Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
File:                     6JNyY8Gd-yOWz0THcFJD_MJujzo.mft (raw, json)
Hash identifier:          aTYQlQ1FWuzWReeURNvQrwva0n8pKsR5XtF/KIHwcSk=
Subject key identifier:   0D:18:19:A9:7B:1A:C4:7B:CE:BC:FD:81:60:AD:BE:ED:FE:11:50:0F
Authority key identifier: E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A
Certificate issuer:       /CN=A913827A/serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
Manifest number:          025B
Signing time:             Sat 25 May 2024 04:00:38 +0000
Manifest this update:     Sat 25 May 2024 04:00:38 +0000
Manifest next update:     Sat 01 Jun 2024 04:00:38 +0000
Files and hashes:         1: 6JNyY8Gd-yOWz0THcFJD_MJujzo.crl (hash: LO9A4woJQyV9uptlxQHgAqylxPTsW2ZNjXkTda8U2+I=)
                          2: F89476D4CF1E11ECA610684AC4F9AE02.roa (hash: ENpfmvxxGMTb60ZDjhyZqUZh1Jl75VAUUnqyQ7yDDi8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl
                          rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913827A/serialNumber=E8937263C19DFB2396CF44C7705243FCC26E8F3A
        Validity
            Not Before: May 25 04:00:38 2024 GMT
            Not After : Jun  1 04:00:38 2024 GMT
        Subject: CN=66516266-3e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:ad:6b:a9:6d:dd:fb:29:84:81:dc:42:54:
                    1a:f5:e6:3c:67:f2:c6:61:32:c1:7a:a5:fd:78:05:
                    f6:fe:dd:d5:d5:b0:c2:74:b8:5c:3b:35:55:24:c6:
                    35:28:ef:2f:5f:52:21:07:18:07:d4:19:fe:d6:29:
                    64:ba:9f:8d:2c:9c:1a:60:32:84:3b:51:d9:4f:7d:
                    e5:8d:f7:b5:93:ef:cc:a2:19:80:de:d4:54:07:a5:
                    d1:83:a2:f3:32:01:ce:24:69:14:28:60:d0:95:25:
                    0c:01:7a:5d:66:f1:94:51:54:dd:02:96:e6:6b:d4:
                    60:ec:4f:f0:69:03:ae:b4:ba:b0:66:49:99:c2:7d:
                    c9:db:6d:dd:26:7f:f7:09:4c:4b:3b:f9:a6:c3:ab:
                    64:db:b6:47:6a:f1:aa:66:97:1c:5d:37:81:94:b2:
                    b1:c3:97:c1:fe:f1:50:17:14:de:b6:17:c9:fe:4f:
                    5e:47:ef:64:70:82:22:ab:dd:9f:87:15:52:47:f4:
                    47:dc:01:6c:6f:2b:43:e2:08:94:48:43:5e:61:db:
                    ad:ba:d6:1c:09:bc:7f:21:29:33:28:2f:82:bf:52:
                    d0:d4:94:c3:b1:59:ab:c8:2b:3b:44:49:0d:92:9f:
                    5f:64:77:2c:2c:5e:e7:df:bd:25:eb:eb:34:c1:8b:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:19:A9:7B:1A:C4:7B:CE:BC:FD:81:60:AD:BE:ED:FE:11:50:0F
            X509v3 Authority Key Identifier:
                keyid:E8:93:72:63:C1:9D:FB:23:96:CF:44:C7:70:52:43:FC:C2:6E:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6JNyY8Gd-yOWz0THcFJD_MJujzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913827A/19551548CF1C11EC9CEF9020C4F9AE02/6JNyY8Gd-yOWz0THcFJD_MJujzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:2e:ca:5a:18:20:d3:1e:a7:7c:57:88:bf:be:55:51:87:
         7c:36:4c:cc:bc:9c:68:b8:7c:b2:2d:27:e3:80:0c:f0:f2:ea:
         d7:5d:3c:55:4a:2b:f3:93:ec:a2:d9:cf:4b:e1:ae:30:32:14:
         33:6b:e0:55:35:d7:90:14:6e:3b:6e:50:7b:1e:7d:48:87:fa:
         4b:b5:95:93:b3:58:fd:5f:58:91:3d:83:5e:ae:88:b8:70:3b:
         78:c3:47:18:3f:e5:6d:99:8f:44:00:49:e9:c8:cf:44:0d:1d:
         9c:52:a7:1b:06:e4:1e:35:a5:2c:69:e3:eb:01:e6:e5:6b:49:
         0c:41:c9:ab:41:fc:91:3d:7e:99:63:a6:8c:43:55:24:82:b3:
         13:31:10:4c:fc:44:03:08:b6:97:63:4c:d7:a7:2b:bc:9d:d5:
         a1:74:d6:e4:aa:c7:3a:3f:d3:cf:bb:78:36:89:99:f1:0a:45:
         0f:f5:a9:bb:77:de:dc:a6:98:22:83:f3:6f:83:3b:8c:6c:b4:
         37:d7:b6:11:06:a3:73:df:b4:94:f1:2c:6b:85:e3:cc:86:53:
         32:b0:61:60:cd:96:51:69:89:51:e8:37:14:b1:03:49:3d:62:
         98:d9:0a:52:10:48:a6:c4:38:8d:d5:83:c5:a7:0d:be:f2:e0:
         88:dd:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:57:08 2024 by rpki-client on console-fra.rpki-client.org