Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
File:                     JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json)
Hash identifier:          r3VQgcowka4O4KcrkF5HpmZWpaqsfyXEnbhnc4BlGJc=
Subject key identifier:   2C:A4:DD:3F:11:EA:74:07:10:99:12:74:B7:9F:44:AA:C6:43:9E:E0
Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69
Certificate issuer:       /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
Manifest number:          05FB
Signing time:             Fri 22 Nov 2024 22:18:47 +0000
Manifest this update:     Fri 22 Nov 2024 22:18:46 +0000
Manifest next update:     Fri 29 Nov 2024 22:18:46 +0000
Files and hashes:         1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: gB9NyOtCcxsGabpgALppi1V/L12FSZojbduNPh+CZjM=)
                          2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: FHqmc6lqj/CZVq6IBqaEeOALwRu+Ckxhxr3QSAxwIwQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl
                          rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69
        Validity
            Not Before: Nov 22 22:18:46 2024 GMT
            Not After : Nov 29 22:18:46 2024 GMT
        Subject: CN=67410347-e75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:cd:c4:b9:d2:3d:cc:71:fb:4a:a3:b1:41:
                    a3:5d:b0:87:3e:c6:1f:fd:e1:32:fc:36:d3:b5:c9:
                    e1:d5:6b:2f:83:22:ec:5d:2c:d3:25:bf:f1:2b:4b:
                    85:72:43:fd:fb:f3:6c:91:d2:90:29:81:53:61:de:
                    5e:1c:af:58:91:28:44:46:57:a5:83:98:de:2d:4e:
                    69:ca:b6:cb:c4:4e:0a:08:83:fb:e4:a5:55:f6:3f:
                    82:45:f9:7c:30:42:4b:63:01:13:78:06:05:3c:cf:
                    16:29:6b:af:5b:cb:9e:99:1f:9d:06:66:97:3b:89:
                    f5:16:1f:e0:fe:5a:ba:28:bd:49:ad:55:d4:84:03:
                    76:52:93:fa:1b:2d:03:d7:d9:53:42:54:ee:8f:f9:
                    5f:f0:e2:0e:ef:d3:f9:5c:e0:b4:b2:ad:0a:c5:38:
                    40:24:1d:0a:6e:7c:03:5e:05:44:18:f2:49:69:36:
                    ce:72:59:bf:3b:74:22:c1:51:de:98:b7:7b:a4:0a:
                    c7:14:99:5c:08:77:2e:9d:2a:50:a1:0b:98:20:7d:
                    35:c8:85:b5:99:66:1a:40:c9:46:1f:4f:67:e3:33:
                    7c:bc:04:65:c6:0b:a8:53:a8:4f:27:64:d5:1f:03:
                    d8:be:91:72:3c:19:25:ab:8d:1b:a0:17:ce:06:84:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:DD:3F:11:EA:74:07:10:99:12:74:B7:9F:44:AA:C6:43:9E:E0
            X509v3 Authority Key Identifier:
                keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:4b:b9:c5:42:e8:b9:d7:b6:5b:cd:d2:8a:5b:51:a7:20:
         55:9f:f4:2e:c0:9d:6c:e5:30:56:c6:82:c2:b7:94:c7:d4:f5:
         a7:54:f4:4b:4d:6c:0d:4a:6a:38:c5:ed:68:26:ca:d7:1e:00:
         50:50:c5:c6:22:f2:93:fb:55:b8:3f:0a:31:74:52:d6:3f:88:
         92:cc:bd:3d:ff:eb:12:ca:73:a7:05:ed:9c:c0:e7:e0:c5:36:
         f5:95:29:6e:87:9e:9b:21:62:fb:74:92:fb:0e:52:50:3a:80:
         e9:67:27:86:07:f7:ca:9d:71:35:ce:57:94:1b:eb:6f:e4:f7:
         8f:28:3e:0c:40:a1:93:3f:32:75:a2:9e:2c:24:0b:1d:c6:4a:
         34:03:e9:22:8c:ed:41:19:ae:4c:dd:c5:85:4c:ad:f0:b5:bd:
         1e:b1:32:b6:5a:82:d1:9a:24:cf:ab:3a:0a:66:8d:00:25:65:
         17:85:47:63:b0:93:29:c0:90:8a:9b:ca:1f:7c:0c:e3:77:d4:
         3d:2a:04:b1:57:de:38:72:b8:97:69:36:2b:e3:6e:99:d0:dd:
         bd:28:0b:5d:bb:65:ad:e1:b6:38:0a:44:09:66:fa:fe:f4:a6:
         3d:46:67:b8:d7:c5:e0:58:12:e8:b1:ec:a9:dd:be:80:25:06:
         7b:d7:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org