Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
File:                     JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json)
Hash identifier:          vDmsnWxeUP7mBhiaIYydpZpNGXOKXqs0nrzHzzdYMzA=
Subject key identifier:   14:8D:BC:5E:35:62:23:EC:1C:19:87:AE:FA:EB:52:1D:3F:2A:02:89
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
Manifest number:          05E8
Signing time:             Fri 22 Nov 2024 22:25:31 +0000
Manifest this update:     Fri 22 Nov 2024 22:25:31 +0000
Manifest next update:     Fri 29 Nov 2024 22:25:31 +0000
Files and hashes:         1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: qVLgaZZvD8TIfqPo/TRF4oUPUDdHctWNjB28w+Ns3r8=)
                          2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: 78jtZd1aLIJhGMZERXI/eJfp/YugWL7uQ9N+SuRaNXk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Nov 22 22:25:31 2024 GMT
            Not After : Nov 29 22:25:31 2024 GMT
        Subject: CN=674104db-51c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:b0:ee:3a:33:d2:dd:dc:1b:16:b1:d8:06:
                    53:0f:08:e5:72:6b:02:66:fd:f0:6f:d4:fd:4e:d4:
                    56:1b:81:9b:e7:b0:a1:28:20:20:ea:d1:30:ab:3b:
                    8d:bb:c3:5f:2a:a7:db:f3:42:4a:86:80:ba:2f:c9:
                    68:1f:0c:ef:0d:15:dd:2e:32:3a:2e:e6:b6:85:eb:
                    aa:23:8c:e6:ac:6a:c8:23:f9:fa:14:55:91:dc:55:
                    96:94:39:d3:60:c5:49:cb:aa:19:89:b9:17:bd:73:
                    15:1e:ca:4b:be:5d:fb:d9:b2:c4:58:a5:01:49:17:
                    fb:41:32:94:2b:b1:42:f2:e7:3c:86:c3:0e:7e:18:
                    b9:0b:88:61:3f:cf:c0:e5:34:c2:0a:94:31:81:fb:
                    c6:88:b8:57:8a:cf:d6:39:ad:59:06:51:b3:b5:ca:
                    d0:97:3a:cd:b0:6b:6d:11:68:83:8b:2a:7c:8f:b0:
                    54:03:09:99:03:f1:da:16:5a:ce:fe:fc:f9:2e:30:
                    64:50:32:c6:f5:49:60:26:46:f0:d1:88:0b:a2:9c:
                    7f:a5:26:65:c7:84:39:59:06:a1:5a:3d:62:da:ce:
                    b2:38:0d:c8:0a:a7:2d:20:18:a9:f6:81:52:13:64:
                    75:f9:27:10:c2:fa:56:62:33:ce:cc:aa:ad:b6:58:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8D:BC:5E:35:62:23:EC:1C:19:87:AE:FA:EB:52:1D:3F:2A:02:89
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:8c:80:40:42:91:5a:48:8e:19:d0:7f:49:a9:df:f1:85:
         e2:aa:ea:cc:d7:8a:bf:b5:0d:9c:9d:c1:c8:d7:eb:a9:2a:fb:
         f4:70:f4:a9:5c:00:72:69:3e:75:3a:2b:cd:12:74:02:80:d7:
         c0:e8:4f:fe:b1:50:a9:43:ee:15:9b:79:bc:95:ba:9f:f1:42:
         af:4f:26:aa:87:4f:93:b0:23:13:b4:71:83:0c:4e:bc:ed:b0:
         5a:23:60:94:10:30:c4:0a:53:76:5f:97:c3:87:a1:f6:45:cb:
         ff:4c:53:9c:e1:bb:08:ee:80:8f:63:85:82:ea:9f:39:89:41:
         c4:31:bc:61:87:75:eb:3e:31:cf:9e:c7:d4:0e:b1:3a:49:d1:
         a0:03:6f:b0:50:fd:92:c6:f7:af:91:f2:ac:12:6b:b2:20:de:
         63:59:fc:90:e6:8a:a3:1e:30:ec:3f:b3:d9:82:5b:ec:de:40:
         de:6b:55:ce:cc:92:ae:15:88:8c:1f:11:13:7b:86:1c:d3:d4:
         8c:93:53:87:49:c0:2a:fb:a9:03:d9:ff:24:67:4a:9d:16:c4:
         0d:09:9e:06:cd:91:64:ab:65:15:d4:22:49:bd:01:fc:a7:a2:
         9d:78:b2:c0:73:c7:cd:43:4c:9b:23:b3:37:03:51:e5:46:f5:
         78:f7:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org