Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json)
Hash identifier:          fxKJmXA920VGWhdM6dB5Tvh/PWNzoVqrbHUOfFwfQuY=
Subject key identifier:   61:4E:AB:39:A4:0C:3D:B9:99:C3:F2:9F:79:28:C2:08:93:F6:58:08
Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Certificate issuer:       /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
Certificate serial:       056D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
Manifest number:          055E
Signing time:             Sun 19 May 2024 00:50:18 +0000
Manifest this update:     Sun 19 May 2024 00:50:17 +0000
Manifest next update:     Sun 26 May 2024 00:50:17 +0000
Files and hashes:         1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: 7TNQPqGrJn9b7qrvOsT0WXBRDfYQ4Fp85fRslafTgao=)
                          2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: 7qOaYOkc+cJibdAkW9Mq+aeVB2hFaZI/6GtBkIZWFMc=)
                          3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: E61+CB818GfsXrcJ8gThXhSUGu5GtZCEr7un9E1uU2A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl
                          rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Validity
            Not Before: May 19 00:50:17 2024 GMT
            Not After : May 26 00:50:17 2024 GMT
        Subject: CN=66494cc9-e684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:84:ae:30:08:4e:5e:d7:87:46:25:cd:ed:
                    c6:42:e7:ed:06:52:76:e7:fe:2b:d6:01:8a:fd:11:
                    60:72:69:33:9a:2a:13:b0:1a:79:81:7f:64:97:59:
                    7b:69:48:3e:3e:5e:a5:42:90:d6:44:71:8d:0e:e4:
                    78:6e:a1:90:de:9e:ea:2e:d1:af:fa:b4:0e:d4:ff:
                    fe:34:b7:68:8d:10:51:07:1e:6a:f0:c3:46:f5:04:
                    e8:07:68:d0:4b:6e:d5:1d:f0:6e:4f:4a:f1:e3:ab:
                    0d:8c:cd:d0:eb:d4:19:d2:86:73:2d:6a:3d:28:86:
                    e3:21:cf:52:4d:4f:ab:af:ec:ef:02:68:45:a7:69:
                    60:9c:e6:92:2c:cb:7d:94:08:82:92:c3:97:37:97:
                    54:c9:b1:11:7d:26:93:17:42:92:ee:f6:b8:16:f1:
                    fb:79:ad:fd:89:4a:68:ce:75:f7:50:0d:72:3b:71:
                    7e:ea:df:6b:f6:19:b0:c3:81:bf:91:73:cf:e3:0a:
                    26:50:d9:64:4e:c2:a9:9d:1c:68:2c:64:c0:df:6c:
                    97:2d:06:2f:6e:f8:f1:f4:dc:fa:fe:71:52:59:53:
                    2e:f2:f1:1a:0d:34:51:39:88:41:1b:e2:33:04:0e:
                    53:ea:c2:de:56:9f:89:98:4d:de:25:1b:9a:82:da:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:AB:39:A4:0C:3D:B9:99:C3:F2:9F:79:28:C2:08:93:F6:58:08
            X509v3 Authority Key Identifier:
                keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:86:33:3e:fe:e6:5b:e3:46:04:d6:aa:27:86:c4:51:12:8e:
         15:db:31:4a:cf:74:2d:0f:d8:ce:8d:b5:2d:73:5c:b1:4c:0d:
         96:7f:2f:f6:29:fb:20:96:0b:7a:41:72:3b:8c:69:0a:5d:b2:
         96:2e:1d:48:6f:f6:97:45:31:1b:99:1c:3f:3e:2b:cc:04:0a:
         f1:4c:67:7a:79:1f:93:c1:c5:98:14:d5:56:df:90:28:15:b9:
         e1:ef:ac:d5:d1:32:b3:a8:88:5a:47:11:de:72:48:d6:d7:31:
         04:04:65:52:94:c8:30:3b:ea:c5:ee:d9:ff:a9:a1:59:de:5b:
         4f:63:f4:ed:82:4d:18:b5:1b:ff:50:12:74:c1:c6:63:09:1a:
         3a:7d:4d:c4:d0:45:b9:fb:75:f1:4a:8a:e2:a1:ee:64:84:7c:
         f2:b8:ef:ea:69:69:40:a5:e2:11:95:c6:c7:8e:df:4e:7e:8d:
         63:c7:e1:04:e1:a1:fc:0b:e8:8f:16:7a:85:33:a9:d4:48:b0:
         91:32:61:33:71:ff:d7:fe:af:26:4e:7b:37:c4:0b:57:fd:81:
         58:fa:89:fb:9a:bf:1d:e9:ec:df:78:8b:61:b8:b4:8a:3f:11:
         06:d2:52:ad:d6:89:5c:96:18:46:3c:07:1d:40:6e:50:22:37:
         34:03:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org