Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File:                     JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier:          aNJYUhk7Cc7dW/ECfsCwYdvnfY0b//4Agcg8VOl8KVM=
Subject key identifier:   A9:2E:9A:5A:84:0E:2D:61:8A:ED:FD:1A:E6:04:D9:B5:E9:22:27:73
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer:       /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number:          1F
Signing time:             Thu 21 Nov 2024 05:56:00 +0000
Manifest this update:     Thu 21 Nov 2024 05:55:59 +0000
Manifest next update:     Thu 28 Nov 2024 05:55:59 +0000
Files and hashes:         1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: RXMZJJtv74Io3hHdj530Kbt70VOwfzamBbvbJ4/rdYs=)
                          2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
        Validity
            Not Before: Nov 21 05:55:59 2024 GMT
            Not After : Nov 28 05:55:59 2024 GMT
        Subject: CN=673ecb70-5130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:ea:1c:ac:84:19:77:c0:80:fc:a9:22:bb:
                    5c:7a:71:1e:a8:53:18:41:6e:ed:25:71:5c:ac:86:
                    3e:02:7b:7e:63:1c:97:4a:9b:5f:ed:27:61:2f:01:
                    59:12:f1:46:8d:c3:5b:c9:95:fe:d2:61:31:9e:16:
                    3c:04:84:d9:dc:af:74:d0:f6:b3:e2:29:cf:16:15:
                    af:5f:bb:63:67:20:4a:c9:51:45:08:fe:fb:14:bf:
                    8a:fa:9e:f6:1b:fa:f4:01:76:df:1c:37:e8:f0:be:
                    01:57:43:06:a1:e2:71:0f:d8:7c:e5:ce:02:61:2d:
                    6f:02:55:55:4d:0e:85:79:db:af:b7:7f:11:a4:04:
                    fb:33:88:64:63:3d:82:1e:c3:4c:ac:ba:a1:4b:a8:
                    af:ea:d1:98:b8:ae:f2:fc:f8:91:ff:87:e5:4e:37:
                    7f:95:fc:24:be:69:fc:03:09:11:ee:eb:d1:a1:b1:
                    fb:e1:90:e0:95:c9:98:e1:93:7b:0b:cd:53:13:b2:
                    53:2b:a1:14:70:1e:9d:7f:c2:d7:c0:29:a9:b9:cb:
                    a5:bb:b2:8c:60:6a:d5:be:55:10:f2:8b:fd:bd:b0:
                    eb:ab:95:9d:e2:80:61:80:f6:28:02:4a:d2:19:11:
                    55:cf:21:70:ea:05:3a:63:2c:7d:d2:3e:73:5a:cf:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:9A:5A:84:0E:2D:61:8A:ED:FD:1A:E6:04:D9:B5:E9:22:27:73
            X509v3 Authority Key Identifier:
                keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:be:77:f2:98:23:33:81:6e:8b:fe:3d:14:b5:52:94:c9:16:
         d2:5c:f8:86:d5:ce:a6:b1:1d:fc:0c:af:b5:b9:4f:f1:e4:46:
         b5:75:4f:d1:6b:4a:f3:bc:ef:11:81:75:00:16:18:d1:b3:64:
         33:31:62:55:e2:ff:5c:75:68:9b:8e:af:e8:1f:fd:d4:f9:24:
         9e:dc:08:dc:f6:02:8a:d3:35:36:cd:d6:7a:a3:06:5a:93:e7:
         d7:39:56:87:19:08:4e:ed:db:92:22:3f:de:58:48:5e:0d:67:
         34:d7:97:19:9e:a5:c1:8f:d9:8e:21:10:16:6c:7b:42:d2:fc:
         2c:c5:ae:b7:b6:6c:d6:b4:2d:b2:f1:91:f5:74:d2:ed:fd:4a:
         1a:8d:08:49:01:29:eb:80:71:02:1d:65:1e:a8:7a:d5:8c:a3:
         fd:3a:fa:18:92:ba:71:5d:bd:17:18:0d:29:39:2c:67:0d:e7:
         14:d1:88:ad:c5:e8:ff:44:0d:2b:02:94:ef:4a:44:3c:b0:bf:
         e0:d3:d9:49:1b:c0:5a:0d:73:cc:b6:e3:35:1d:4b:1f:d5:0d:
         02:12:9e:e1:56:8b:37:39:8a:1e:9e:e1:d1:18:a5:20:67:63:
         87:30:2d:32:fb:db:7a:97:5d:cd:d5:2a:d0:8e:f7:ca:62:c0:
         37:96:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org