Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
File:                     JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json)
Hash identifier:          OdBf4XEwtnJnk6nYTw3hNh/9XPOsNkgG5L/g7MBa59U=
Subject key identifier:   ED:84:79:57:00:9A:25:B0:18:10:B2:96:64:67:FF:CA:0E:01:9D:E7
Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
Certificate issuer:       /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Certificate serial:       1573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
Manifest number:          1565
Signing time:             Sat 18 May 2024 17:16:52 +0000
Manifest this update:     Sat 18 May 2024 17:16:51 +0000
Manifest next update:     Sat 25 May 2024 17:16:51 +0000
Files and hashes:         1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: PhFZdgNemWFOKwAYokEtCSJT+YLxVbJo+L0pz1Oyeqw=)
                          2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: RL2hUE0BuwKjNZR2w1N18MNij4fuKZus+Zv5N9nMZHE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5491 (0x1573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
        Validity
            Not Before: May 18 17:16:51 2024 GMT
            Not After : May 25 17:16:51 2024 GMT
        Subject: CN=6648e284-a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:6d:45:26:7f:ae:ac:60:9e:32:7c:b8:4f:
                    b1:1d:74:26:5d:8f:33:7d:38:5a:62:ba:e1:b7:d3:
                    84:34:2b:ec:54:14:d9:c9:e3:88:cf:b4:02:e1:c8:
                    0d:fc:f7:b1:e8:7c:69:d5:91:10:97:5c:19:5f:cc:
                    fd:5e:32:5d:22:79:f0:8d:6a:5e:cd:8f:45:ee:5d:
                    a6:b9:ae:b5:59:c8:2c:ec:63:23:a5:46:14:34:57:
                    8c:53:76:b1:80:50:71:3e:8b:fc:00:ff:f2:26:33:
                    4b:99:46:a1:40:69:90:ab:96:d9:fa:c9:3c:30:a4:
                    07:1c:41:98:ad:fe:66:0c:2c:16:ab:c0:06:2e:6a:
                    04:e6:37:81:a2:cd:8b:0a:1c:c2:d5:6e:db:4d:00:
                    0e:7e:01:68:c6:c5:5c:08:8c:6f:e6:b0:15:5e:31:
                    63:ce:db:06:9e:01:f6:78:67:d7:e2:3e:cc:17:67:
                    54:e1:65:c8:54:e6:29:e2:a0:04:a3:8b:9e:97:99:
                    92:ad:be:30:62:25:2a:e6:01:80:f9:6a:42:45:b8:
                    36:80:f1:66:c1:c2:85:51:13:30:a9:a2:4d:cf:44:
                    fb:eb:df:84:e0:9e:a1:39:4a:98:e0:16:f4:0c:c7:
                    c8:1a:76:b3:c6:28:40:9d:6e:f1:3e:e3:30:df:15:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:79:57:00:9A:25:B0:18:10:B2:96:64:67:FF:CA:0E:01:9D:E7
            X509v3 Authority Key Identifier:
                keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:69:49:b2:61:e9:18:d3:f1:f0:74:5c:84:4e:ce:a2:c7:a4:
         02:2b:c4:ac:60:c4:b0:c5:a5:0e:b6:87:7d:1b:e7:09:7e:d0:
         db:3e:a8:0e:78:53:4a:43:76:f4:b1:41:00:ea:70:bf:3b:01:
         d8:8f:e9:2d:e6:dc:7a:16:56:56:69:c4:e1:29:e4:1f:bc:4b:
         b4:61:73:c4:c7:f7:8d:d8:46:b3:8c:d8:04:fb:a7:df:f5:43:
         25:9b:03:b4:04:de:95:45:98:7e:ea:16:a5:42:2b:39:66:46:
         cb:64:49:d2:d3:65:e8:43:5d:6a:30:dd:04:08:2b:65:b1:7e:
         fe:b1:e4:ac:49:df:7a:ae:6a:59:23:95:e9:9f:a0:05:c6:bf:
         eb:41:b9:a1:7a:66:cc:13:e0:c4:3d:6b:4f:3a:7e:ce:15:b0:
         e1:a6:54:5b:99:af:e4:04:93:62:40:f4:4d:1b:73:45:66:43:
         2c:73:22:98:a6:2c:7b:44:67:07:15:8d:de:85:3e:b6:1f:ca:
         56:3d:d3:e1:ba:e3:d2:c4:7b:fd:ca:5f:04:09:c6:b9:f6:83:
         55:a4:fc:20:db:96:2e:90:78:ce:1c:4d:b7:44:28:ba:9e:a5:
         3f:ca:4a:01:6a:38:d0:fb:07:bf:f7:fe:54:af:4f:8c:0c:ad:
         93:c9:b5:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1
Qzg3NTAzRkEwHhcNMjQwNTE4MTcxNjUxWhcNMjQwNTI1MTcxNjUxWjAYMRYwFAYD
VQQDEw02NjQ4ZTI4NC1hN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaxtRSZ/rqxgnjJ8uE+xHXQmXY8zfThaYrrht9OENCvsVBTZyeOIz7QC4cgN
/Pex6Hxp1ZEQl1wZX8z9XjJdInnwjWpezY9F7l2mua61Wcgs7GMjpUYUNFeMU3ax
gFBxPov8AP/yJjNLmUahQGmQq5bZ+sk8MKQHHEGYrf5mDCwWq8AGLmoE5jeBos2L
ChzC1W7bTQAOfgFoxsVcCIxv5rAVXjFjztsGngH2eGfX4j7MF2dU4WXIVOYp4qAE
o4uel5mSrb4wYiUq5gGA+WpCRbg2gPFmwcKFURMwqaJNz0T769+E4J6hOUqY4Bb0
DMfIGnazxihAnW7xPuMw3xWRTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2EeVcA
miWwGBCylmRn/8oOAZ3nMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1
RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REU2OC84MEIyRjNGODE1RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGty
WDlxTnR0cldMTUZjaDFBX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUaUmyYekY0/HwdFyETs6ix6QCK8SsYMSwxaUOtod9G+cJftDbPqgO
eFNKQ3b0sUEA6nC/OwHYj+kt5tx6FlZWacThKeQfvEu0YXPEx/eN2EazjNgE+6ff
9UMlmwO0BN6VRZh+6halQis5ZkbLZEnS02XoQ11qMN0ECCtlsX7+seSsSd96rmpZ
I5Xpn6AFxr/rQbmhembME+DEPWtPOn7OFbDhplRbma/kBJNiQPRNG3NFZkMscyKY
pix7RGcHFY3ehT62H8pWPdPhuuPSxHv9yl8ECca59oNVpPwg25YukHjOHE23RCi6
nqU/ykoBajjQ+we/9/5Ur0+MDK2TybWq
-----END CERTIFICATE-----
Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org