Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          cLr3lhf89/biyuI1kr9ynM7vYQkjXWjqNCMqHC6kTzc=
Subject key identifier:   94:B2:7A:B7:1D:A2:EF:A5:48:07:3C:E8:76:78:58:E1:F5:0E:E3:4C
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       040B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          0400
Signing time:             Sat 23 Nov 2024 00:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 00:01:50 +0000
Manifest next update:     Sat 30 Nov 2024 00:01:50 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: yOCGdqRuJntojHAQ79wnou8b7+4Uu2H3PszfwkL2Qg0=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /dWcySCBSA40/p7ZEddMfO9MmkVM6uS6LcL9k3LtIJk=)
                          3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: /afmQB3zM94nTq3/2oDWU9CHh0hD2dVbGgL+IHZt9os=)
                          4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: cJIwz/JsTDgsL3u8mdpUstTIr2TVgKDrX6Ae6kVf0Ps=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: Nov 23 00:01:50 2024 GMT
            Not After : Nov 30 00:01:50 2024 GMT
        Subject: CN=67411b6e-9413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:00:ce:9b:97:81:bb:aa:5d:05:40:ff:55:
                    be:c1:21:35:b4:8a:25:87:4f:f9:3f:83:56:fc:cb:
                    58:bf:b7:ca:ff:ac:7f:29:0a:8a:d8:ff:c5:24:f2:
                    9f:cd:9b:1d:2c:fc:b8:1b:a2:2d:c2:0f:a8:08:b9:
                    8d:0e:cc:8e:56:62:95:7a:81:92:7b:e2:db:8a:47:
                    ee:a2:80:bd:e1:e0:17:3f:cc:75:ba:ef:a4:66:cc:
                    ba:86:2a:02:89:68:9e:5e:c2:db:f7:9c:31:80:db:
                    c7:7b:f0:51:d2:d4:36:b3:88:e3:f3:55:80:7a:a9:
                    91:48:16:f1:1d:21:2d:3a:53:97:db:71:b1:3f:27:
                    55:c3:72:00:9f:0a:7d:5d:cd:8d:02:bb:23:b6:93:
                    be:5f:6b:5e:af:13:9c:e7:e8:c2:e0:7b:49:f7:ab:
                    29:9e:da:de:7c:f2:b8:0c:8f:a9:92:fc:9c:b7:04:
                    2c:ed:11:60:7d:c7:3e:34:6b:50:44:3e:90:65:75:
                    b8:66:65:a3:c5:63:47:00:9c:a8:65:4a:dd:3f:93:
                    ef:ff:91:75:f9:1c:7e:00:47:c4:5e:b6:e7:81:ca:
                    1a:91:a1:48:7a:67:4e:81:b9:be:26:56:58:ce:7b:
                    5b:a3:d6:01:ff:8c:1f:12:c4:5b:d9:a3:97:f7:87:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:7A:B7:1D:A2:EF:A5:48:07:3C:E8:76:78:58:E1:F5:0E:E3:4C
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:c9:5c:04:0a:77:89:1b:ca:21:f7:28:b0:06:0a:a0:ae:
         01:29:3e:e3:b6:d2:94:38:04:70:26:1e:21:9e:59:b4:bc:64:
         9a:b6:d8:b5:c9:c5:74:ec:90:87:1b:56:95:bc:f7:95:f9:7d:
         04:7c:b6:ca:bf:97:3e:c4:3b:fd:78:b8:ad:62:7f:32:81:da:
         11:99:da:63:df:9a:1c:90:c3:eb:cd:c2:1c:99:3b:e0:a6:20:
         f8:5f:85:6c:fd:52:0b:c3:f3:d1:24:6c:81:9c:eb:83:f9:1b:
         77:6f:16:0d:a8:90:bf:e7:a1:86:43:38:f1:cf:f2:3b:a1:2f:
         15:68:f3:70:42:83:33:0c:c6:d5:21:02:b2:f0:ab:f1:f6:a8:
         d8:84:28:a8:0f:de:1f:47:78:90:9d:73:55:2d:d7:9a:0f:41:
         b5:82:1e:fc:df:d9:0f:d2:29:ec:9f:4c:2b:b2:10:0e:55:a2:
         5e:9b:d9:21:4b:50:d0:77:7f:5c:2f:44:d3:cb:80:5a:2e:64:
         0e:dc:cd:b3:39:94:4e:fd:81:58:a3:5f:ba:b5:5d:13:0b:65:
         1f:a2:e7:6a:d0:02:54:67:e9:4c:15:fc:d7:9c:cc:15:dc:d6:
         ce:b6:2a:95:d2:5d:f1:1d:61:c3:10:f4:22:08:e5:ba:38:1d:
         1b:18:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org