Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
File:                     AWVpw8-OcAky8U5ILFaqZruvK2E.mft (raw, json)
Hash identifier:          84ql/l0DPfl6amoWnEe497HILb1IwPd027P2VxXR27g=
Subject key identifier:   B6:1B:B9:3E:C1:79:D8:67:A9:27:BA:1C:91:6A:F5:5C:C4:23:C4:13
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
Manifest number:          24
Signing time:             Fri 31 May 2024 09:30:51 +0000
Manifest this update:     Fri 31 May 2024 09:30:50 +0000
Manifest next update:     Fri 07 Jun 2024 09:30:50 +0000
Files and hashes:         1: AWVpw8-OcAky8U5ILFaqZruvK2E.crl (hash: Q3xS/70LaS/0dPyNn4itgjigMz7Ru9ebDGot0SvrNDE=)
                          2: B229257AE72511EEB731362CC4F9AE02.roa (hash: WPpkw8gSp2U+YQXbYFDmHhxc7XujQT9XnaUaXlT+A54=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
                          rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: May 31 09:30:50 2024 GMT
            Not After : Jun  7 09:30:50 2024 GMT
        Subject: CN=665998cb-8476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:db:15:12:2d:2f:be:f6:76:79:98:4d:cb:
                    78:ee:6a:1a:90:24:14:95:44:48:d0:f0:2b:f5:44:
                    40:b2:3e:dc:90:85:cf:5c:de:55:01:2a:0a:d6:91:
                    62:fe:f3:e7:55:7c:2d:a2:fa:89:60:35:c0:4b:4b:
                    ed:0b:f6:9b:75:b9:82:af:46:4b:1e:af:0c:2e:cb:
                    ea:dc:8b:92:2c:c5:a8:fa:91:9b:51:60:06:33:24:
                    99:f9:f6:16:81:77:7d:c0:64:1b:58:17:7b:4c:a3:
                    2a:c4:0e:85:cf:ce:35:f7:cb:ae:16:6d:42:c4:87:
                    c0:74:51:0a:14:d8:55:bc:70:25:70:e3:da:91:8c:
                    27:d6:56:09:01:c1:a5:b0:78:6e:5c:90:db:3e:82:
                    5d:ee:66:5f:0f:26:4e:2d:86:25:dc:af:ab:f1:61:
                    c5:93:f6:65:5d:07:3a:93:d7:71:8a:f6:5e:25:c9:
                    62:3a:2e:7c:62:ce:fe:d3:58:d7:79:ec:ad:01:37:
                    55:67:68:9c:59:a9:e3:91:ef:d9:58:78:48:c4:86:
                    95:e2:8e:cd:a3:31:70:18:fc:7d:f7:92:dd:65:b4:
                    ad:51:40:0c:bd:93:73:f8:de:38:51:b3:18:a7:2e:
                    c1:b0:dc:a0:74:72:d9:b5:0c:d1:a0:65:d4:34:3e:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:B9:3E:C1:79:D8:67:A9:27:BA:1C:91:6A:F5:5C:C4:23:C4:13
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:3a:ee:01:f7:17:24:75:af:d6:26:45:44:74:c9:bb:fd:
         d3:6d:8e:66:5a:c8:c8:3d:72:99:da:56:6a:df:de:fb:d7:30:
         c2:54:26:5a:eb:03:a5:5c:a0:73:72:16:7b:51:af:8b:aa:49:
         1e:05:3d:d3:2f:28:c2:f5:40:d1:06:36:ca:ff:5f:79:d2:a9:
         88:20:de:fd:e6:26:b3:a4:09:6f:4c:7b:0b:8d:27:7d:b7:7e:
         6a:66:27:54:11:f3:11:54:b2:3b:04:87:c1:7a:b8:c7:68:c4:
         10:b5:f6:a3:b3:a9:5c:9a:90:d1:49:4e:65:ce:a1:56:d8:ae:
         9a:ba:7d:c5:bc:66:c3:88:18:75:a1:f7:79:56:fc:aa:72:cc:
         eb:a3:6e:69:dd:79:11:e2:61:b3:d5:17:4c:fa:22:d6:e4:93:
         71:3f:a0:2d:38:3e:ee:5a:fd:22:39:e4:19:40:17:2e:19:b3:
         f5:96:f7:4a:a7:92:f2:7d:93:8c:65:29:41:c1:6a:c7:0a:36:
         00:0b:5f:26:53:87:ff:eb:83:35:01:4a:17:02:73:3f:90:cd:
         a9:38:b4:38:7a:4c:3e:22:1f:bd:60:73:07:ac:47:cb:47:d6:
         e7:a5:db:7c:0c:c7:cb:d5:bb:36:83:c8:b7:2b:e5:1e:eb:2b:
         d4:94:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:42:22 2024 by rpki-client on console-fra.rpki-client.org