Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File:                     JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier:          rai21YMbjIuqeliMJ5y2AVLrGN6PB8nKTIT/C5aKgkw=
Subject key identifier:   BE:86:BD:6E:EA:0B:40:60:79:61:D7:82:38:12:F1:34:AF:EA:3D:C9
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer:       /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number:          070B
Signing time:             Fri 22 Nov 2024 21:30:46 +0000
Manifest this update:     Fri 22 Nov 2024 21:30:46 +0000
Manifest next update:     Fri 29 Nov 2024 21:30:46 +0000
Files and hashes:         1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: qMWbVZR2msj5jcpSeEHsBJio/wJV2gF0wpT3Mga7eoM=)
                          2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: 8+1XQwF+N1uRgo6m/yuRPrxH+AEwqewgbTlOR/yQ1Is=)
                          3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: oBTylAc0/+wG9PO1+l3Ek9c9prat0lyvUmk+iqPxpuA=)
                          4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: zl+C3NthfIT+XlnjBqg1tdgjzR0Zd+EdwBs85D/sIUU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
        Validity
            Not Before: Nov 22 21:30:46 2024 GMT
            Not After : Nov 29 21:30:46 2024 GMT
        Subject: CN=6740f806-db29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6f:b8:cf:be:9b:8a:4e:c2:19:c3:1c:f9:8f:
                    04:2d:f0:95:c2:3d:d0:a4:89:dd:f9:97:96:38:d4:
                    13:cc:f5:ab:48:a1:7a:ec:64:82:ef:e2:68:aa:53:
                    6d:41:a0:46:c6:dc:3b:7b:fe:dc:da:8c:af:ac:8b:
                    9f:e9:fc:c0:87:c7:28:e4:e0:fe:cb:40:cf:cf:30:
                    fd:04:9a:1a:d4:fa:36:60:92:e0:ad:55:60:b8:4d:
                    09:27:c1:6c:1a:26:16:5e:56:6b:a0:0f:f6:72:bd:
                    5f:70:1f:c8:ff:ca:18:8b:f5:a9:0b:5e:fa:9b:f3:
                    ec:a0:ae:51:7f:df:73:2e:7b:08:74:a3:ef:48:6e:
                    ec:ef:0d:a1:e2:53:d6:cc:b3:38:a8:38:6a:bc:3b:
                    bc:6a:ed:12:81:27:b6:48:1a:c0:5b:b6:58:42:54:
                    01:15:60:33:a1:85:fb:b1:18:57:1f:a1:bf:6c:fe:
                    a4:29:3e:0d:6b:b2:9b:fc:88:b2:5b:45:48:b3:7d:
                    09:f5:0f:ed:54:fe:71:73:80:f4:cf:03:c4:08:ec:
                    bf:5a:ef:f6:03:76:af:1c:f5:58:7b:92:2a:86:93:
                    d1:08:57:40:89:85:b6:2b:ca:cc:c3:9a:3b:43:87:
                    a6:16:64:4a:03:d0:4f:d9:84:29:24:35:14:e7:c8:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:86:BD:6E:EA:0B:40:60:79:61:D7:82:38:12:F1:34:AF:EA:3D:C9
            X509v3 Authority Key Identifier:
                keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:7c:c7:33:65:57:44:f2:01:1f:dc:a5:04:f5:10:f4:ac:
         d6:2b:8f:5f:13:06:74:bb:43:37:94:a5:40:27:a8:5f:1d:ad:
         c8:ce:db:b7:96:8e:7e:2f:c0:88:0a:2c:b6:3e:eb:fd:4e:c7:
         d0:7e:6b:1f:df:c9:59:a7:c2:08:10:7e:9f:bc:3a:77:c6:5c:
         fa:c6:52:b1:3a:02:03:f1:8c:e4:0d:53:d9:5e:09:08:a3:20:
         27:4e:8d:17:b2:c5:f7:c4:48:69:5c:9d:35:16:f7:8e:ea:e9:
         8a:e5:7a:df:4a:a6:4f:4a:94:b4:2d:6b:ef:a7:fb:f3:b3:e1:
         9c:a1:6b:56:11:68:dc:9b:31:49:c5:cb:2d:9d:84:d5:84:bc:
         f4:98:93:18:41:16:3f:fe:9c:c6:a9:bc:77:43:e3:55:98:51:
         37:c8:7d:ff:76:61:21:13:11:c9:cd:20:c5:50:fb:a1:bf:a3:
         95:5d:ea:6b:6b:cc:82:fc:7c:32:2c:06:c9:ab:f5:ac:86:04:
         48:9e:57:fa:60:61:aa:d8:f8:68:34:c3:7e:fd:e8:1d:80:78:
         39:8d:77:11:2d:dc:67:b0:72:68:7b:ed:e0:a7:0b:20:24:bb:
         2c:0b:d9:b0:da:95:b5:f2:2b:20:cf:9a:ad:cc:13:a6:71:a1:
         da:73:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org