Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          XkoWBeiIxccdN41kpOhFYQnOBUNmEbbBibO5BhZwzgI=
Subject key identifier:   44:E2:C8:D8:6B:25:28:3E:A3:E8:B0:D9:E1:CF:6D:D6:D0:83:83:FC
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       0386
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          0386
Signing time:             Sun 19 May 2024 02:39:19 +0000
Manifest this update:     Sun 19 May 2024 02:39:18 +0000
Manifest next update:     Sun 26 May 2024 02:39:18 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: IvsXsAEqQZiBKyGJOAqT2QTffbdfAVD6nWaGwl5QFq0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: May 19 02:39:18 2024 GMT
            Not After : May 26 02:39:18 2024 GMT
        Subject: CN=66496657-0552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:ca:e6:b8:f9:dd:2e:ce:ef:ff:17:e1:0e:
                    b0:77:8e:08:3f:a4:cc:36:67:4f:ed:d6:6c:f7:8d:
                    c1:cd:80:36:ce:8b:96:fb:bb:9f:36:40:b8:f6:19:
                    e3:3b:fe:c0:91:50:72:2b:18:69:11:18:a8:c0:fd:
                    f7:70:73:fe:05:2c:b9:96:d6:bd:69:5e:fe:88:1e:
                    67:fd:fb:89:04:78:93:a4:4c:86:e4:df:61:eb:05:
                    6d:17:a4:fc:11:0b:9a:52:e5:16:da:56:ed:9c:4d:
                    df:a1:e1:a1:d4:f2:26:b2:4d:6a:45:57:c9:d2:11:
                    48:39:94:1b:08:7f:89:3c:c2:90:b5:ce:88:3d:52:
                    4d:23:bc:0e:57:f1:f0:db:6e:54:24:ee:0d:44:4d:
                    2a:30:0b:62:d6:7d:6c:3c:42:bc:27:19:a1:4c:6f:
                    4a:f5:94:99:e8:ed:0d:c3:c0:6e:50:8e:f0:5a:86:
                    84:e6:f1:99:6f:97:d1:8c:f0:e0:c0:e4:d6:7b:03:
                    81:e5:73:bc:6c:74:a0:1f:7b:ef:6c:d0:05:83:55:
                    75:aa:5f:65:7d:7c:80:bb:58:b4:13:50:8c:dc:82:
                    d0:ef:91:8a:da:42:02:13:6c:45:79:ee:f2:62:cc:
                    75:61:ae:db:70:31:ff:89:7c:af:9c:17:48:7b:42:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E2:C8:D8:6B:25:28:3E:A3:E8:B0:D9:E1:CF:6D:D6:D0:83:83:FC
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:51:76:9c:c9:97:27:3e:81:36:c8:35:ac:cc:72:32:42:
         2e:ad:f4:ea:94:d7:99:67:6a:b4:fa:cb:bc:6e:1f:c1:38:04:
         26:da:8c:21:fb:6a:3d:96:ff:c2:a1:16:c7:99:e4:80:59:ce:
         c3:e5:54:12:f5:68:6c:75:1c:0c:ae:cc:18:9d:1d:9a:6d:66:
         de:1a:48:fa:5c:50:c8:16:91:76:23:22:ac:14:96:f9:82:7a:
         7c:3e:50:28:37:da:ed:dc:4b:9c:4f:21:f5:78:4d:d0:c7:13:
         af:73:a6:2b:16:f4:4d:13:db:d0:0a:96:32:1e:91:ed:f3:6d:
         cc:10:ae:bc:3b:ea:35:8a:ec:2c:33:03:15:84:77:86:e1:e6:
         e3:fd:3a:53:8e:89:de:dd:05:ef:3d:d1:48:f4:c4:d9:f0:6d:
         b4:f9:a3:20:ad:eb:5c:81:16:38:09:6a:75:b0:4b:30:81:93:
         cd:60:42:fe:96:64:7b:2d:4b:96:5a:f3:fb:ed:d5:e4:a1:09:
         cb:40:5f:b1:e0:ce:0e:be:60:28:3e:ad:f4:d5:7f:95:83:0a:
         6e:a5:d8:8c:52:7f:e1:0b:05:54:33:d7:97:35:72:58:8a:25:
         6f:bc:35:4a:68:18:9b:ba:1d:63:56:6b:6b:91:6f:a7:d3:e6:
         9f:eb:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org