Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
File:                     J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json)
Hash identifier:          QxlOh2Acvxm3kDvfLE8rvM7hcAS8lFvp87NEcW8VxHU=
Subject key identifier:   03:8E:7D:15:E2:C5:F2:A6:EF:A0:61:77:0E:37:A1:4C:65:B1:F3:BC
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
Manifest number:          014E
Signing time:             Sat 23 Nov 2024 02:34:51 +0000
Manifest this update:     Sat 23 Nov 2024 02:34:51 +0000
Manifest next update:     Sat 30 Nov 2024 02:34:51 +0000
Files and hashes:         1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: 8bbcu87cjnkl9W6pBWS9jImrK8oW1taNPxGLiNrG6kI=)
                          2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: Jr5/4E0BqvD6E+dU0waXVfsK7t56ulJ7qARG32utiNc=)
                          3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: 5w8g5x+ok2twOTv8Pno7z7uYOa1KLIU/k+gb4VmjlK8=)
                          4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: DST7aY8U7pn+fcW6ISk7J3CqqppEvOX29fKYTnqiYaI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Nov 23 02:34:51 2024 GMT
            Not After : Nov 30 02:34:51 2024 GMT
        Subject: CN=67413f4b-9599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:20:ae:ac:b8:0b:d0:73:7e:74:74:c3:f6:
                    1d:09:16:04:5f:e4:d3:19:93:41:d8:ed:64:82:f7:
                    25:4c:88:2f:91:a2:d3:a9:20:f7:19:ba:c6:99:06:
                    8e:66:cb:4a:ed:0d:e1:68:66:5b:c1:89:e3:77:dd:
                    7d:b9:d5:73:a0:0e:4f:37:af:88:91:a7:6d:8d:18:
                    d4:8e:01:57:d6:10:de:4c:5e:a5:e9:6a:c3:2e:f5:
                    8b:6f:9b:ef:96:54:27:87:bb:31:82:33:92:1d:3f:
                    4d:e9:37:ac:7c:ff:2d:d5:49:0b:48:d2:c6:4b:4d:
                    ca:3a:99:a4:5f:70:da:ae:c4:df:65:0f:04:65:9e:
                    da:ba:24:b7:c6:fc:d9:69:ef:77:3b:33:7a:cc:d3:
                    d9:49:5e:b9:66:ec:56:09:bd:e0:c7:85:3d:77:3d:
                    c8:e1:f9:09:54:aa:ed:7a:c6:c9:7f:9e:16:a9:97:
                    70:8c:e3:63:e7:53:07:7c:3e:39:36:79:f8:e1:46:
                    3e:ea:c0:19:51:51:60:c1:cc:5e:60:33:12:4b:d8:
                    a2:25:51:73:e6:ef:3d:33:85:96:93:ee:4f:8e:34:
                    31:2b:dc:9c:c4:9f:27:f5:27:6f:1a:9d:73:76:6c:
                    bc:72:43:ef:f3:4c:4a:b7:23:96:bd:f4:e2:7e:76:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8E:7D:15:E2:C5:F2:A6:EF:A0:61:77:0E:37:A1:4C:65:B1:F3:BC
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:85:1f:70:ae:85:5e:57:12:6f:52:5d:85:ba:5e:1d:e3:e8:
         61:18:59:2d:08:86:81:6f:e0:2f:ae:e2:d0:db:4b:5a:66:da:
         ab:da:03:5f:bd:93:4a:64:d1:8e:06:99:ed:b2:e3:94:8c:1c:
         c0:b0:70:b3:32:a5:f6:7c:55:67:ae:a4:09:90:4e:e6:02:a0:
         9d:1a:f6:63:a4:83:3d:d9:a9:0e:b7:bb:23:7f:5a:14:e6:d5:
         a7:50:ed:f7:f4:35:bf:55:aa:37:97:4e:e8:f1:9a:33:9a:0f:
         66:7c:c0:cc:d5:4b:c0:f1:05:41:d4:9d:49:6d:f6:e2:1f:bc:
         fe:ae:59:e3:e3:fa:93:2b:b5:b4:42:8c:2d:58:d0:b2:bf:00:
         b2:78:2d:6c:b1:01:89:fc:61:99:c4:f0:98:47:f1:01:c2:a2:
         09:d4:6e:5d:17:6a:be:d5:29:04:aa:e1:9f:ba:f0:72:0f:66:
         f5:34:b4:81:dd:d1:94:68:b9:5b:29:25:e1:8a:5b:3f:33:38:
         eb:de:97:4d:8e:9e:1f:a4:b7:ec:93:0d:67:27:06:19:dd:40:
         72:bd:ba:d1:9c:6f:0a:67:5e:c5:66:87:ce:8e:90:2d:8b:d3:
         9a:37:fb:3d:47:ec:18:85:68:4c:8e:e8:88:a1:b3:4a:83:d0:
         91:3d:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org