Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File:                     w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier:          AhXHoCb/G52VfZjT6FqmYSMucBk/6D68cGtn7Iuyb0A=
Subject key identifier:   74:8A:72:E2:77:A8:F1:17:1C:6F:1B:6F:1B:56:C9:23:5F:F6:F5:53
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       0318
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number:          0313
Signing time:             Wed 01 May 2024 02:49:54 +0000
Manifest this update:     Wed 01 May 2024 02:49:53 +0000
Manifest next update:     Wed 08 May 2024 02:49:53 +0000
Files and hashes:         1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: AagKscTW+UUQZ2ZxZEwoQs/y4YJOoIPYNVuB2+jOjaE=)
                          2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: PLGw9NG/LDLAwYupVxB/HWVn7IiF43r6Nw3857fc1oc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 02:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: May  1 02:49:53 2024 GMT
            Not After : May  8 02:49:53 2024 GMT
        Subject: CN=6631add2-940f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:48:63:c0:56:bf:0c:c7:50:b7:15:d8:69:
                    62:0a:12:1e:13:85:66:ff:c4:0c:4a:41:f6:cc:8b:
                    61:5e:b6:0e:b4:d5:99:01:9a:b8:52:5b:da:b3:b6:
                    9e:4c:3c:7a:75:48:82:50:7a:59:62:cb:78:8f:b8:
                    a5:34:7a:29:d4:9b:5b:04:41:4f:f2:e4:37:a1:81:
                    b1:74:7f:34:80:b6:91:93:f3:3c:94:4a:1b:17:7e:
                    b1:3b:0d:11:09:31:d0:4f:ee:15:81:1a:cb:54:75:
                    67:78:03:ff:cd:5d:cb:b6:a2:c4:17:9f:f0:4d:2e:
                    69:37:a4:77:eb:24:34:82:28:52:94:50:53:99:de:
                    d9:06:96:51:87:1b:52:c9:0f:21:da:f1:f9:fd:41:
                    1d:27:d6:91:6d:39:c5:7d:3e:27:02:db:5f:95:d9:
                    18:ff:d2:36:1f:77:96:f5:e6:ec:09:30:25:e6:2e:
                    a8:40:5e:df:bf:7f:4b:b0:c9:4d:33:d2:08:88:38:
                    f5:f8:8b:21:1b:9e:6f:07:60:c5:5a:e5:e0:60:de:
                    e5:3b:57:00:ec:e2:1f:50:19:d8:b1:5e:a1:08:4a:
                    01:32:1d:ec:c0:f5:93:4f:57:c4:ad:ec:cc:dd:b6:
                    b5:5d:ed:b1:3c:fa:45:5d:ab:6f:ab:b5:52:d9:5e:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:72:E2:77:A8:F1:17:1C:6F:1B:6F:1B:56:C9:23:5F:F6:F5:53
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:58:a8:db:61:6a:87:62:39:27:03:d2:37:0e:b2:2d:12:c1:
         35:7d:47:12:94:0e:79:19:de:35:1d:d7:9c:b3:50:46:cc:b0:
         82:ca:21:91:da:bb:03:b3:77:c9:6d:1e:59:4b:f9:d2:59:07:
         15:03:0b:84:d6:f7:d8:3c:f5:f4:e3:4e:b6:c5:8c:fc:54:64:
         9a:6f:97:57:8a:b6:6d:37:82:45:8e:d4:25:fc:5a:e3:c7:b9:
         fc:ba:d7:a1:b4:33:ad:78:05:18:ce:26:f6:97:21:72:40:04:
         44:d8:fe:fc:3d:df:5f:da:9f:39:99:96:e4:91:8b:de:3d:42:
         3a:e2:0f:6d:ec:52:70:36:8d:66:8d:18:31:ee:0f:dc:4d:57:
         fa:fb:4e:fd:ff:a1:f1:17:a1:7a:36:55:34:ab:3a:99:e8:5f:
         c9:d5:f4:e1:6d:12:f2:ad:b2:5d:4a:ee:e0:b5:18:dd:af:02:
         40:91:44:c0:e0:51:f8:8a:21:cd:74:43:77:89:6a:3d:16:68:
         d3:04:0a:ab:8a:85:e8:b5:14:3c:64:b8:78:0b:fc:14:ef:07:
         36:ad:ab:a5:1c:56:6f:63:5c:ca:41:a8:ed:51:d9:08:34:c6:
         04:f3:81:4b:ec:fe:8c:6c:7e:52:24:cf:1d:ae:10:70:b3:16:
         f0:c8:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:49:22 2024 by rpki-client on console-ams.rpki-client.org