Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          PaPrS331ys/lbD05pPB7PN4QKBy/15LmtwOHVcVnFzY=
Subject key identifier:   78:F5:20:28:C6:A3:90:E9:EF:F2:A4:B3:1B:A4:2A:E6:86:07:5C:23
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       0723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          071E
Signing time:             Sun 24 Nov 2024 21:08:21 +0000
Manifest this update:     Sun 24 Nov 2024 21:08:21 +0000
Manifest next update:     Sun 01 Dec 2024 21:08:21 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: MYanLuM/vpnNgD7idang1DklXE0H5WRhSVIfeY5KEM0=)
                          2: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: 1TJJ9TxJWi7wnEGMOxXiwcAZ23eOY7mFMgZfaQA6EKg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Nov 24 21:08:21 2024 GMT
            Not After : Dec  1 21:08:21 2024 GMT
        Subject: CN=674395c5-e4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:fe:0c:c3:7a:3a:1b:45:56:c4:70:ea:76:
                    62:a3:83:f7:88:21:6c:d9:a2:54:b7:25:a5:bc:4e:
                    61:e1:19:c1:6d:b0:60:b3:0e:fc:89:8b:94:28:6b:
                    e5:30:39:79:df:55:01:f2:4d:61:84:48:9e:66:b2:
                    26:57:3a:83:04:97:89:49:89:d7:a2:a4:f6:82:f3:
                    db:cb:83:56:74:81:0c:5a:da:cf:5b:f5:bd:b2:9d:
                    ae:52:17:96:1d:3e:54:43:e9:30:a2:c3:1d:bc:89:
                    85:34:08:62:b3:db:d2:ed:ce:49:81:d7:f8:0d:03:
                    10:9b:18:73:a8:b6:e0:0d:31:ec:7e:0f:3a:38:85:
                    1a:70:16:03:6d:4a:24:ac:82:8f:df:50:2c:f1:8c:
                    4d:7d:83:91:07:b3:b9:1f:cd:47:81:ad:98:fb:c8:
                    b5:c2:bf:b3:55:82:33:2a:e4:53:e8:ec:8d:c4:bf:
                    c5:44:6f:45:6c:c2:e4:31:51:92:c2:99:d5:ef:12:
                    6f:cf:eb:9a:fe:89:94:64:2b:81:d7:7b:e2:62:90:
                    7a:59:7b:12:a2:99:a2:50:b0:7a:39:04:db:f2:33:
                    aa:11:ec:17:0c:f9:30:79:77:6e:f6:86:0a:f3:10:
                    5d:0f:dc:4c:e9:05:5b:15:05:a7:08:87:45:05:03:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F5:20:28:C6:A3:90:E9:EF:F2:A4:B3:1B:A4:2A:E6:86:07:5C:23
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:ea:38:d2:f1:4a:7f:16:13:e7:fa:fd:ca:06:b7:2b:92:
         e4:0b:95:7e:38:18:e5:46:54:37:f7:5a:21:b4:1e:dd:4a:1e:
         18:58:25:83:88:63:c1:13:a9:86:5c:7b:b9:5a:4e:a5:11:62:
         fb:8b:24:50:de:e0:6f:e5:24:e1:ae:84:4f:05:29:f2:2d:fb:
         7a:93:31:e5:5e:5d:be:00:03:32:21:35:68:34:a2:37:45:f0:
         cd:4f:20:e5:00:34:d4:8e:91:12:6b:65:64:7f:68:bc:7a:bd:
         04:50:aa:09:37:34:fc:c7:8a:bc:23:1f:58:64:b4:cd:ca:81:
         af:3c:b3:5d:9f:3f:62:d6:35:83:3e:9c:f5:07:61:a7:a6:54:
         18:6b:bc:ad:d7:a6:2c:6a:86:e8:92:1a:cc:2e:3b:9e:34:63:
         a3:a1:72:6f:a1:fc:40:53:5e:91:ca:75:ca:7a:83:9c:28:94:
         a6:75:35:96:b5:74:8a:a4:10:41:14:58:8d:bc:28:ab:6a:78:
         ab:41:48:09:a7:86:dc:93:64:b1:03:1b:f8:62:ae:da:91:1f:
         cb:c5:b5:25:50:eb:aa:28:94:0c:53:ea:ca:40:f8:cb:04:58:
         a6:8a:3a:1f:a5:3a:4c:bd:75:82:1f:36:7b:28:f6:1e:fb:22:
         ee:8f:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:11:59 2024 by rpki-client on console-fra.rpki-client.org