Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          UCv/x5Xjfjnf0jdIP4PdrOmlSLNSWnMjyUJppDKRjs8=
Subject key identifier:   35:98:8A:22:68:16:5C:E4:06:FB:C0:8E:64:40:F0:42:AB:E5:03:8E
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          0738
Signing time:             Sat 18 May 2024 22:25:56 +0000
Manifest this update:     Sat 18 May 2024 22:25:55 +0000
Manifest next update:     Sat 25 May 2024 22:25:55 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: kn13ZrD3zKSlMfCmyQucOkEUv+ijwOx2DMLbqBdqMNY=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: KB4gVaA+7DFA/yp3Fgm7dddwOuqD5cNtCgviuemsN7o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: May 18 22:25:55 2024 GMT
            Not After : May 25 22:25:55 2024 GMT
        Subject: CN=66492af3-7d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:9e:e9:d1:7c:12:de:27:38:51:6b:eb:05:
                    a5:29:04:51:f2:17:b2:4f:cb:ef:29:19:9e:39:3e:
                    cf:b6:f7:8d:78:05:d8:6c:1c:c1:d3:90:ae:f2:7e:
                    dc:e5:38:34:5f:54:a4:32:b9:74:ca:fd:2f:03:83:
                    ab:38:2a:f4:ec:bc:42:8e:85:b4:5d:46:8d:39:60:
                    b4:b3:bb:cf:3e:b7:3d:9a:f6:91:0f:ea:d2:21:cf:
                    3b:31:b5:c8:25:e8:26:ae:10:63:f0:02:ce:22:c1:
                    e7:1a:08:28:d6:ab:9d:52:97:7a:78:eb:10:0e:44:
                    22:97:80:3f:33:1b:6b:7a:a1:e2:8b:6f:e3:c8:8b:
                    35:1c:ec:37:08:2c:56:63:5b:c6:60:08:44:d2:70:
                    70:9d:bf:4b:00:11:fa:37:4b:7b:40:65:97:69:49:
                    4a:72:1f:7a:1f:de:98:05:33:34:d6:93:0a:54:4f:
                    b9:40:53:45:77:12:4d:9b:74:fd:b8:b1:e3:1f:2e:
                    dc:5c:78:92:cf:ca:30:55:f6:af:f2:8f:28:57:47:
                    ec:a6:51:12:ae:26:b2:78:f4:35:eb:77:2e:cf:72:
                    4c:16:44:9a:0a:9d:9f:f1:f5:50:e8:38:c9:b2:b2:
                    4a:58:5c:93:14:00:83:8e:56:5b:1d:f8:d9:6e:65:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:8A:22:68:16:5C:E4:06:FB:C0:8E:64:40:F0:42:AB:E5:03:8E
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:96:bf:70:35:64:cf:45:c3:98:be:bf:c4:88:6c:ea:c7:1a:
         6b:eb:36:3e:f7:e3:45:f9:48:f7:43:e6:31:09:2d:70:54:54:
         ee:79:cc:f9:72:d6:df:c2:4b:f2:53:b6:0c:55:eb:fe:4d:96:
         18:41:03:d6:89:75:64:fc:b6:7f:5b:22:40:f4:f4:fd:ae:2c:
         8c:ca:55:7c:91:cc:26:92:4d:6e:e2:8a:f7:5c:52:0a:55:43:
         d8:c0:48:dd:0e:da:76:ad:aa:94:55:67:9b:15:2a:ef:24:dd:
         02:b8:4c:e4:e1:94:09:f3:bd:ce:ef:69:83:1a:b8:d5:04:84:
         5d:93:5f:47:62:dc:e8:a1:85:f3:67:a4:4b:39:6a:3b:55:e9:
         99:f4:67:5b:34:10:fa:61:6e:34:3d:af:82:f0:5c:8c:29:b8:
         ed:2c:8d:7e:4c:7a:94:8d:d0:99:b0:ef:bc:22:40:14:08:f1:
         e6:43:8f:8a:86:47:31:d9:4a:82:6c:04:a0:c8:37:82:f3:ba:
         db:72:d5:8f:2a:c1:6a:f0:19:9d:7c:b5:ba:b3:30:42:62:db:
         0e:29:f5:fb:d7:c9:18:3c:4a:b8:61:02:af:c8:66:d4:17:45:
         84:b9:1a:42:61:86:a8:17:ad:c0:63:c3:09:25:2e:9d:8b:a0:
         18:4d:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org