Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
File:                     JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json)
Hash identifier:          Dy+/KWqNMyeOjcH+vgh9pLhW/2jv/LaR8Qo/41C3c3U=
Subject key identifier:   58:CF:3B:84:45:D8:CB:66:8E:BC:34:52:5B:EC:74:73:1C:5C:91:CB
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1F15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
Manifest number:          1ED0
Signing time:             Fri 22 Nov 2024 16:03:54 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:54 +0000
Manifest next update:     Fri 29 Nov 2024 16:03:54 +0000
Files and hashes:         1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: AF9KMpqNkv0BKWJvu6cWtLXwk2rHjy1VIFD9uOZbRY8=)
                          2: 9025B7B4173611EEBCEA943CC4F9AE02.roa (hash: gNGui0FKnL0TzPEERbK39Y8omn7G5Bci2JEvNtgDHdE=)
                          3: 51242EA0157A11EEBF2E043CC4F9AE02.roa (hash: gdgPydJrUkK8DpVlQ4wmxtIpuGhoHfbxVdF/ULwigco=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7957 (0x1f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Nov 22 16:03:54 2024 GMT
            Not After : Nov 29 16:03:54 2024 GMT
        Subject: CN=6740ab6a-24c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:04:ea:22:fe:9a:55:a3:93:af:01:91:ed:
                    d0:0d:42:e5:dd:70:40:55:66:30:c6:ac:0f:6b:36:
                    d3:6e:94:70:9b:a9:ec:8b:1c:9f:21:5b:97:69:c5:
                    ee:8c:aa:e4:60:85:54:c6:00:db:c5:6c:ff:2c:1b:
                    08:2a:76:63:f2:cd:dd:2e:90:42:a0:3a:39:2d:99:
                    eb:2b:74:ae:00:78:53:b6:43:c4:64:3f:06:a2:61:
                    fb:13:8f:98:c8:ce:c0:4e:1b:2f:33:94:4c:ad:a2:
                    82:51:97:35:59:03:b9:63:cf:2c:63:8e:08:6d:21:
                    78:01:06:4b:d3:0a:aa:e4:76:d3:9b:08:d3:42:16:
                    e7:0b:f2:a1:49:92:f7:dc:d3:ba:ff:a7:6e:0b:8f:
                    d7:7b:f3:7e:a8:68:43:71:d3:ee:21:c0:f8:e9:5b:
                    3a:0e:79:00:e2:5a:f5:77:31:51:15:8a:07:b7:fd:
                    50:8d:d6:43:99:ac:30:44:f1:ca:15:4c:1d:21:9c:
                    03:77:9f:71:5e:7d:cb:48:72:b7:e5:ab:86:1e:7d:
                    b5:0e:ee:a3:91:07:5b:03:05:6a:d3:18:fe:c5:74:
                    db:47:84:3f:26:12:89:0a:47:73:f4:8a:c3:2d:42:
                    bf:b8:f4:eb:70:66:fb:a6:f6:ed:e0:fc:66:12:5a:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:3B:84:45:D8:CB:66:8E:BC:34:52:5B:EC:74:73:1C:5C:91:CB
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:2b:75:bd:c7:dd:df:ae:51:a8:e6:df:f1:a2:ff:ec:ef:
         bb:4a:4c:5b:33:ec:b5:18:c2:a5:d3:b7:20:9f:04:78:42:4d:
         b0:12:ab:f7:68:70:95:0e:bd:0d:d6:25:86:47:96:8c:b1:fc:
         c7:b2:81:70:cf:cc:17:29:c3:09:43:83:30:a3:0e:0a:aa:e6:
         55:82:76:ba:a1:f6:d7:bf:10:47:7f:fa:b0:3a:bc:9b:a4:25:
         b2:76:fb:9d:ff:0a:c7:15:39:0d:9b:c8:20:17:c6:0b:25:69:
         66:f0:89:85:28:53:ec:02:48:42:c6:15:99:e5:5d:07:ff:2a:
         90:80:81:8d:93:b8:bc:08:61:cb:b9:f9:bf:60:77:52:08:e2:
         3c:a6:07:89:e4:ad:d3:03:db:96:92:2d:54:4f:05:5d:95:bb:
         11:26:d6:00:fe:cc:21:e0:64:71:b6:3d:cf:37:81:57:69:83:
         d2:2f:38:70:d8:d6:19:44:7d:f5:01:07:c0:27:ff:04:ed:b9:
         6e:f6:00:06:ba:b4:4e:d8:e2:e6:2c:b6:ee:f1:41:c0:b5:0a:
         29:34:be:b9:53:78:e5:f0:23:5e:80:bf:89:3a:10:37:98:35:
         6f:b7:99:83:37:44:54:82:2b:68:af:79:23:4d:b6:dd:e8:55:
         24:87:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org