Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
File:                     swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json)
Hash identifier:          Ec6LRsFBZ8UulcpqtccEETkhCQEzs8fqtajl1Sb+ZnU=
Subject key identifier:   C2:0B:F8:70:B6:C1:85:3A:74:F8:59:39:E7:E8:40:76:D9:BE:BD:DF
Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9
Certificate issuer:       /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
Certificate serial:       0C43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
Manifest number:          0C42
Signing time:             Sat 18 May 2024 18:56:39 +0000
Manifest this update:     Sat 18 May 2024 18:56:39 +0000
Manifest next update:     Sat 25 May 2024 18:56:39 +0000
Files and hashes:         1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: jwi3LBONw/4ELTcXBuH1y4GNoL07g1u2tKujmLTTgDc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl
                          rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3139 (0xc43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
        Validity
            Not Before: May 18 18:56:39 2024 GMT
            Not After : May 25 18:56:39 2024 GMT
        Subject: CN=6648f9e7-8d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:82:35:97:43:2e:c0:64:cf:23:cf:eb:4a:
                    04:29:a6:4f:03:a3:56:b7:9a:24:d0:e8:13:aa:a1:
                    70:e8:0a:67:d1:3c:2a:8e:f3:7b:03:3a:05:e3:6f:
                    70:20:ff:83:0e:60:31:f3:2a:68:0d:4c:a0:47:00:
                    0d:45:78:54:43:3b:77:99:3c:a9:8f:7b:90:4a:4d:
                    5b:6a:9c:8d:7f:9c:72:8d:0e:c1:99:28:da:f1:d9:
                    f2:2d:57:1d:31:21:04:98:48:f7:1e:40:21:93:b4:
                    2d:d2:5d:4f:c4:21:49:b6:14:e6:db:b0:32:22:3b:
                    42:49:a9:12:35:c0:59:a1:67:0c:08:f4:80:1d:09:
                    63:65:88:a9:b0:32:f9:44:b4:50:bf:be:09:cc:ef:
                    e8:53:bf:90:ca:89:e3:3c:19:8f:bf:59:59:f4:72:
                    3e:ee:7a:44:91:37:84:2e:57:a5:c4:a0:6e:29:9e:
                    aa:58:0d:7c:43:20:c2:48:00:55:23:14:04:36:83:
                    b3:e2:b7:61:3d:f6:1b:85:59:c2:6f:fe:15:83:fb:
                    e7:5c:7c:42:86:93:bf:87:a8:c7:f0:23:6d:6a:60:
                    8e:cb:99:85:60:32:9d:47:88:16:97:30:80:54:33:
                    df:22:64:8b:02:b5:85:55:7e:b0:3d:bf:76:c2:98:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:F8:70:B6:C1:85:3A:74:F8:59:39:E7:E8:40:76:D9:BE:BD:DF
            X509v3 Authority Key Identifier:
                keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:b3:b0:03:59:0e:7f:9f:6b:9a:4d:5c:47:c3:4c:1d:98:
         8e:8a:db:8e:5f:78:6e:26:03:3f:b9:ab:f5:5f:85:b0:0e:0d:
         ff:10:05:47:1d:14:64:b6:aa:7a:02:09:8d:5b:34:67:bc:89:
         02:f7:3c:03:ec:7d:ea:18:ba:a5:97:32:3a:7e:55:5f:eb:60:
         ef:d3:5b:d0:5d:34:a0:e5:1c:b7:88:6a:a2:1c:6d:a1:27:dd:
         4e:39:d7:ee:1e:37:5e:ed:fa:54:58:1a:c9:eb:72:94:c9:48:
         76:b5:fe:64:3d:27:0c:6d:50:88:16:39:4e:40:ec:76:52:46:
         96:fc:4a:99:e2:34:a4:23:26:3f:bd:c5:c3:ae:4e:ec:32:ec:
         93:b4:a0:89:4c:ab:e7:2a:3d:54:45:8e:65:52:8d:a2:bf:49:
         83:f2:58:db:68:38:96:90:46:50:98:2f:26:4c:0d:d8:72:5f:
         87:59:08:f3:b0:26:1c:66:16:86:3c:f8:98:f3:56:cc:ed:75:
         8f:1d:8c:1c:96:c2:3b:7d:7a:a1:56:f7:00:36:9b:1f:7b:97:
         ba:34:5b:d5:e5:6f:ea:3c:47:86:7e:d6:29:ab:73:69:0a:1b:
         33:70:fe:66:cd:59:17:a1:8e:35:3a:30:40:87:b1:69:b8:88:
         9b:32:7a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org