Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
File:                     FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json)
Hash identifier:          4a1mkwEdg3oi8VEGr1ZoMiS8QlejCdRPvVi5Yc4jqWc=
Subject key identifier:   E0:CE:DB:EE:78:F1:13:AC:54:80:F4:57:24:26:6A:50:D0:6B:86:FF
Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
Certificate issuer:       /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Certificate serial:       060C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
Manifest number:          1039
Signing time:             Thu 02 May 2024 20:37:21 +0000
Manifest this update:     Thu 02 May 2024 20:37:21 +0000
Manifest next update:     Thu 09 May 2024 20:37:21 +0000
Files and hashes:         1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: NVpyxfIo0RWUON3YeBHOZr+n6UV3F+EDc2K8wvGhykI=)
                          2: A6E61B8A5A0811EB817D2420C4F9AE02.roa (hash: pjmclr2hf6vS5vhx7RdaJRDDgMSd9f8NtX1iTtseTgs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 20:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
        Validity
            Not Before: May  2 20:37:21 2024 GMT
            Not After : May  9 20:37:21 2024 GMT
        Subject: CN=6633f981-bc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:b5:d5:9b:9f:aa:0b:74:a3:6c:ca:04:26:
                    a1:8b:1b:90:0d:84:ec:83:bc:e3:b6:41:7c:dc:e3:
                    ce:a6:7f:40:26:8d:65:5f:c9:ba:9b:47:db:cf:50:
                    34:e0:21:7a:8e:6e:03:12:64:2e:83:2f:a7:58:57:
                    54:3f:49:4f:4e:62:03:25:7e:78:32:78:ce:e4:2c:
                    f4:57:e5:c0:24:ff:d0:45:05:1f:37:42:ed:11:a3:
                    64:4d:3f:27:5a:40:2c:e9:ac:eb:32:9e:02:3b:9b:
                    9a:72:a2:6a:d3:3a:4b:55:6c:dd:fe:06:06:98:5a:
                    ef:d7:ec:4b:37:a5:a2:78:23:49:99:e2:18:1b:f4:
                    da:c8:30:75:72:cf:ea:ba:23:5d:c5:e4:98:e3:06:
                    a0:95:a7:6e:5a:88:ce:ac:cd:ce:fa:be:5b:33:64:
                    6b:97:49:a0:36:5a:50:0f:d3:94:bf:b9:a8:4e:01:
                    ab:62:6d:df:29:6b:3a:a9:77:da:68:a4:9c:76:87:
                    28:4f:d8:61:f2:ee:05:5e:1b:7b:74:ab:ee:e4:48:
                    59:bd:ca:36:71:52:a1:7c:13:8f:27:cb:51:5f:0f:
                    63:35:33:f6:94:2e:fb:27:b8:a0:dd:ea:1f:06:c5:
                    a8:bf:aa:20:6e:81:72:bf:f5:f0:e9:f1:67:05:8b:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:DB:EE:78:F1:13:AC:54:80:F4:57:24:26:6A:50:D0:6B:86:FF
            X509v3 Authority Key Identifier:
                keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:20:81:48:67:d9:1d:e3:f5:7d:30:e5:ed:ab:5f:1e:eb:
         7c:93:78:ce:97:a5:8f:cf:1e:75:58:d2:ea:95:58:8a:6e:41:
         a8:a4:98:8b:44:92:5b:44:d7:8a:2a:07:bc:cf:08:81:ea:c4:
         e1:21:5d:3b:8b:81:49:85:99:1b:f9:c0:67:18:5b:e4:96:a1:
         d4:5e:1d:b1:17:23:23:c2:c1:78:d1:20:be:ec:ae:b4:c4:23:
         e5:b4:85:30:6d:fc:13:ce:77:3e:23:60:00:43:e4:25:20:32:
         3b:46:5e:fe:c0:90:99:cb:88:9f:bc:0e:b3:fe:71:7e:90:f1:
         60:d3:4b:a5:05:cf:02:64:d1:3a:7f:48:d8:d3:be:31:62:21:
         4e:26:cf:98:7b:05:dc:33:f6:c8:6d:d9:07:8e:d8:b5:2e:d7:
         92:a9:fa:63:d9:9b:15:8b:8d:b5:c0:24:c1:59:79:65:0c:25:
         b7:d5:e5:2b:fa:57:fc:61:5a:1f:bf:4a:49:57:48:7e:98:a4:
         40:eb:31:a8:5e:a5:8f:69:86:0c:51:55:03:cc:e4:31:38:86:
         22:38:a3:70:f9:32:62:0e:08:22:af:2d:08:65:e4:95:73:9e:
         19:bf:b2:9c:e8:f0:0a:c8:43:8b:e3:a3:98:66:25:55:fd:c1:
         be:68:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org