Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
File:                     JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json)
Hash identifier:          XiAo1s2AUC5eggXJtLNuAuxt+5MCRlTK+aiM4mMwZsk=
Subject key identifier:   3F:B1:EC:BC:AC:D9:27:92:E1:FF:58:FB:48:17:A4:B3:15:34:08:2E
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
Manifest number:          06E1
Signing time:             Tue 30 Apr 2024 23:08:33 +0000
Manifest this update:     Tue 30 Apr 2024 23:08:33 +0000
Manifest next update:     Tue 07 May 2024 23:08:32 +0000
Files and hashes:         1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: efMLNw5K7ghNXvQMZ3EUh8cbgWs3A0PoCF23NuLJHoI=)
                          2: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: rUojVvChslL052f00vhcEYlHVvrg6xsmwplGxIZyfGM=)
                          3: 5BAD00E6ED7511EC86064A84C4F9AE02.roa (hash: OZpUygo+yTsAMYt7CnolVfhgMLHfHuQV3vb4qwc9UL0=)
                          4: 9ADCD3BA0CC211ED8C32645BC4F9AE02.roa (hash: 1rkYOWsSbawrSHqOf91E+EnaPlFrs2igbP3gSzDiOVs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Apr 30 23:08:33 2024 GMT
            Not After : May  7 23:08:32 2024 GMT
        Subject: CN=663179f1-f8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:44:56:27:63:9f:5e:51:4f:4a:db:c7:c9:
                    39:f1:e8:df:42:43:ea:3d:11:5e:5c:16:84:38:f0:
                    fb:13:fb:2b:65:bf:55:19:08:30:59:a3:54:3e:f3:
                    bb:a9:90:53:18:17:f4:03:5d:c9:85:f5:24:8a:de:
                    ea:77:38:2c:d0:4a:3e:d3:bd:da:b1:ff:72:59:2c:
                    41:4a:76:b6:1b:1c:ad:ad:4d:d0:3d:6d:48:76:06:
                    de:89:8a:10:6a:19:8c:b2:87:06:a3:04:88:3e:d8:
                    84:52:9f:01:02:8c:44:30:78:ea:70:8d:0b:ab:e7:
                    3f:a1:26:66:7b:77:d7:60:b8:6e:ef:e4:03:2f:19:
                    fe:79:8d:a7:e8:dc:12:8c:c2:97:0c:e6:e3:7b:ef:
                    86:1b:31:42:b2:ed:39:66:f6:3b:f0:03:b3:cf:6a:
                    41:67:a3:56:28:5b:b7:d9:c5:ce:b9:68:98:b3:99:
                    fa:05:fe:81:e7:ef:fd:e6:f0:c7:2f:02:26:63:6d:
                    9b:e1:99:ce:13:0c:a0:72:0a:5d:bb:6f:ae:c9:a5:
                    c4:97:fd:d4:67:72:f5:e7:a5:5e:6c:12:ac:5d:04:
                    25:72:27:3c:f2:4a:c9:a1:0c:6d:97:5f:43:ed:a6:
                    9a:dd:cf:98:18:6d:a2:57:10:9b:45:42:0f:12:90:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B1:EC:BC:AC:D9:27:92:E1:FF:58:FB:48:17:A4:B3:15:34:08:2E
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:48:ac:9b:e2:b4:7a:db:ab:81:88:60:cb:7d:3b:1e:55:
         f8:69:34:87:27:e0:3d:30:ae:21:3f:34:49:12:d7:13:80:1f:
         6b:0c:74:3c:48:42:f3:bc:97:3e:ad:4c:eb:53:ca:67:04:99:
         e7:8c:2e:64:50:36:29:b7:4f:37:0d:23:88:b2:c2:88:2d:53:
         e9:4f:fe:6c:24:6e:1b:0d:98:09:5a:a6:d7:e8:38:c3:d8:05:
         c4:c5:44:6b:d4:d2:6a:8c:7c:24:58:38:20:ec:fa:ce:c8:e4:
         e7:a3:dd:00:af:95:01:99:be:03:14:55:75:45:f6:d6:35:a6:
         98:ba:be:04:2b:e8:45:ca:d0:bc:ba:75:6b:28:7d:15:d1:31:
         15:77:5d:b6:10:52:38:f8:86:91:ff:0a:04:0f:9c:83:09:8d:
         65:4e:f9:33:3d:4b:42:e6:89:5f:3a:c4:a8:7d:96:89:d9:85:
         4f:5c:ae:63:4d:f8:87:ee:a8:ae:a7:78:da:ce:f3:11:55:03:
         b6:38:e4:38:13:84:51:b6:20:b7:51:b8:f0:09:2e:20:c4:f5:
         22:6c:1b:31:9f:b6:12:0c:f2:3f:da:5d:6f:bc:49:4b:5a:cd:
         02:bd:7e:17:bd:e8:68:c6:7e:a8:71:36:be:92:d4:4d:ba:d9:
         c7:c7:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:40:14 2024 by rpki-client on console-fra.rpki-client.org