Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
File:                     mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json)
Hash identifier:          sYH7pXmyHyY2NNNQHCS31d8GLhSEXa1um2ewskeuy4o=
Subject key identifier:   96:24:00:0C:E5:98:15:E0:4C:1D:99:5C:D7:13:D8:FF:92:6F:7C:30
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
Manifest number:          0784
Signing time:             Sat 18 May 2024 22:12:34 +0000
Manifest this update:     Sat 18 May 2024 22:12:33 +0000
Manifest next update:     Sat 25 May 2024 22:12:33 +0000
Files and hashes:         1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: mh8iEA3cO2fhm707d2jOgolDw72BnQA/kJVafEbu+XQ=)
                          2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: ub7XWh5tEUvDlicm1pr8x41A7qogj/dyLBLwQVgeRtc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: May 18 22:12:33 2024 GMT
            Not After : May 25 22:12:33 2024 GMT
        Subject: CN=664927d2-ec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:f6:a3:ee:8b:0d:60:f3:6c:c1:b3:fd:5d:
                    6c:1a:c4:44:7f:8a:33:eb:b8:1c:06:b3:eb:d7:0a:
                    2e:5c:cc:bc:78:f4:81:15:a2:d9:76:d9:4d:54:ba:
                    46:1b:88:8a:07:76:cd:06:d5:45:19:03:94:8d:16:
                    59:90:50:47:18:86:c5:44:56:15:4f:2e:a8:2c:65:
                    e6:df:f5:2e:38:08:c7:fb:24:6c:17:d5:3f:8c:54:
                    ac:1c:60:5f:d1:c8:b3:07:66:be:5f:8a:df:78:23:
                    05:53:85:33:04:b6:cc:f6:8c:4d:45:a3:2d:63:c1:
                    13:ab:c2:72:f5:b6:dc:44:32:63:6d:b1:5e:34:9a:
                    db:ba:73:53:2c:c0:66:7b:e2:1c:6a:01:2e:b8:39:
                    c2:99:37:0c:95:72:c6:e8:ac:91:4b:92:56:5e:48:
                    4a:40:2c:e3:50:ee:6c:f1:18:0c:d0:d6:db:e6:f1:
                    05:21:b4:b9:0c:d2:67:af:ef:2b:0b:23:94:99:b5:
                    44:8f:91:21:99:8e:74:b8:50:19:1f:70:1a:85:c4:
                    b9:db:1f:79:ac:af:f7:d3:fd:b2:8e:9a:4f:fc:d7:
                    e6:5e:61:61:66:0b:b4:d1:cd:a7:c6:e1:be:3a:f0:
                    ed:a3:e6:71:01:61:59:4f:93:e4:67:96:bb:5b:d8:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:24:00:0C:E5:98:15:E0:4C:1D:99:5C:D7:13:D8:FF:92:6F:7C:30
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:ef:6c:2f:34:51:4a:11:60:e3:e1:c0:27:4a:c2:0e:81:
         6c:09:82:b1:5d:0e:4e:66:9e:2f:c6:98:b9:4e:2c:83:3e:34:
         4f:5a:61:00:18:cc:f9:f2:78:ce:dd:48:64:33:65:41:2d:33:
         73:0b:2d:70:78:8d:80:a4:8d:80:9a:51:58:64:a6:fe:25:c5:
         f3:f1:64:0b:aa:a5:ed:9d:7e:cb:f2:48:ac:f0:13:4c:69:3c:
         07:22:03:1d:71:07:1f:f3:46:3f:40:45:eb:3b:5c:b5:6e:c8:
         8a:d9:fb:36:82:0f:de:35:e5:15:20:6a:ec:78:a6:be:f7:cd:
         25:89:4c:0c:10:53:5a:18:98:13:74:6a:47:59:a3:16:5b:dd:
         64:c4:9c:e6:15:9c:28:09:84:4e:86:69:6f:94:f9:6b:ea:67:
         48:3e:e8:35:74:fb:75:79:b8:cf:c6:9f:5e:46:37:6a:00:cd:
         6e:6f:ad:7f:92:23:bf:93:24:58:a6:a5:79:6e:75:c6:82:a3:
         5a:b1:45:53:71:33:01:5a:0a:c3:86:71:3e:af:34:4e:52:96:
         5c:bd:17:77:63:55:6f:3c:b0:13:9d:7c:d4:43:16:28:a1:19:
         6c:db:8f:64:38:37:be:91:39:87:eb:21:7a:1f:35:ae:1d:14:
         ec:92:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org