Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
File:                     JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json)
Hash identifier:          L1tgS/z/GeKWo4bn1evNXvPqjldKNpLgkTucCEMjVGA=
Subject key identifier:   11:C5:18:C7:9C:53:6F:42:78:AC:77:16:DC:BC:EB:83:7C:83:B4:9F
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
Manifest number:          025C
Signing time:             Tue 07 May 2024 03:50:59 +0000
Manifest this update:     Tue 07 May 2024 03:50:59 +0000
Manifest next update:     Tue 14 May 2024 03:50:59 +0000
Files and hashes:         1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: 2cEg9q5NipM+He/IID0ZWHnSirHbUqx0GxY4h7I3xvY=)
                          2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: OYNdYi1bozxcaoUI6QQq6o5EstuNZsTp1pz8ri3kBn0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: May  7 03:50:59 2024 GMT
            Not After : May 14 03:50:59 2024 GMT
        Subject: CN=6639a523-35bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:f7:7b:57:08:cc:0d:d2:8f:2b:43:1e:5e:
                    64:29:89:4d:1b:c3:62:a5:a1:31:93:ce:10:b4:73:
                    b7:7f:83:08:ae:e1:1e:0b:4b:21:9f:c0:d5:42:2d:
                    34:12:20:e1:be:0d:1f:c7:e9:6d:59:32:37:bd:fd:
                    c8:1f:9c:fd:4d:e6:dc:a5:12:91:8a:12:40:6e:ce:
                    48:e4:75:eb:dd:8f:07:da:e0:94:c4:59:ec:ae:37:
                    1f:97:e7:b2:74:6c:0d:4a:1e:8b:21:91:87:99:0c:
                    7b:fa:52:0d:4f:1b:31:36:33:40:53:2b:45:3f:1f:
                    cd:7b:4f:22:39:b8:ea:c0:84:6c:f9:ed:53:d1:8f:
                    5c:9a:63:c2:49:a4:67:ec:63:5e:80:33:82:bc:c4:
                    65:01:7e:72:07:d8:74:bf:04:e8:b5:73:be:8d:39:
                    ad:e0:c6:a4:92:1e:07:f7:75:f4:b4:e5:6e:ce:68:
                    12:51:3d:c3:bb:aa:3d:83:a7:61:76:2d:d3:2a:93:
                    3b:f7:c5:8e:b3:de:00:82:cf:9e:f5:e4:95:38:07:
                    9e:3a:01:fc:5c:87:45:a4:a5:85:60:7c:dc:ea:ae:
                    64:b4:9b:65:0a:86:a9:98:b0:9a:e2:8a:e0:af:3f:
                    05:8c:e7:31:56:9b:4e:f1:8e:3d:9d:07:ce:05:96:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:18:C7:9C:53:6F:42:78:AC:77:16:DC:BC:EB:83:7C:83:B4:9F
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:bc:07:6b:1d:71:56:3e:b8:46:9b:77:66:5d:b2:8c:da:
         b9:46:9b:c6:22:78:3b:ff:6e:6c:b4:a5:7d:b7:87:e5:6f:6e:
         3c:b7:e7:d2:b5:e5:33:59:8e:b9:49:b2:09:08:1e:16:29:1c:
         4d:63:77:72:bc:ed:43:99:84:f3:68:e2:07:91:32:55:bd:e8:
         f5:68:fa:01:45:8e:30:9d:54:7e:4a:6c:34:6b:9a:fb:39:7d:
         4c:d9:ac:b5:9b:ba:47:1b:2c:59:77:ac:75:c8:e6:88:04:5e:
         6e:b1:8e:67:28:dc:ce:3e:cb:4e:2e:6d:fd:e7:92:2a:2e:db:
         fb:d1:5b:b2:2b:26:5e:1e:df:79:0e:88:ca:cb:3e:78:63:07:
         86:aa:3f:61:3c:00:ba:28:6f:c9:93:d4:73:d3:a1:20:54:0d:
         31:cb:22:3e:ed:03:b7:51:6b:e2:c1:11:7e:52:8d:b8:bf:9c:
         63:06:f9:b1:35:38:f9:2c:59:ab:00:ff:87:a7:ef:64:11:f6:
         5c:02:05:86:30:f6:7c:a2:a2:7c:09:f2:6a:2f:29:cb:2c:f2:
         4c:2e:d7:83:45:42:5e:8e:f1:e7:14:40:c2:ac:0d:82:da:8b:
         f8:78:dc:c4:ce:e7:9a:c4:34:bc:82:90:9c:f4:25:29:44:d0:
         de:8f:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:34:50 2024 by rpki-client on console-fra.rpki-client.org