Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
File:                     JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json)
Hash identifier:          kQr1jGBatSBgERjfcRURK1EErzvoKmp/zjWp40AA6Io=
Subject key identifier:   B1:44:9F:AB:B1:62:2C:FE:D2:C2:8B:C9:77:68:A9:90:8F:DA:50:AE
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Certificate issuer:       /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial:       135E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
Manifest number:          1353
Signing time:             Sun 24 Nov 2024 16:51:32 +0000
Manifest this update:     Sun 24 Nov 2024 16:51:31 +0000
Manifest next update:     Sun 01 Dec 2024 16:51:31 +0000
Files and hashes:         1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: uAsSCxemXy6u1RZlQNJ9pwSpglHgwtH0NfGSQcGzsUs=)
                          2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4958 (0x135e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
        Validity
            Not Before: Nov 24 16:51:31 2024 GMT
            Not After : Dec  1 16:51:31 2024 GMT
        Subject: CN=67435993-0ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:1d:46:7c:95:6b:8b:e1:d2:ab:3c:19:a4:
                    dc:34:95:f8:32:6f:29:62:42:63:38:ec:c8:ab:71:
                    dd:0c:1c:46:69:0d:d2:13:13:b7:ad:33:c7:f5:66:
                    e6:da:88:ce:97:d4:8d:1a:bd:3a:33:22:b7:bd:18:
                    ac:8e:ee:57:4e:18:ba:8c:21:c6:27:d6:32:0c:d9:
                    50:39:c4:e7:0b:53:63:c2:38:36:ef:a9:71:01:86:
                    d7:a0:37:1f:69:84:67:09:eb:90:dd:ee:44:06:44:
                    68:5e:9b:df:1f:dd:86:d1:bc:40:20:af:3e:51:a9:
                    ed:14:67:ed:c4:07:3a:ad:db:cd:9a:7d:b6:b3:f4:
                    a2:26:c0:0f:cd:9f:e7:eb:67:cc:99:f6:14:ac:3a:
                    fa:1b:4b:a0:fe:bf:bc:97:a3:d1:25:cb:26:97:b9:
                    86:ba:a0:ca:a0:c6:be:5c:bc:a4:d6:2c:87:33:11:
                    36:96:3d:17:72:77:40:6b:be:93:69:11:7b:2a:0d:
                    e1:a4:35:48:2b:74:21:0e:24:8f:3d:f2:50:a3:b9:
                    7e:26:26:69:da:2f:bc:be:5c:10:e3:7d:98:f1:20:
                    9a:8a:b2:e2:f0:2d:aa:77:d7:cc:82:1f:be:b4:17:
                    05:c4:50:af:ed:4a:61:ab:e9:b1:df:95:ed:6d:d6:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:44:9F:AB:B1:62:2C:FE:D2:C2:8B:C9:77:68:A9:90:8F:DA:50:AE
            X509v3 Authority Key Identifier:
                keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:16:91:67:56:4d:9a:83:a9:02:32:d4:2c:ff:06:4f:97:
         df:a4:5a:ea:c3:6d:a9:ea:d6:89:47:db:21:be:e5:d3:53:b6:
         b1:8f:24:20:da:41:57:4f:b0:8a:cb:04:47:da:06:00:c4:7b:
         d2:a7:d6:9b:3c:b7:13:ee:07:b5:e4:ce:ba:a9:5c:ab:1f:d4:
         55:c6:6b:97:3d:f7:16:be:52:0b:24:76:25:05:0a:27:a8:f8:
         aa:78:4a:10:20:33:bf:f7:7d:6e:0e:3b:f7:82:f2:af:34:d8:
         8a:32:ab:b6:91:1d:96:e4:e9:ba:be:2c:7a:d4:c8:b5:a0:8a:
         ca:55:99:c1:b5:6b:cb:53:eb:44:4b:48:9e:1c:7b:33:f8:5e:
         22:52:e0:e2:2e:07:3c:4a:31:64:e0:0c:31:7e:8f:20:a0:3d:
         f7:58:1c:a3:33:1d:78:33:6f:a0:27:4c:61:08:cf:f0:5b:e9:
         85:7e:5f:a1:50:6c:5d:de:3d:a5:89:49:60:5b:86:4f:e4:46:
         30:f5:78:eb:ca:85:85:3f:47:b8:97:c7:1f:65:6e:4c:35:55:
         34:03:c6:2e:d5:25:d2:04:8a:d9:8b:b9:ad:b6:a2:6d:44:96:
         c5:be:9b:92:77:54:91:4b:52:f8:be:7b:ce:19:07:09:91:90:
         a7:30:f2:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3
NDU3REM5NDMwHhcNMjQxMTI0MTY1MTMxWhcNMjQxMjAxMTY1MTMxWjAYMRYwFAYD
VQQDEw02NzQzNTk5My0wYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbQdRnyVa4vh0qs8GaTcNJX4Mm8pYkJjOOzIq3HdDBxGaQ3SExO3rTPH9Wbm
2ojOl9SNGr06MyK3vRisju5XThi6jCHGJ9YyDNlQOcTnC1Njwjg276lxAYbXoDcf
aYRnCeuQ3e5EBkRoXpvfH92G0bxAIK8+UantFGftxAc6rdvNmn22s/SiJsAPzZ/n
62fMmfYUrDr6G0ug/r+8l6PRJcsml7mGuqDKoMa+XLyk1iyHMxE2lj0XcndAa76T
aRF7Kg3hpDVIK3QhDiSPPfJQo7l+JiZp2i+8vlwQ432Y8SCairLi8C2qd9fMgh++
tBcFxFCv7Uphq+mx35XtbdYtPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFEn6ux
Yiz+0sKLyXdoqZCP2lCuMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG
NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC
N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZdxaRZ1ZNmoOpAjLULP8GT5ffpFrqw22p6taJR9shvuXTU7axjyQg
2kFXT7CKywRH2gYAxHvSp9abPLcT7ge15M66qVyrH9RVxmuXPfcWvlILJHYlBQon
qPiqeEoQIDO/931uDjv3gvKvNNiKMqu2kR2W5Om6vix61Mi1oIrKVZnBtWvLU+tE
S0ieHHsz+F4iUuDiLgc8SjFk4Awxfo8goD33WByjMx14M2+gJ0xhCM/wW+mFfl+h
UGxd3j2liUlgW4ZP5EYw9XjryoWFP0e4l8cfZW5MNVU0A8Yu1SXSBIrZi7mttqJt
RJbFvpuSd1SRS1L4vnvOGQcJkZCnMPI1
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:57 2024 by rpki-client on console-ams.rpki-client.org