Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
File:                     Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft (raw, json)
Hash identifier:          gmHUPHh2DSqjcIxctDGdnHEh+I37uXPTYuEEZ/G4tlQ=
Subject key identifier:   2E:CB:78:12:20:DF:01:FB:6C:86:A5:BD:F5:2F:D8:80:43:F5:ED:8A
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
Manifest number:          0495
Signing time:             Sun 19 May 2024 01:51:45 +0000
Manifest this update:     Sun 19 May 2024 01:51:45 +0000
Manifest next update:     Sun 26 May 2024 01:51:45 +0000
Files and hashes:         1: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl (hash: 3sO04/A3EBPWL1iIQFUjdYffstpGxU5zH6wFkg6jOGc=)
                          2: 4235F184DACE11EE8E67437CC4F9AE02.roa (hash: 0K9yV68yal6enaHOZm3w2lBcPnlb+xnfeR0xcd5iRnM=)
                          3: 7480CB3208B611EDACE57065C4F9AE02.roa (hash: mGTbyMCc4t96n5naa9E/HE+s6Ix7JnfOfnlCugy+J4Y=)
                          4: 76FA56B208B611EDACE57065C4F9AE02.roa (hash: q6mAQ8hxd2tNHOeHiwocWnXXo2B/QkgbUwPsKgAKJhY=)
                          5: 76C6B0C8105511EC92580578C4F9AE02.roa (hash: f7aJp3CdLsyo0t+stZfCboVaIQ0kQDW57cl0sFNYD7o=)
                          6: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (hash: oxb+ZVwngQZ78D0VC7fWYXbul+BsPCCKgwQOCW8hTEE=)
                          7: 7BE0CE60064911ECA853EB0FC4F9AE02.roa (hash: gDBnMv48s1UFFyZstRqCDF5/vwHsnGAPQKDpz0kNK0I=)
                          8: 791CA9EC064911ECA853EB0FC4F9AE02.roa (hash: RxSRTomweO6ts9ni1HZ6OoKGhk3rdB8KvzAv2ZiLHVM=)
                          9: 7B2B3168064911ECA853EB0FC4F9AE02.roa (hash: Cv9HKfCMSb/EctoOxUhakYVAfd+nexx28h1L94HgS6c=)
                          10: 1D6F108A00D511ED9262EB53C4F9AE02.roa (hash: mfy+4Z1cUmQQl5TnEQ1tOyJ6L8Iq2x+lSczxFz0X1qQ=)
                          11: 9A7D9276665111EEAD781D28C4F9AE02.roa (hash: xYW+1P4nFgpBHGgktFX5W2cYeiS3xZCgxQIQN4yauwk=)
                          12: F008FF08C22111ECB9FFB964C4F9AE02.roa (hash: oAv73McLTHeEFMcD3FBKqTvYSVmZhn6Jm+0WPoOKxS0=)
                          13: 52564FC4836B11EE960BCA6FC4F9AE02.roa (hash: v6XT6ftivFwtelPGcCuwnPo7+zQIxSq9Lx+uRjU+5nc=)
                          14: 794E571008B611EDACE57065C4F9AE02.roa (hash: yYkxyq9Q7xW7Fh6FR1oaPA/DA7Y7nl6MGlcmMf3J52A=)
                          15: 99C5A4CC201211EC8520994EC4F9AE02.roa (hash: z43CXMMv4cj/JnnDmFAUo8YAQWcVS+cF/NtDYz0EAjM=)
                          16: 73D3C5B808B611EDACE57065C4F9AE02.roa (hash: 0j8pGgEnnkRB/1ZIOO4H9vJci41MEFFf4lTymQz/fYI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: May 19 01:51:45 2024 GMT
            Not After : May 26 01:51:45 2024 GMT
        Subject: CN=66495b31-3263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:52:cf:99:c6:03:47:97:e9:b0:0f:ef:3e:
                    8e:60:2b:bb:c2:f3:6e:a7:0a:9c:fe:57:db:dd:f8:
                    8a:15:b1:b6:12:27:27:16:79:20:22:31:19:fd:4e:
                    d4:52:84:f5:63:40:aa:08:89:be:7b:73:cf:d3:63:
                    5f:3e:a8:54:fa:d8:1f:44:94:51:4b:05:75:17:b3:
                    92:05:b2:e3:cc:0e:21:c3:1a:2c:9a:10:b0:ea:1f:
                    26:f2:a3:b6:f8:41:54:88:26:99:d9:e1:a3:bc:1f:
                    48:53:75:7b:9c:91:d9:63:0d:23:fc:16:98:f4:16:
                    62:51:60:d8:e0:e3:cb:c0:52:4c:61:40:1f:2b:20:
                    1e:c1:e1:ca:68:c9:f7:b6:81:47:00:6f:6e:52:73:
                    12:ea:89:4d:29:80:78:07:82:df:31:a2:40:f1:f3:
                    a6:84:f0:ba:f4:a8:a7:c8:eb:ba:41:89:28:cb:46:
                    08:02:6c:3b:b0:3c:09:8c:0a:37:8b:78:56:88:55:
                    65:93:81:1a:3c:0c:56:a1:9a:da:c9:8f:6e:56:7f:
                    e2:9f:5c:ba:bc:8e:24:cf:c9:14:68:bd:1d:3d:30:
                    25:37:72:e7:37:5b:02:dc:a1:77:7f:ed:ec:25:20:
                    be:2f:b1:50:b3:44:37:6c:01:f3:60:be:4d:b4:fe:
                    8c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CB:78:12:20:DF:01:FB:6C:86:A5:BD:F5:2F:D8:80:43:F5:ED:8A
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6c:c2:73:ac:66:53:b1:05:83:bf:93:ff:95:91:04:ba:08:
         b8:e5:94:86:72:87:db:4e:b9:de:f9:2a:e9:d5:78:74:d3:79:
         85:09:80:dc:16:85:76:39:f8:d8:3b:e5:83:cc:a5:2f:89:34:
         d3:33:60:5a:4d:42:00:9d:73:94:ee:01:47:30:1c:ad:b9:60:
         d2:9a:05:c9:3b:b8:c7:20:ea:a8:1c:35:e5:c6:1e:f1:d4:60:
         b5:95:a1:99:9d:f8:af:57:4a:7f:25:e1:bd:db:30:a2:bd:a5:
         dc:de:95:71:fe:37:c1:1e:70:f7:34:f4:65:df:54:dc:89:9a:
         7c:cc:7b:06:a5:19:c7:8b:08:c9:7e:13:67:e0:c1:33:d0:1c:
         5f:67:9d:79:e4:20:ee:7d:97:d4:14:3d:35:ef:fc:ad:00:4d:
         d0:83:03:72:a6:ef:cd:f5:2c:ce:5d:13:97:aa:18:e8:25:31:
         9d:6a:9c:66:8f:27:c0:d1:c4:25:9f:c7:b0:67:12:c9:59:84:
         1c:f7:0c:5f:2f:4e:71:fe:3e:6e:73:c1:09:b5:03:85:3b:ba:
         f6:cb:7f:32:a2:9d:35:c9:10:30:68:4c:af:7e:73:d7:7d:77:
         86:4a:39:a7:5a:be:fd:4f:04:43:ce:74:5e:fd:8a:ff:73:c3:
         1e:a6:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org