Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
File:                     jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json)
Hash identifier:          AWRWCIgGAq7Je646w2Nnm5kzrybVvTW4l0vXkGyyLHM=
Subject key identifier:   38:9A:55:FC:3E:C1:12:60:AC:19:22:43:49:EB:F5:FE:48:63:90:37
Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D
Certificate issuer:       /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
Certificate serial:       031B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
Manifest number:          0318
Signing time:             Sun 19 May 2024 03:06:14 +0000
Manifest this update:     Sun 19 May 2024 03:06:13 +0000
Manifest next update:     Sun 26 May 2024 03:06:13 +0000
Files and hashes:         1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: ByBoS0q4l+tmenJ8Ce4Dk9OuynNlQR9wE0QQY9zOkqg=)
                          2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: BvdYfVRaXS0MG1opeVKQ4wTTkRkbR0QXQIh1aQ64f70=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D
        Validity
            Not Before: May 19 03:06:13 2024 GMT
            Not After : May 26 03:06:13 2024 GMT
        Subject: CN=66496ca6-6ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:b1:9d:39:fc:02:c1:ea:1c:2b:cb:1c:5a:
                    85:16:82:b8:ec:07:7d:c3:8e:2a:21:ea:8e:6c:b6:
                    74:18:db:81:22:16:08:97:f2:c1:2c:de:c2:30:cd:
                    0c:4f:8c:6e:ea:72:c3:38:21:98:75:ae:32:2d:70:
                    c5:e4:84:17:db:4a:fe:ed:db:49:94:86:73:80:b0:
                    26:43:06:67:1b:cc:68:18:75:48:71:14:d9:fd:07:
                    3e:77:56:4c:8d:f1:c5:2e:81:20:56:be:7c:ef:96:
                    ad:9c:bf:0d:8f:58:62:5c:64:e9:6d:b1:e6:e5:ad:
                    8e:bf:af:f3:e9:4f:ce:b8:b1:1f:56:03:d5:3e:08:
                    1d:cc:d9:1a:77:94:16:c0:d9:bf:b2:26:d5:ff:b2:
                    c4:02:1b:19:f0:84:83:0c:97:64:b0:62:95:03:6f:
                    69:82:08:2d:8d:f0:af:9f:04:2b:c0:2b:3f:67:98:
                    38:42:bf:c1:9b:b4:c7:c6:7d:2d:d8:c2:b2:fd:fa:
                    aa:2d:8b:6f:0f:6b:9f:22:b5:10:45:5e:83:12:22:
                    c2:e5:e1:8d:9c:5d:be:a7:ae:c3:ba:40:7b:96:8b:
                    09:bf:45:ee:a7:3b:9d:6c:34:68:f8:4e:0d:42:07:
                    c2:de:82:65:e5:21:4b:9b:5d:d1:36:e3:51:36:19:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:55:FC:3E:C1:12:60:AC:19:22:43:49:EB:F5:FE:48:63:90:37
            X509v3 Authority Key Identifier:
                keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:61:a9:0e:68:d5:c5:d7:92:73:6e:2d:1a:64:a4:bd:33:54:
         c8:92:42:9d:b5:a5:52:ad:16:d0:4f:93:ec:52:fe:57:96:1e:
         a5:07:25:7b:32:e8:68:79:e0:3f:f5:aa:2d:cd:bb:9b:ff:23:
         80:48:b0:48:e7:97:34:f2:ad:3c:ff:50:17:dc:c4:39:42:91:
         8e:93:b7:94:3a:56:24:c0:0b:a6:f6:7f:62:88:93:d2:28:a3:
         50:54:38:e6:cd:8b:c4:08:2d:72:60:39:0d:35:5d:60:9d:26:
         64:a8:39:8c:4e:de:cc:91:64:1a:b1:8a:e5:9e:20:0f:3b:ef:
         e5:fe:c1:b2:f9:cd:7d:01:8f:b6:84:cc:eb:71:9f:77:82:35:
         64:61:c9:13:c2:7a:82:46:23:91:a6:e2:0f:a5:33:ce:24:95:
         e0:96:0f:c4:58:13:04:d5:ea:5d:a9:59:47:6e:02:d5:d0:04:
         76:a5:c2:1f:11:ba:46:64:d3:2c:93:fe:59:28:89:69:6f:19:
         41:fd:4a:ea:fd:e5:ac:9a:2a:c5:c8:b8:b3:ae:8e:5a:52:d6:
         80:6c:e4:8c:6c:be:00:e2:6e:5c:d0:14:fc:56:e1:6e:7f:3d:
         93:93:29:b1:c6:9b:47:36:42:c9:ab:55:3b:e8:ed:6e:24:33:
         b0:e5:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org