Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
File:                     w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json)
Hash identifier:          ZXyVY1SH9jouGruQ42CNn3w2T7JnkuvobQ/Z1OswkM4=
Subject key identifier:   F3:DE:76:76:B3:70:3B:00:A7:D8:E7:B2:68:E5:72:BC:4C:81:D6:D1
Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
Certificate issuer:       /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
Manifest number:          46
Signing time:             Wed 15 May 2024 08:14:17 +0000
Manifest this update:     Wed 15 May 2024 08:14:16 +0000
Manifest next update:     Wed 22 May 2024 08:14:16 +0000
Files and hashes:         1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: oZE08e2LrR8DHns1qzj8u1+J+LvwnYElPlyQVtRDtZM=)
                          2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: /xLgcciV1fAsMQUoHqYX8C0b6v/QUBkQkCnmsh29lS4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl
                          rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 08:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
        Validity
            Not Before: May 15 08:14:16 2024 GMT
            Not After : May 22 08:14:16 2024 GMT
        Subject: CN=66446ed9-418a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:36:b9:9f:76:8a:2f:26:50:fe:be:c5:17:
                    b4:64:02:bb:d0:d9:5e:30:e8:b1:dd:1c:88:ae:9e:
                    06:88:0d:94:e9:79:53:53:43:43:02:c4:8e:04:b1:
                    c6:5c:10:6c:a7:37:e9:66:c5:a5:4e:0d:39:b9:e6:
                    b3:51:d5:56:86:b7:d4:14:59:78:3e:58:5f:98:85:
                    b5:67:46:6f:80:1c:16:72:4e:65:c8:35:2f:57:60:
                    7a:19:d4:b1:1f:8a:6c:08:53:f2:4f:26:4e:15:b6:
                    4c:69:ad:a2:c7:6f:51:35:89:10:3a:f2:67:64:76:
                    76:4a:9d:57:40:ae:0c:66:04:0a:1c:c3:8f:81:6d:
                    33:fc:04:02:45:a4:09:15:76:1f:07:83:66:da:e0:
                    04:18:05:a5:cf:a4:4c:38:5c:61:80:b5:94:e7:30:
                    87:eb:4a:a0:b7:76:a9:13:64:71:70:05:c7:07:87:
                    8b:42:26:57:5d:3b:50:ab:68:0f:8b:e1:18:3c:4b:
                    89:aa:f0:c4:b1:6b:39:c1:ab:96:dd:8e:78:0f:db:
                    6e:50:71:a2:e9:be:4d:b1:63:a2:5e:f1:d0:97:1a:
                    b5:2f:82:94:37:16:7c:1b:66:b2:18:83:f2:14:55:
                    85:6e:92:b5:53:a1:c9:ac:a2:7c:07:dc:57:08:e7:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:76:76:B3:70:3B:00:A7:D8:E7:B2:68:E5:72:BC:4C:81:D6:D1
            X509v3 Authority Key Identifier:
                keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:fe:3c:16:59:80:07:7a:5c:47:ef:bd:ea:3b:86:c8:3c:
         9d:3c:ea:ae:42:31:72:41:61:41:d5:c4:db:47:26:de:71:30:
         3a:94:c2:32:f3:4d:09:df:dc:a4:74:98:b5:48:fe:15:ac:92:
         8e:2b:72:a8:dd:64:64:19:80:25:c2:2b:cc:7a:6d:35:15:83:
         a7:43:ad:1b:11:07:d7:c7:78:95:fc:d6:67:4f:42:44:9c:de:
         d4:05:c2:5f:9f:27:2c:10:ea:16:61:05:d8:8f:89:83:37:36:
         e7:cc:4b:07:68:06:b6:a0:8a:ef:48:7c:02:0a:99:85:80:6e:
         af:05:07:d1:36:66:18:a0:1e:82:26:e1:38:e2:cb:5e:bf:63:
         ee:6d:7d:49:71:ca:b5:7e:36:7f:ad:a7:97:13:c8:16:52:46:
         ac:d5:85:f7:5b:61:50:d8:89:69:5c:92:0f:5e:12:e9:0e:32:
         45:5f:1d:c3:6f:a6:aa:7a:b9:82:b0:22:b8:b0:6f:bc:70:07:
         e1:a8:30:e3:40:3f:70:05:d9:c9:16:ac:cd:50:82:0d:50:cb:
         ee:25:29:4f:18:1b:5b:1a:f0:ef:70:32:f6:4c:03:5c:97:d9:
         2f:c2:d2:93:58:ae:40:0f:8e:d1:8e:92:2f:5f:fe:ac:54:ad:
         6d:b2:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org