Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
File:                     JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json)
Hash identifier:          M0G3utblHVdjk80G2pcGYP2mMHvLcSGvwqeT6MCNmJE=
Subject key identifier:   A2:61:D7:61:27:E3:A4:53:09:29:D7:2B:8D:BE:AB:9D:1C:89:33:EF
Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33
Certificate issuer:       /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
Manifest number:          30
Signing time:             Thu 19 Sep 2024 05:54:08 +0000
Manifest this update:     Thu 19 Sep 2024 05:54:08 +0000
Manifest next update:     Thu 26 Sep 2024 05:54:08 +0000
Files and hashes:         1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: t+WAGIC/J7wJzHAr2G6krNdYSfvVaJJ3LFfRyZ7krJI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 05:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933
        Validity
            Not Before: Sep 19 05:54:08 2024 GMT
            Not After : Sep 26 05:54:08 2024 GMT
        Subject: CN=66ebbc80-acbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:2f:59:cb:4a:60:da:bc:6d:55:f5:70:b4:
                    fc:5e:48:a1:52:e6:08:4a:e2:26:a0:cd:48:65:db:
                    4b:d4:4e:39:7a:61:97:5f:f1:ce:88:1d:bd:82:03:
                    dd:34:8b:ea:fe:5c:ef:24:d2:d3:e9:05:a7:7a:c0:
                    a2:c1:36:6b:7c:6b:f8:34:8e:22:b9:ae:ae:75:2a:
                    70:36:68:4c:18:ca:ae:05:40:9b:e9:3f:d0:60:8c:
                    3b:1f:55:80:47:f1:9b:1d:a8:ae:cd:f1:85:ff:75:
                    09:6c:f2:0f:bd:f1:07:d1:78:4a:5e:2a:df:6b:aa:
                    3f:68:34:32:d6:3d:71:91:86:7d:2f:a0:eb:2a:60:
                    29:64:5b:36:c0:43:a4:9b:bc:3d:38:85:32:8a:c5:
                    78:3c:1c:d4:bd:2a:57:f7:4a:28:f9:a8:05:97:d1:
                    97:ac:32:bf:58:9a:c3:9c:09:43:f0:b7:97:e9:cb:
                    16:3f:49:a9:cb:15:a6:87:18:19:48:e7:50:2c:5b:
                    5f:af:e9:5b:36:87:4c:28:50:dc:9b:05:1e:57:0d:
                    c7:d0:e0:d3:03:c9:88:34:11:95:2f:47:15:54:03:
                    b2:10:06:8b:ce:11:10:ce:cd:5c:ac:6b:9e:87:fd:
                    be:cd:42:e7:88:e1:ad:34:95:23:30:f2:26:2b:cc:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:D7:61:27:E3:A4:53:09:29:D7:2B:8D:BE:AB:9D:1C:89:33:EF
            X509v3 Authority Key Identifier:
                keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:b7:65:bd:68:6a:b9:86:cb:ce:f6:eb:04:5c:6f:0b:bb:
         fc:d1:7b:78:68:c5:2b:bf:77:1a:f9:12:78:26:88:c6:10:3b:
         84:c8:5b:d1:10:82:3d:b6:86:9b:d1:04:a3:36:be:49:1b:86:
         d7:aa:45:93:d7:05:55:1d:7b:06:68:c7:ce:d0:d0:51:9a:e1:
         a5:e6:ab:41:ad:58:a0:fd:dc:bc:ae:01:22:a5:78:dd:1b:a9:
         45:37:e0:5f:01:59:7a:60:b1:05:70:4c:ca:38:ba:5d:64:a4:
         1f:60:48:3b:85:dc:97:14:71:b3:26:df:5f:82:cc:16:1c:2a:
         5b:04:08:01:76:16:82:ff:10:28:b8:0c:b0:cd:56:3d:13:50:
         90:ed:19:71:d7:30:06:2a:b8:e5:eb:ac:5f:6e:e9:c8:14:31:
         3a:2d:60:46:e4:f3:01:d7:fd:79:86:d2:60:d9:c5:fa:23:25:
         bb:18:b4:d1:56:d5:c4:b0:3e:a1:be:ef:08:1e:a7:93:f6:17:
         d6:74:fa:e1:f0:6e:a6:9e:25:f5:4e:29:36:ee:1f:13:ec:20:
         d3:9d:34:19:42:2c:a0:42:93:ce:f2:ea:66:2b:55:02:8e:d9:
         95:69:97:7d:7a:a7:c8:ed:62:59:ba:73:0b:81:8d:33:5c:60:
         66:29:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:49 2024 by rpki-client on console-ams.rpki-client.org