Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File:                     jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier:          CTfTkxorA415r5sGhopXyrIjNmFld+mLYoDQ6AXGvNc=
Subject key identifier:   F8:39:ED:C2:09:26:DA:FC:8A:C5:41:4D:1C:5D:2C:66:9D:29:DB:3E
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number:          070E
Signing time:             Fri 22 Nov 2024 21:28:43 +0000
Manifest this update:     Fri 22 Nov 2024 21:28:43 +0000
Manifest next update:     Fri 29 Nov 2024 21:28:43 +0000
Files and hashes:         1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: MAM2Z04lZtsHHjePwmWrEbb0FHdxnNW6WUJ/a2ySsR8=)
                          2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: Hw7hrozqKbbDsxWyDWVLPt/36LFVlEmzB5hwgbtPNAo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl
                          rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Nov 22 21:28:43 2024 GMT
            Not After : Nov 29 21:28:43 2024 GMT
        Subject: CN=6740f78b-7ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:d2:45:d7:7d:4e:a0:ba:df:e6:e3:20:87:
                    15:20:67:e5:66:77:25:b4:d4:15:fa:57:dd:03:c9:
                    0b:a6:c6:35:03:28:a8:ca:69:52:3d:c6:6e:bc:90:
                    01:1a:86:84:b6:63:3a:9a:e0:9d:19:be:24:92:e6:
                    a6:45:c2:e1:08:dc:79:29:eb:bc:66:62:b9:ea:8c:
                    ae:5d:66:1d:62:dc:af:c2:dc:77:cf:81:ae:47:f6:
                    b6:11:7b:a3:b0:9a:9b:34:05:82:ef:af:3b:22:92:
                    90:83:49:9f:67:07:08:36:5b:c9:39:1d:71:f8:dc:
                    e8:c9:2d:2d:7a:84:95:cc:11:23:0e:a7:09:73:fc:
                    b0:3d:df:fb:20:d6:9a:07:6b:46:e2:d1:10:f5:51:
                    86:62:f9:ca:9e:c6:b0:00:94:e4:ad:3b:b8:8c:a2:
                    1f:b7:c9:f1:e4:8a:b2:cb:8d:32:e3:be:af:56:84:
                    57:a9:5d:ed:a2:53:df:27:31:d7:2e:87:8f:8a:bc:
                    39:69:de:ac:10:2b:95:cf:f4:84:95:cf:d1:f3:49:
                    5a:50:38:f8:55:20:d3:7e:f2:d4:af:cb:64:85:fa:
                    0b:8b:59:ff:77:c9:77:b0:ea:90:b1:a9:b2:9a:5e:
                    3c:6b:9f:7f:e6:11:ee:1d:d0:90:a1:77:5c:c7:10:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:ED:C2:09:26:DA:FC:8A:C5:41:4D:1C:5D:2C:66:9D:29:DB:3E
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:aa:e6:b9:35:e1:48:6a:95:51:55:c4:95:2c:00:63:2b:
         56:07:a6:da:4f:44:cf:e9:c4:71:8c:b4:be:b6:5d:ed:83:1e:
         3a:8e:05:95:94:41:bc:09:be:da:9a:f4:32:81:fc:55:c8:24:
         0f:b2:bc:49:e9:47:ce:80:8b:93:47:4d:b4:03:b6:75:d8:d2:
         2c:6a:95:c9:33:26:f7:05:df:7d:58:d0:c0:b0:e2:f4:04:56:
         42:cf:23:a5:cb:49:f1:63:94:f5:d4:1d:05:82:52:47:60:9c:
         65:08:74:71:1d:fb:2c:d0:08:b1:a3:bc:5a:b9:a2:33:7e:0d:
         45:9e:0f:38:09:86:c0:4e:a6:67:9e:8c:6f:74:65:c7:29:68:
         80:9c:37:2b:d9:11:a3:b9:8d:eb:1a:8d:05:63:e9:7a:40:bb:
         4f:54:34:50:46:92:f1:c0:b1:94:94:ed:ca:c9:a4:c3:35:01:
         3c:71:17:8c:e8:de:da:d7:8e:c7:e9:a0:06:70:84:d6:64:f4:
         1c:da:e7:c2:9d:fa:1c:d8:9d:07:4f:a2:aa:4a:ef:6d:b7:cf:
         99:cf:87:eb:0c:76:c7:7e:a2:6a:71:20:bb:2f:5f:62:15:be:
         81:29:82:3a:fa:8f:23:82:4e:df:b0:1a:c5:a5:60:0d:80:64:
         68:8c:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org