Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
File:                     bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft (raw, json)
Hash identifier:          t8fQfMNHvp/4UHnGoeFpe0ETHKqlnB5e5NzIze6pUzI=
Subject key identifier:   6E:CE:47:F4:CD:CE:E4:47:B8:BF:12:C6:FD:AA:6E:2B:5C:B9:3B:81
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Certificate issuer:       /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
Manifest number:          01F7
Signing time:             Sat 01 Jun 2024 05:23:56 +0000
Manifest this update:     Sat 01 Jun 2024 05:23:55 +0000
Manifest next update:     Sat 08 Jun 2024 05:23:55 +0000
Files and hashes:         1: bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl (hash: f5FVRiI6BRSQO3WXGl3EYXEvnc0JZqLbZdVvPeLs8fU=)
                          2: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (hash: wteDAp88PU/OXsrCKeDE5pjIsifmHrURWAVujMlzkII=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
        Validity
            Not Before: Jun  1 05:23:55 2024 GMT
            Not After : Jun  8 05:23:55 2024 GMT
        Subject: CN=665ab06b-7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c5:bc:36:ce:04:8e:20:4e:20:ef:a3:d2:6d:
                    9c:31:bd:ea:ec:28:a0:8b:3a:31:15:4e:74:8a:2e:
                    04:e7:b1:3d:92:a2:d4:74:c4:5a:19:09:96:64:7b:
                    2b:3e:45:fc:7c:d1:02:11:b3:b6:0e:d5:7b:af:bf:
                    28:5e:38:c8:d9:3c:3a:37:34:59:c5:00:0c:c1:40:
                    33:4f:f1:60:ad:1b:01:0d:4c:e0:56:b7:de:d6:d5:
                    35:95:7b:49:c7:0d:c5:ce:9f:9c:cb:9c:b0:c9:0b:
                    7c:9f:fd:e6:c8:0b:47:38:f8:a8:6b:42:93:04:f0:
                    e5:43:c8:ba:72:4d:b6:48:2f:fe:36:3a:a5:0a:46:
                    cb:c0:ad:3f:32:4d:53:a4:8b:85:4e:91:bb:5a:a9:
                    29:f9:71:8d:ef:56:d9:69:87:b8:68:3c:96:42:9a:
                    4c:43:ac:bb:24:38:0c:18:91:a2:dc:e9:77:41:6c:
                    1a:be:ac:59:37:88:73:b4:98:b0:f1:d9:eb:65:5e:
                    15:be:ac:c9:5a:d8:d8:6c:3e:fd:12:24:13:89:2f:
                    b7:89:b1:55:b7:b4:03:59:6b:bb:db:5e:c0:03:b6:
                    a1:83:7a:0b:f3:d2:e9:76:f1:b9:b4:b8:2e:b4:57:
                    d4:f8:17:b5:42:82:42:f6:25:69:3f:f4:be:93:33:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:47:F4:CD:CE:E4:47:B8:BF:12:C6:FD:AA:6E:2B:5C:B9:3B:81
            X509v3 Authority Key Identifier:
                keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:03:02:d9:08:b2:36:e0:7a:be:22:3c:b6:76:7e:e4:54:
         66:ed:a1:8c:cf:8a:76:8a:bb:86:6f:1a:93:0a:b6:ee:0c:ce:
         cf:c9:d5:1b:90:72:67:bc:31:6b:21:76:d4:78:16:e5:d5:45:
         2d:2e:7d:f2:9d:81:8c:ff:4d:53:4c:d2:c2:df:43:e1:67:e9:
         a4:3f:7b:7e:21:d0:8c:99:d2:59:ba:99:7f:8c:24:ee:84:ee:
         c5:bd:6a:41:e9:e2:85:9e:67:34:d3:c6:db:1c:f9:21:70:68:
         c8:f6:c4:ba:e0:52:cc:89:fe:f6:31:2f:86:cd:12:9a:f6:dc:
         3e:c2:18:1a:4d:14:ec:d3:06:69:4e:06:81:e7:78:d0:cb:dd:
         4b:6c:80:bd:6c:79:29:60:a6:e4:2c:a7:49:1c:99:3a:39:e4:
         a7:49:a0:76:a5:2c:27:0d:8b:2a:0d:45:bb:02:2d:e7:c8:f4:
         37:71:72:e4:d1:ad:7b:3d:7e:ae:8e:14:74:55:fe:8b:59:9d:
         84:27:04:6d:c3:47:96:0f:83:58:01:68:cc:75:47:8c:6c:5d:
         b3:23:e8:3e:11:db:e7:59:51:5e:24:c2:88:62:54:9f:df:91:
         09:4d:16:fa:e6:44:3a:f2:00:65:cf:96:17:ea:10:f2:56:40:
         9f:8a:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org