Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File:                     jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier:          wUZnojEqgCu8Oqn651Tfm5DaxavLwhKBKDytfmxEyc4=
Subject key identifier:   0E:96:56:74:02:C6:1C:02:64:7E:74:48:3E:BE:5D:18:F1:1B:AA:A8
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer:       /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number:          01ED
Signing time:             Mon 25 Nov 2024 01:32:27 +0000
Manifest this update:     Mon 25 Nov 2024 01:32:27 +0000
Manifest next update:     Mon 02 Dec 2024 01:32:27 +0000
Files and hashes:         1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: xzRSuOjAmlq2OeTQ+39+n4+yczlzI/AF8mzLdCtiWAc=)
                          2: E60CA9B06B3311EFB79B5F87C4F9AE02.roa (hash: xA2I3SK1LrwCNTYfAy8aXGaXpbqj6PnMmp3xWe4cBbs=)
                          3: 274B6ADCF15B11ED950C456FC4F9AE02.roa (hash: BiugR8dn8pnpzPHCg7eZaT65u46wR3tiYmJITlqhZck=)
                          4: 26C50D3EF15B11ED950C456FC4F9AE02.roa (hash: H9+at/H3w6hcTEAgzVR2r70qV9olS6sufdVX4JIUdXE=)
                          5: 285AD17A061811EEADC2405AC4F9AE02.roa (hash: WVJ4UwY6KypbKvk4Ln4sfzY4jnw/x07G6eZ4nvVHo1Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
                          rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
        Validity
            Not Before: Nov 25 01:32:27 2024 GMT
            Not After : Dec  2 01:32:27 2024 GMT
        Subject: CN=6743d3ab-c3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:a1:ec:8c:ca:de:0e:23:18:5a:3e:aa:89:
                    86:1b:d3:cb:fc:cc:72:5b:8b:67:d5:72:76:c0:ff:
                    dc:16:6a:52:b2:6f:aa:a8:7e:6c:6d:12:02:34:4a:
                    4a:f8:7c:82:5b:ee:18:0f:02:fc:bb:70:8d:11:81:
                    85:3c:a6:c0:b2:8b:10:c3:9e:65:73:24:49:50:8c:
                    fd:38:4d:3d:8f:f9:f8:6f:79:d4:32:ac:cf:23:1b:
                    ec:9a:cf:ce:53:09:a2:95:2b:a7:0d:1d:37:a9:b8:
                    f0:16:fe:3e:79:96:68:27:50:21:7a:0b:f6:b1:47:
                    62:e7:d9:bf:0c:a5:1a:41:d1:d6:5a:bb:c4:6c:04:
                    20:31:96:4a:a4:f2:3c:9b:f9:92:b4:eb:fc:4b:39:
                    a4:09:8b:f2:6e:07:64:62:10:e7:dd:1a:79:2a:a1:
                    02:f0:0c:24:83:24:2b:d8:0d:40:e4:bc:95:3c:b4:
                    98:47:4d:e5:12:9e:06:4a:d2:38:fd:86:c9:82:1e:
                    74:40:60:07:b7:9b:d9:0e:90:de:35:37:0e:c3:d5:
                    30:59:25:a1:e9:00:8e:72:b9:9e:49:04:07:35:14:
                    72:e3:d1:69:61:ac:d1:1a:9a:6b:52:c1:76:6f:fa:
                    3d:66:ad:da:b8:dd:ce:db:e2:15:9f:de:ff:59:18:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:56:74:02:C6:1C:02:64:7E:74:48:3E:BE:5D:18:F1:1B:AA:A8
            X509v3 Authority Key Identifier:
                keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:35:e3:09:1b:bd:c0:c3:b1:0f:63:60:33:af:1d:db:43:80:
         f1:4e:7b:17:ba:6d:6b:fd:0d:2e:dc:a8:b1:50:cd:e8:40:c8:
         d4:cf:f0:2c:a2:bd:30:8a:43:d0:f7:ed:6b:62:09:10:9c:96:
         db:07:8b:a3:0b:82:2d:9e:ac:86:ae:7f:7e:6b:7c:37:31:f2:
         98:d3:b2:23:c1:00:27:4a:98:69:44:62:ef:18:bc:30:9b:e8:
         19:63:92:f3:41:fa:64:fd:a0:ed:d0:73:40:dc:74:3b:99:73:
         d8:1e:23:60:e1:94:63:c3:5d:63:df:b5:52:69:47:13:1b:97:
         02:9a:9a:3d:9e:bf:b9:d0:e3:17:b9:2c:63:cf:ba:92:a0:87:
         21:19:ac:f6:78:e5:77:a0:3e:e4:87:2c:55:f1:d6:c6:7d:2a:
         48:49:a9:13:b1:49:74:6f:0e:bf:01:e8:57:ef:ed:ef:cb:96:
         00:97:81:11:aa:15:01:b8:cc:e5:c0:49:ee:73:3c:c3:4a:d3:
         6d:33:1e:05:12:a5:24:f9:4d:d3:5a:c7:99:19:9f:56:9c:e0:
         38:78:cc:ea:61:d4:1e:3c:fe:07:1c:a2:02:a0:b4:d3:5f:ee:
         92:73:66:2e:05:bd:37:3b:ed:fd:c3:c0:00:eb:3a:b1:2c:2a:
         46:96:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:24 2024 by rpki-client on console-fra.rpki-client.org