Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          AY/0/UMd+4I5XJ+izMBa1k+tSAlXMUp2hadXZsXZ1tk=
Subject key identifier:   6A:03:63:8C:91:B8:D0:C3:A8:99:99:2F:76:CB:83:B1:FA:04:19:94
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0215
Signing time:             Sat 01 Jun 2024 05:19:22 +0000
Manifest this update:     Sat 01 Jun 2024 05:19:21 +0000
Manifest next update:     Sat 08 Jun 2024 05:19:21 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: R/+R3wGuxdZG3O1A5mhQvMD2jCDI03ZS0+qEcZPZH+8=)
                          2: 2D719B24024B11EEB782E936C4F9AE02.roa (hash: nvRr0b/dErhHb84pTtigoeE2B65F9nayzoNf7PMlgiY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jun  1 05:19:21 2024 GMT
            Not After : Jun  8 05:19:21 2024 GMT
        Subject: CN=665aaf5a-10a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:fa:5b:c6:3c:7b:77:60:1e:93:fc:c4:48:
                    9f:99:4f:32:6c:35:69:49:0b:2e:16:6c:dc:63:ee:
                    7b:e3:9b:fb:24:6f:3c:f6:80:4b:e1:60:20:84:21:
                    90:f3:cc:d5:8a:be:ef:6e:00:48:53:9c:08:e6:f0:
                    cd:8b:2b:04:a8:81:cb:77:17:08:7b:18:6e:f8:1d:
                    4c:b0:e6:d4:b4:63:87:ff:62:59:91:a8:27:6f:ad:
                    c5:85:20:dd:e3:bf:4f:19:4d:eb:e5:50:52:13:64:
                    51:52:c3:88:5c:94:1c:06:f7:6f:97:d4:2c:58:2a:
                    e1:64:ff:03:82:e7:b6:e3:67:5f:bb:b4:04:12:1d:
                    87:2a:d4:00:8e:44:8a:0c:d2:c4:85:4d:6c:71:db:
                    38:01:8b:f4:f8:e7:4b:84:20:16:21:72:cd:d4:1f:
                    5c:4a:af:b9:de:05:36:8d:ec:62:83:25:da:3b:5d:
                    96:d9:08:77:d4:84:cd:f1:9d:cd:d5:6a:f2:18:02:
                    7d:47:e5:2d:d1:72:1c:8c:83:23:93:5d:ed:f9:c3:
                    a7:e0:3d:96:d4:20:e4:17:ee:ad:b8:08:f4:75:b6:
                    b3:cc:f9:74:0d:30:df:e4:0f:52:71:c3:0a:f7:b6:
                    ba:cb:74:5c:71:72:44:73:c0:17:dc:7a:c5:26:79:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:63:8C:91:B8:D0:C3:A8:99:99:2F:76:CB:83:B1:FA:04:19:94
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:3e:95:8c:45:85:53:aa:19:d5:27:03:16:05:45:3a:39:
         fa:7c:0c:2a:5b:f0:15:f7:37:4a:62:da:1b:2b:f4:ce:04:28:
         72:ae:ed:5d:79:39:4d:a6:3e:68:41:e4:56:4a:46:a2:d0:84:
         f5:cf:19:c0:fb:f2:5b:cb:46:c4:97:15:02:05:75:80:9c:e9:
         db:64:b2:62:c9:33:71:bc:6d:71:b9:ed:af:6b:3a:cb:38:79:
         c2:d9:8f:ae:39:4a:82:bb:b8:04:84:37:76:b9:e9:d7:5b:85:
         8b:1b:5f:8e:dd:0f:44:c7:8e:43:aa:f2:82:7f:89:45:98:c4:
         b7:33:1a:2a:52:02:c1:d6:f5:d0:6e:ac:49:d9:ee:f1:e4:d5:
         93:02:0b:c1:da:42:b9:48:9c:e4:08:e8:54:ec:57:9e:fe:67:
         47:7d:bf:5a:fd:2d:d1:fa:4b:f3:85:18:94:10:91:c9:54:56:
         84:ed:f7:24:12:d8:6c:97:8d:b4:98:f5:ad:28:42:49:44:47:
         0a:51:c8:52:ba:32:09:cf:a5:4d:34:fb:30:b2:27:6f:ae:23:
         07:28:eb:af:30:3b:d9:69:ac:c6:e3:b2:b9:c0:f3:03:59:6b:
         16:a8:34:64:33:20:ab:e9:b0:d0:dc:43:26:ef:5a:4b:ab:cf:
         52:c5:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org