Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
File:                     W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json)
Hash identifier:          Gpl5lM9enScB96rrd3CUyVILU/J9O4V9+flNsr7KlRE=
Subject key identifier:   3F:E5:16:D0:FA:74:0C:6F:51:3C:54:84:37:34:87:E0:34:D5:08:E2
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Certificate issuer:       /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
Manifest number:          53
Signing time:             Wed 15 May 2024 08:03:39 +0000
Manifest this update:     Wed 15 May 2024 08:03:39 +0000
Manifest next update:     Wed 22 May 2024 08:03:39 +0000
Files and hashes:         1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: y0OfEwc3vVgR7SLSFRIltWPXYBGSaDb3GxF1FfBJQwY=)
                          2: D0C91A8A9D6F11EEB2E31781C4F9AE02.roa (hash: P7e3Wr2FP0I0hn523nuNycF9N/dNvUjwNOxhQ0odjxo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
                          rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 08:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
        Validity
            Not Before: May 15 08:03:39 2024 GMT
            Not After : May 22 08:03:39 2024 GMT
        Subject: CN=66446c5b-b6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:5c:5c:4c:35:8a:4d:be:1c:d3:a9:55:59:
                    63:52:80:cc:3f:42:1a:1a:47:df:ba:1d:18:9b:db:
                    94:e7:d6:63:f5:5c:dc:ba:b6:31:a4:36:da:22:2d:
                    1d:03:d7:28:b8:f2:a2:27:b3:e1:78:58:47:e9:48:
                    f3:43:c2:1c:04:40:7c:63:db:e7:07:d0:1c:d9:25:
                    5e:3c:f1:7c:28:d5:ef:2c:4b:80:61:e7:69:6d:02:
                    27:86:71:c7:dc:b4:bd:c5:14:46:6b:60:f6:73:f8:
                    61:52:93:bd:2e:2a:b8:a1:7a:06:bc:5b:85:02:06:
                    6a:86:c1:4b:e3:39:6d:7a:8d:d0:67:2d:43:58:40:
                    e5:3d:ba:2a:03:8d:e5:21:d5:d4:78:34:c5:a6:50:
                    6c:6e:1e:4e:7a:9a:f4:58:bd:6c:5e:db:b2:38:dd:
                    71:ff:32:0c:25:41:99:db:45:03:bb:4f:52:ae:6b:
                    01:09:d1:42:48:c3:97:b8:05:7e:91:8d:ad:bc:26:
                    c6:ed:c6:ff:58:3e:da:df:23:45:cb:ee:69:89:50:
                    38:c3:15:e8:5f:fb:f0:9d:a4:2a:8d:91:f9:44:aa:
                    11:13:f8:a4:86:d1:bc:d7:b9:08:18:a6:fb:b4:fd:
                    2e:54:66:d3:34:7f:30:aa:90:ea:e8:c5:e3:2d:62:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:16:D0:FA:74:0C:6F:51:3C:54:84:37:34:87:E0:34:D5:08:E2
            X509v3 Authority Key Identifier:
                keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:a7:0c:4b:8b:9f:a7:37:9e:9c:2e:8e:5d:c7:16:a0:12:
         4a:d7:19:29:13:74:fd:42:9c:3a:db:af:08:d0:14:10:8f:ad:
         64:cf:74:54:02:af:6d:4e:06:cb:66:24:4d:ee:03:29:17:bf:
         61:fa:40:e9:2d:74:99:22:f4:6d:79:0f:80:fb:d1:cd:c7:74:
         42:3e:af:58:97:6d:1b:00:5b:45:1a:57:5b:0c:f2:b8:5e:b1:
         9c:a0:a0:31:1b:2e:69:82:66:d4:a1:73:25:fc:fc:8b:4b:25:
         5c:37:83:58:bf:33:84:24:5b:0a:3f:f3:aa:1c:e6:96:dc:0f:
         fe:1e:55:03:d0:87:d1:dd:d1:66:e7:2a:64:53:15:c4:ab:f6:
         1f:15:27:49:21:3f:ed:e8:ab:79:4b:59:d9:4f:a2:39:15:ac:
         fb:b3:03:9e:03:1e:8e:20:03:68:f6:00:3e:18:e0:6a:a4:ad:
         db:ce:6c:21:39:cc:50:40:f7:a1:0c:02:72:11:5c:20:cf:7e:
         3c:95:fe:35:4c:58:2f:ad:eb:2a:96:58:c9:60:73:dc:a1:ec:
         b5:2f:18:f8:1f:45:ee:cd:e5:b1:ac:b3:ef:b8:82:a4:15:2f:
         9d:bb:cd:dc:1c:5f:91:8d:e6:49:d7:1d:e8:38:1f:d5:a5:78:
         65:fa:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org