Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
File:                     RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json)
Hash identifier:          sK1Rd5PCpjEUcf2ui9lKosLq0mlMz1TgJ8rQN3Wvhf0=
Subject key identifier:   A8:F0:E7:85:FA:31:1D:34:C1:26:D2:21:47:26:6A:8C:B9:05:1F:8F
Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76
Certificate issuer:       /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
Manifest number:          12
Signing time:             Tue 04 Feb 2025 16:04:48 +0000
Manifest this update:     Tue 04 Feb 2025 16:04:48 +0000
Manifest next update:     Tue 11 Feb 2025 16:04:48 +0000
Files and hashes:         1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: vTIvYMIr/HWyaIIZ7zKzOQhnv0B6THGt3AxHJQce6yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Feb 2025 16:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098
        Validity
            Not Before: Feb  4 16:04:48 2025 GMT
            Not After : Feb 11 16:04:48 2025 GMT
        Subject: CN=67a23aa0-d892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:06:4b:ab:0b:4d:53:1b:71:12:d9:6d:58:
                    73:14:7a:9c:61:d7:29:b1:27:29:a7:81:6d:d0:1c:
                    40:42:01:b0:8c:aa:20:b2:54:d1:55:9f:c5:e3:67:
                    d8:c9:ec:eb:67:91:30:ad:74:95:1e:e5:e5:f6:2c:
                    4f:ac:2d:13:50:45:8b:46:96:39:44:dc:f1:5b:d5:
                    18:62:6d:f4:a4:e0:55:e6:ee:14:32:d2:c6:0c:cc:
                    4b:d8:5e:3d:c7:86:28:e5:b3:72:58:06:42:cf:c1:
                    d0:59:6d:e5:9d:d8:18:91:25:37:f9:e4:98:6c:df:
                    cf:4c:16:0d:53:1e:33:0a:9e:9d:0d:f0:02:cd:c9:
                    47:de:7f:75:ec:6b:ab:ef:54:4f:d6:ea:b0:04:0a:
                    a7:4b:2d:da:28:2e:0f:f3:72:26:23:34:9e:a8:4c:
                    27:7b:f0:e0:0d:70:9f:50:e6:38:a2:ce:61:93:ad:
                    42:06:f4:22:c7:9b:23:1a:13:52:3e:eb:47:a2:49:
                    81:2d:38:39:4e:a9:a1:5a:09:aa:1b:83:49:7d:7e:
                    6e:51:2f:57:98:5c:26:19:d0:cf:9c:e7:f7:bb:4d:
                    b6:4f:ea:4d:e2:3b:4b:8b:8c:29:9a:cf:5c:44:55:
                    8c:9a:7e:0c:4c:f5:27:eb:6b:09:f8:d1:83:1b:dc:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:E7:85:FA:31:1D:34:C1:26:D2:21:47:26:6A:8C:B9:05:1F:8F
            X509v3 Authority Key Identifier:
                keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:41:4f:21:85:14:cc:e2:74:d5:3d:b1:d2:36:93:4f:7b:41:
         c5:ee:36:98:73:e7:12:74:0a:ff:69:7b:cc:74:96:77:d5:50:
         21:96:93:ed:90:11:86:81:96:a3:a4:6d:f4:3f:76:5d:ec:85:
         61:a7:e0:dc:ae:c8:91:70:56:12:1d:ad:88:f1:3e:74:be:1a:
         4a:d9:6a:34:fd:43:5b:bb:8e:5a:aa:82:b8:d3:be:02:43:6d:
         68:89:49:8a:6d:c4:e8:e1:f2:d6:47:7a:2d:23:41:94:76:2f:
         be:e1:3d:3e:6f:c0:81:25:1f:5a:13:e7:f1:75:42:f9:d0:f6:
         73:e0:90:e5:c7:78:b1:22:c9:c5:f6:21:ee:db:33:be:94:2c:
         03:7d:ae:0f:f7:c1:c0:2e:fa:8c:50:14:4e:eb:b5:e3:d6:d3:
         f2:93:96:d1:6d:3f:b9:2e:70:e3:97:0e:6c:52:6e:81:75:0a:
         77:e3:8e:5e:3e:fc:1c:75:a7:60:01:7a:90:8d:00:e8:9a:10:
         3f:c7:00:d8:2e:d2:b0:07:48:e2:39:4f:8a:9e:ca:b9:e6:a4:
         a6:24:6a:23:84:fb:64:ca:f3:a6:8b:9b:07:6d:0c:22:9a:c8:
         12:4c:8a:8c:1e:6a:a2:e9:2c:97:8d:87:f9:2e:f2:2e:31:a9:
         4b:98:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:13:37 2025 by rpki-client