Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
File:                     jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json)
Hash identifier:          mpeoXnGlbBigHvWd5NLlzm27u0wU4/Z0FLLHt+5Ofec=
Subject key identifier:   77:24:9D:72:5B:98:BB:3B:67:85:99:6A:FF:D2:08:58:A1:9A:14:0C
Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Certificate issuer:       /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
Manifest number:          056B
Signing time:             Sun 19 May 2024 00:45:58 +0000
Manifest this update:     Sun 19 May 2024 00:45:57 +0000
Manifest next update:     Sun 26 May 2024 00:45:57 +0000
Files and hashes:         1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: fed67MdrTC7Ef8tMtnJQ8aKn23qbXkPaUg/lh3YnABE=)
                          2: F603D584E99611EDB0837738C4F9AE02.roa (hash: ppZ7b7PsKJy+rRpyszofBe4R3zcinMOJyzzL8OL88u8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
                          rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
        Validity
            Not Before: May 19 00:45:57 2024 GMT
            Not After : May 26 00:45:57 2024 GMT
        Subject: CN=66494bc6-675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:b8:0d:a2:5f:ba:91:f6:2e:9c:d0:42:31:
                    d3:59:f7:5e:42:6b:f9:5e:8c:62:7a:74:b2:2d:c9:
                    74:f6:ab:05:0f:7b:6a:e5:b6:26:a4:92:e0:4f:d8:
                    5a:05:cb:ae:48:56:0c:bb:93:9e:84:2f:d2:ed:24:
                    e8:99:d4:27:8c:45:98:a9:de:98:bb:0c:78:74:3a:
                    6a:61:c2:21:cb:b1:5a:cf:e1:32:cd:48:ee:f3:c6:
                    8e:ff:87:ff:ba:9c:72:c9:23:79:c2:85:08:d2:6d:
                    66:5a:3e:77:ad:73:2a:aa:09:d0:16:71:6f:75:a9:
                    1b:46:b0:0f:90:80:10:68:c2:c1:ca:a6:cb:06:aa:
                    de:b5:47:3e:c2:d4:4d:4d:94:fe:56:c9:fe:9d:97:
                    05:2f:6d:ff:c4:73:5f:cd:16:99:00:af:14:d5:0a:
                    95:77:af:a5:49:70:85:d5:bd:24:8a:cb:cb:5c:1a:
                    95:0c:ce:a2:a3:59:ce:f4:f6:a5:f1:85:3e:e5:63:
                    bb:33:30:7c:fb:e2:df:80:28:57:9e:9c:74:0e:1e:
                    51:16:27:62:03:93:64:b1:a2:d2:9a:de:af:5c:fa:
                    14:84:b0:62:c4:dc:60:74:3a:8a:6a:bc:a6:7a:d5:
                    4d:6c:56:df:b2:ff:02:1e:9b:7d:f6:cc:f9:53:bf:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:9D:72:5B:98:BB:3B:67:85:99:6A:FF:D2:08:58:A1:9A:14:0C
            X509v3 Authority Key Identifier:
                keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ce:03:18:03:0b:86:7d:d9:1c:9d:ea:04:0e:5b:14:c8:46:
         9a:28:73:b8:88:35:e7:57:db:80:1f:db:9a:e4:05:fb:9f:90:
         40:b1:a4:97:ca:f2:83:c5:2a:48:99:70:bd:89:d1:07:3b:d8:
         71:9b:b6:b7:50:5f:be:84:f1:b6:07:46:0c:99:84:0c:15:05:
         47:9c:a8:f1:5d:2d:ab:c8:0e:60:9e:a6:1d:5a:6b:d0:fa:34:
         58:24:d5:13:14:6a:f0:4e:d4:e7:a9:1b:7c:57:04:d0:3a:94:
         5f:ab:0b:35:70:d1:34:1d:a3:1f:9d:26:6d:66:7d:4d:89:53:
         de:a5:a2:a9:8f:9b:f6:f0:2f:25:7d:fd:e7:72:80:1c:48:4b:
         d8:27:46:cc:5a:64:2f:35:2f:ae:04:d5:6b:f0:32:5e:47:68:
         7e:71:52:f1:31:51:2e:e5:71:f1:b4:27:33:03:c8:0f:88:77:
         a1:f1:20:d8:20:61:9a:21:1f:0f:a2:ee:32:29:d6:fd:81:aa:
         39:1a:03:31:34:4a:b9:db:02:80:72:89:49:5f:1f:f3:32:42:
         7e:fc:30:58:e6:ac:d4:e4:f7:0f:d3:98:15:50:33:57:e6:6a:
         e6:52:b4:3d:14:cf:5c:9d:65:03:bb:dc:a9:76:3d:80:20:c6:
         36:27:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org