Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          iIOUjJWiSoWEkihg2rTXpQlJnzNY3NABQ62cHRG3Vig=
Subject key identifier:   3F:58:83:2A:91:D2:F7:D9:E4:BB:44:45:4E:50:71:03:15:6E:B6:F1
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          06E9
Signing time:             Thu 30 May 2024 23:19:06 +0000
Manifest this update:     Thu 30 May 2024 23:19:05 +0000
Manifest next update:     Thu 06 Jun 2024 23:19:05 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: ssSrWrTBxEjaRoBKL9BcdMN70HcHyG5jOskfZux2oCI=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: AVie/3r3Cv2E5zLZN+Oa2f/YcfZCV4nyOlsn+CIPmSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 22:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: May 30 23:19:05 2024 GMT
            Not After : Jun  6 23:19:05 2024 GMT
        Subject: CN=66590969-e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:f2:24:0f:be:7e:c8:a8:b2:99:fe:ca:4d:
                    e1:12:b7:5a:c3:e1:74:8c:cd:ad:ba:61:aa:93:d4:
                    c3:50:90:34:8c:ed:01:e6:1c:c9:5e:f5:69:ac:35:
                    89:70:84:88:cc:dc:41:31:74:eb:7b:53:0e:cc:cb:
                    6b:b2:68:5a:c6:4e:c9:de:73:8e:2a:88:f1:4f:b5:
                    d6:80:8f:71:40:38:3d:e2:86:bd:12:96:18:c7:a0:
                    5f:b8:83:6f:fa:bf:fd:2a:18:29:2f:5b:26:e6:65:
                    fd:9b:91:3f:3a:87:1a:e1:25:58:14:1a:9e:4c:3e:
                    69:c8:ae:94:7d:33:ce:c0:d7:fd:3a:cb:54:a4:b2:
                    7f:62:71:ca:dd:78:bb:31:91:5c:cc:8e:fc:ed:35:
                    8f:72:a2:9d:8d:96:a1:d3:c2:ac:61:83:28:5c:93:
                    0d:9f:10:25:ed:36:b7:6d:af:3c:9d:d6:dd:20:a7:
                    01:b4:65:b8:f1:61:f7:d9:19:75:ca:0d:24:95:65:
                    ac:98:61:22:06:6b:fb:fc:e6:3a:92:bb:da:98:2d:
                    a2:6c:63:f3:02:93:5c:7a:37:b0:60:3f:d9:a0:8d:
                    c7:1f:08:e5:15:77:8f:12:11:7f:87:dc:6c:ee:ee:
                    df:32:81:de:76:e1:0b:ae:b0:fd:a2:10:cd:e1:96:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:58:83:2A:91:D2:F7:D9:E4:BB:44:45:4E:50:71:03:15:6E:B6:F1
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:48:3e:27:a6:a9:c7:92:4c:ee:1a:8d:ee:3c:8f:6a:db:
         04:1b:93:2f:8e:68:21:8f:5a:f5:78:e1:96:f7:2f:ef:75:23:
         8b:6e:5f:4e:29:e9:f1:ee:5b:da:cc:f7:5f:f1:03:e9:79:6c:
         60:e2:3e:a4:12:b0:fd:88:6d:7e:db:55:83:f3:dd:9d:20:4d:
         e9:cd:bf:a7:e8:29:02:78:87:10:69:2c:b5:26:2f:a4:8d:0f:
         1f:43:fa:70:89:02:7f:96:29:fd:60:e9:f2:44:06:38:fb:05:
         ab:c5:19:d3:dc:92:a2:e7:7a:7d:ed:af:e1:37:a4:1c:32:b8:
         46:22:b7:6f:2d:ab:a7:f3:d5:52:30:88:10:e4:9a:45:94:88:
         56:88:01:80:be:76:87:2d:5c:bd:0c:b1:c8:34:88:71:e6:8d:
         1e:97:bc:c8:9c:91:24:2e:12:79:e7:12:1b:37:e7:3f:b5:5a:
         ca:21:fd:aa:6f:f3:2b:98:5c:8f:8f:51:4f:77:14:74:5a:14:
         66:d9:80:9d:17:a9:ef:14:ef:8a:3d:12:71:e9:21:53:64:e6:
         be:a1:5e:ff:2c:ab:10:69:9a:38:fc:1b:ec:4f:7c:8e:63:3f:
         db:e9:31:a2:7a:ec:5f:7c:5d:e8:87:85:2b:6c:dd:10:72:5a:
         4c:0e:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 23:45:09 2024 by rpki-client on console-fra.rpki-client.org