:b7:07:29:56:1f:be:49:4e:c8:27:09:1e:43:ec:05:ac:
         d6:bf:29:66:4f:80:3b:bc:8e:96:02:f7:c6:b1:bb:5b:8e:6d:
         6b:b3:bc:52:78:6e:d1:e8:0a:06:92:57:ee:52:9b:97:61:56:
         01:ce:13:f1:66:a1:39:10:74:d3:f0:de:48:9d:87:ec:71:61:
         56:2a:bf:21:aa:ff:57:52:ac:4e:c5:42:45:e4:39:73:7b:dd:
         a4:bd:7b:a9:f6:22:0a:2b:9e:ba:6c:81:9a:81:1e:7c:97:8b:
         b2:5b:a5:c3:d8:1a:96:b7:64:28:83:2e:b5:07:db:a4:e6:cd:
         71:92:31:70:de:43:97:cb:bc:72:cd:d8:33:cd:7a:4a:bd:d4:
         31:ff:f6:1b:f5:84:d4:13:45:62:de:21:3e:6a:2f:d5:73:b5:
         2a:56:78:88:be:5b:76:82:82:7e:01:0a:1e:df:70:b1:e5:a7:
         05:ba:65:5c:be:16:d4:3f:c9:b3:c1:69:b4:d8:8b:7b:ee:62:
         7c:12:c1:46:94:4f:98:50:00:d2:af:d1:eb:3d:66:d0:22:1e:
         da:99:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org