Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File:                     JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier:          +MbnYxyaWo15wijVRf0dYpPW6BRUF5sJd6TIXJuBaLA=
Subject key identifier:   34:27:65:B9:DF:EE:C3:92:89:93:41:B9:C9:75:6B:3E:CC:68:94:25
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number:          14
Signing time:             Thu 19 Sep 2024 06:18:33 +0000
Manifest this update:     Thu 19 Sep 2024 06:18:32 +0000
Manifest next update:     Thu 26 Sep 2024 06:18:32 +0000
Files and hashes:         1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: 5ZT5+1SVbqAAcE/xL1XK1HoQy9dseMWxDQRRhlwXVIs=)
                          2: 369F08805B9B11EFA3A8CD42C4F9AE02.roa (hash: Gli5OQCk4vyOjqdnpdaCTjn5fToHVdIhE2QY52pSZqg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Sep 19 06:18:32 2024 GMT
            Not After : Sep 26 06:18:32 2024 GMT
        Subject: CN=66ebc238-e4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:44:b8:75:13:bd:5f:a2:99:ae:02:02:df:
                    ea:a6:8c:5d:ae:73:f5:b8:42:01:54:36:40:c0:f8:
                    07:13:90:8a:2f:97:c2:57:35:5f:cd:9f:47:19:c0:
                    bf:60:e2:79:c5:65:d0:a1:5f:d8:fa:7a:75:d6:01:
                    41:24:9e:a1:23:40:fe:37:d9:84:16:85:81:7f:f3:
                    d3:d2:c2:df:3d:ac:0a:20:38:73:cf:25:b1:8d:cc:
                    c3:4d:54:ac:d7:fc:61:ac:77:58:19:ce:c5:89:cc:
                    7c:c7:8c:21:31:83:96:8e:0c:57:b8:c3:51:f7:38:
                    81:cd:7d:17:e9:30:10:88:8f:a1:00:30:2d:b2:63:
                    86:0b:80:4e:cf:33:ff:76:9c:ef:85:7b:bb:5a:bc:
                    7b:31:c5:4c:90:b5:11:6e:d2:00:6e:81:af:3a:37:
                    22:d2:db:95:56:6f:fd:ba:08:b0:5a:f3:4e:22:80:
                    f4:14:24:1d:38:b5:85:c5:2a:2b:f4:4d:a6:b8:6c:
                    c6:f5:28:4e:2f:64:90:98:9a:15:b5:95:de:86:20:
                    75:b4:34:97:41:e9:29:f9:f9:3a:3d:0c:c1:0f:42:
                    25:86:54:f1:17:fa:52:7a:fa:72:9d:1c:ef:19:ad:
                    2c:2c:8f:cb:4d:15:fe:89:18:55:c2:42:d0:0f:3d:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:65:B9:DF:EE:C3:92:89:93:41:B9:C9:75:6B:3E:CC:68:94:25
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:6d:ee:b4:4d:02:0e:af:83:9f:ef:2a:8a:10:c9:10:ce:
         c5:d1:a9:5e:f4:9d:de:a2:9b:06:d2:b5:b5:61:d3:8d:45:3a:
         a9:6c:8c:41:88:c6:df:de:e2:e8:e7:da:03:49:b1:b7:89:21:
         31:6a:68:e0:ad:ab:a0:c2:f7:a6:07:5a:c0:44:88:26:40:d5:
         5f:39:b9:fe:45:46:d9:7a:e6:81:32:5d:1f:25:bf:aa:8e:38:
         f0:0d:f5:36:d6:9e:c9:8b:f3:96:ea:a2:77:02:30:94:7f:01:
         17:59:16:30:56:38:4d:96:68:4e:53:c7:30:4d:77:93:97:a4:
         06:53:c3:7b:9b:e6:a8:15:c2:c3:34:5c:3b:34:7a:d0:de:98:
         fe:d6:37:14:2f:be:a5:96:6b:da:ff:87:10:f8:49:f2:cd:11:
         c4:5e:82:8b:d2:cf:98:03:63:76:32:37:71:b0:37:4c:9e:9b:
         6b:05:cc:00:c3:72:e9:b2:3d:76:b4:6d:a4:82:d5:6f:a7:b0:
         f2:a1:fb:94:a0:a4:ea:13:bb:a8:15:2c:85:71:0a:46:07:4c:
         95:8d:c0:71:83:11:a5:fb:26:4e:28:1e:d2:8e:b1:4a:48:1f:
         a3:97:98:ea:bd:34:36:8d:ec:70:99:d7:aa:6d:e8:18:d7:1d:
         18:47:01:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MUZGMTExMC8GA1UEBRMoMjYzQTU1MTQ2RTMxNzJDRkQ4RjAwQTZCQjE3QkNCMEVD
MjA5MTVDNjAeFw0yNDA5MTkwNjE4MzJaFw0yNDA5MjYwNjE4MzJaMBgxFjAUBgNV
BAMTDTY2ZWJjMjM4LWU0ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFc0S4dRO9X6KZrgIC3+qmjF2uc/W4QgFUNkDA+AcTkIovl8JXNV/Nn0cZwL9g
4nnFZdChX9j6enXWAUEknqEjQP432YQWhYF/89PSwt89rAogOHPPJbGNzMNNVKzX
/GGsd1gZzsWJzHzHjCExg5aODFe4w1H3OIHNfRfpMBCIj6EAMC2yY4YLgE7PM/92
nO+Fe7tavHsxxUyQtRFu0gBuga86NyLS25VWb/26CLBa804igPQUJB04tYXFKiv0
Taa4bMb1KE4vZJCYmhW1ld6GIHW0NJdB6Sn5+To9DMEPQiWGVPEX+lJ6+nKdHO8Z
rSwsj8tNFf6JGFXCQtAPPUx5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNCdlud/u
w5KJk0G5yXVrPsxolCUwHwYDVR0jBBgwFoAUJjpVFG4xcs/Y8AprsXvLDsIJFcYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRkYxLzAwRDhGOUFFNUI5
QjExRUY5NkFBNEY0MkM0RjlBRTAyL0pqcFZGRzR4Y3NfWThBcHJzWHZMRHNJSkZj
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmpwVkZHNHhjc19ZOEFwcnNYdkxEc0lKRmNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
RkYxLzAwRDhGOUFFNUI5QjExRUY5NkFBNEY0MkM0RjlBRTAyL0pqcFZGRzR4Y3Nf
WThBcHJzWHZMRHNJSkZjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMBGbe60TQIOr4Of7yqKEMkQzsXRqV70nd6imwbStbVh041FOqlsjEGI
xt/e4ujn2gNJsbeJITFqaOCtq6DC96YHWsBEiCZA1V85uf5FRtl65oEyXR8lv6qO
OPAN9TbWnsmL85bqoncCMJR/ARdZFjBWOE2WaE5TxzBNd5OXpAZTw3ub5qgVwsM0
XDs0etDemP7WNxQvvqWWa9r/hxD4SfLNEcRegovSz5gDY3YyN3GwN0yem2sFzADD
cumyPXa0baSC1W+nsPKh+5SgpOoTu6gVLIVxCkYHTJWNwHGDEaX7Jk4oHtKOsUpI
H6OXmOq9NDaN7HCZ16pt6BjXHRhHARY=
-----END CERTIFICATE-----
Generated at Thu Sep 19 07:14:19 2024 by rpki-client on console-fra.rpki-client.org