Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
File:                     J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json)
Hash identifier:          0U7uPORPRwFOXUApKW7DOyPlEu/QIV2WwcRvoa8G+nY=
Subject key identifier:   12:F6:BE:7E:0E:9E:A3:4E:8F:FB:AB:43:E7:50:84:1E:A0:28:3F:F4
Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
Certificate issuer:       /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Certificate serial:       0543
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
Manifest number:          0535
Signing time:             Wed 20 Nov 2024 23:04:55 +0000
Manifest this update:     Wed 20 Nov 2024 23:04:55 +0000
Manifest next update:     Wed 27 Nov 2024 23:04:55 +0000
Files and hashes:         1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: NojvLOva1L34dLG2evBxoAc6E3p0qSkTrdxKGtsSwaY=)
                          2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: uNq0QpwIqft6l+P+6Kr1hZ6PT/drQw5jIwJZrCfNjqY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
                          rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
        Validity
            Not Before: Nov 20 23:04:55 2024 GMT
            Not After : Nov 27 23:04:55 2024 GMT
        Subject: CN=673e6b17-2e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:a6:4e:0a:2c:eb:5b:c2:cb:6e:f9:39:bb:
                    f0:69:f8:0e:fe:e6:50:31:83:ea:f4:34:23:b5:a1:
                    46:3d:2b:51:89:09:b2:87:53:d4:6b:e1:3e:89:99:
                    30:a6:c3:69:2e:4c:0c:d4:02:39:ef:06:5b:66:59:
                    7a:2e:44:77:1f:2c:f7:ac:c6:90:66:7c:33:2a:51:
                    da:22:95:87:a1:62:c3:ee:90:b3:91:58:d9:85:0d:
                    8f:76:ae:eb:03:8d:cd:d3:27:6c:25:d7:25:a0:1a:
                    ad:39:b6:12:39:f6:20:95:2e:3e:67:6f:2d:52:c7:
                    24:d1:5a:ed:40:15:99:b4:7c:d6:12:f8:28:24:50:
                    f6:a8:55:f8:70:08:ce:d0:a5:d7:83:26:eb:4e:4b:
                    ef:31:1b:a9:22:5a:57:53:cc:64:c9:b3:11:e7:df:
                    32:df:03:97:9e:16:83:c2:bd:6b:38:b4:8a:b1:3c:
                    c9:c0:1c:51:34:f2:d2:08:12:b7:52:5f:6e:5c:9e:
                    b0:b8:62:2f:50:35:51:e1:db:2f:cf:ff:53:38:cd:
                    1f:66:bf:82:2f:f5:2d:90:ed:af:bf:7a:a8:28:d8:
                    8e:9f:fd:ed:f6:3f:2a:c6:c7:b3:23:bc:24:da:3f:
                    68:e5:48:70:98:32:27:b2:73:d6:3a:d6:ee:30:ea:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:BE:7E:0E:9E:A3:4E:8F:FB:AB:43:E7:50:84:1E:A0:28:3F:F4
            X509v3 Authority Key Identifier:
                keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:17:cd:d1:59:40:be:d6:ff:37:4c:b6:e7:ee:2b:57:a2:c3:
         74:b1:e0:ef:35:84:50:23:bd:e4:48:af:4e:bc:df:43:78:21:
         02:4c:2d:1a:72:6e:09:fa:b0:dc:2e:aa:2f:c9:a6:0a:78:ca:
         60:ca:67:d8:0f:e3:61:11:be:2b:c0:ed:75:8c:2f:9e:6f:fc:
         da:9f:ad:31:74:35:1b:8c:26:17:f9:42:1a:35:79:e3:f1:60:
         41:ab:ec:3d:d7:63:14:c9:4a:18:39:86:44:1e:4d:a5:d6:41:
         4c:bb:2d:8e:84:a3:cb:ea:15:e7:af:37:0c:91:4d:33:1c:04:
         bc:4b:56:cb:e6:75:45:92:e8:90:e5:7c:ed:f3:1c:85:f5:02:
         c0:c8:c0:be:7b:a9:47:4f:78:66:79:20:6a:a8:dc:28:07:c9:
         3b:47:58:ec:99:86:74:f6:35:0e:7b:93:df:9f:21:8c:aa:16:
         d4:91:2e:a8:46:93:52:1f:c9:a7:f1:6b:93:d8:52:23:6c:c7:
         90:99:cb:86:44:de:42:01:f3:ac:f1:19:1d:7d:90:71:9d:73:
         89:b3:89:95:43:ff:b2:ed:12:c7:66:c8:b4:a1:1b:5d:27:ac:
         4f:c1:39:2c:cc:5c:9b:01:3f:65:4e:9b:76:d6:25:95:88:3a:
         f3:90:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:57 2024 by rpki-client on console-ams.rpki-client.org