Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
File:                     v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json)
Hash identifier:          GsDejRiStN5Gh8AqlzNMApfLD9WA3mJxGrwDd7yINLM=
Subject key identifier:   92:6D:62:B4:6C:71:E7:0B:C9:CC:C1:65:4C:85:DF:14:16:7E:5D:02
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Certificate issuer:       /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
Manifest number:          23
Signing time:             Fri 17 May 2024 08:40:36 +0000
Manifest this update:     Fri 17 May 2024 08:40:36 +0000
Manifest next update:     Fri 24 May 2024 08:40:36 +0000
Files and hashes:         1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: zAWmBs6ptsWFkWaImzJrhebZm6lA5tRyBodXDdUDBlI=)
                          2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: 4ifq9H+2oUaf4XogyDcgufI74BbBk+/yBuSEMG4BFOQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
                          rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
        Validity
            Not Before: May 17 08:40:36 2024 GMT
            Not After : May 24 08:40:36 2024 GMT
        Subject: CN=66471804-a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:db:f6:f1:46:f4:37:d2:3d:cf:b6:74:a7:
                    c1:94:f3:86:c3:89:9f:b9:f5:b6:cb:90:d2:cf:92:
                    54:b0:f9:d5:c4:66:aa:64:32:c8:fd:f2:c3:2d:4c:
                    6d:96:a3:62:77:53:25:a5:82:57:d4:f3:cf:8e:d3:
                    47:25:1a:7e:c3:d7:da:08:79:a2:80:b9:9f:34:cb:
                    09:31:92:10:2e:57:3e:64:31:90:2e:f3:de:96:08:
                    7c:7e:2c:e5:ac:38:63:8a:51:4e:63:51:60:12:f7:
                    bf:0c:cc:e0:8f:8f:58:9c:36:21:83:94:f8:dc:7a:
                    27:50:1a:bd:23:22:9b:a6:78:b1:68:81:04:dd:1a:
                    92:da:e5:d6:8a:9d:cb:22:d4:ed:1d:86:18:27:6e:
                    3b:a0:95:aa:cb:e0:52:7d:fa:01:ec:7a:08:3a:96:
                    3c:a7:0e:a4:d4:e9:15:08:f2:97:bd:87:be:35:0a:
                    52:78:ce:e3:e5:6e:b3:8a:bb:b3:61:e9:e0:e9:ed:
                    51:5e:14:64:ea:07:0b:3a:e1:a2:fa:f3:c2:7a:7a:
                    af:4b:71:90:00:e7:14:c0:7b:c7:8b:28:21:42:64:
                    04:51:10:b2:38:9d:7a:52:00:77:57:93:c1:ce:1b:
                    9e:c3:ff:21:29:a4:e1:54:c4:3b:b0:d6:45:66:09:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:62:B4:6C:71:E7:0B:C9:CC:C1:65:4C:85:DF:14:16:7E:5D:02
            X509v3 Authority Key Identifier:
                keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:69:d2:75:3c:e3:5e:58:37:a8:da:4c:27:cb:66:f6:0d:
         41:76:23:da:6f:a9:6d:74:8e:b5:75:58:4f:d3:74:09:fb:bd:
         59:51:de:82:66:68:f5:c2:bb:f3:e1:30:1f:7a:22:ea:ee:a8:
         c8:92:0c:24:86:e7:35:e1:65:a7:42:29:bd:54:45:e4:e2:b3:
         38:78:84:72:e5:bf:c1:5a:58:c9:73:ff:20:c1:93:e8:27:e4:
         73:32:f8:f0:0d:79:ef:f2:82:ee:8c:2e:ad:11:a3:95:96:4a:
         3f:9c:ca:06:d0:42:e3:76:a6:b7:de:8f:98:53:e5:bb:e4:26:
         79:49:b6:9d:74:b1:75:7f:bf:37:e9:0d:03:36:dd:62:12:0b:
         1a:01:85:5a:48:93:7e:7a:c3:dc:61:63:d5:59:96:c5:b5:26:
         82:a7:39:dd:fb:b2:3e:57:30:54:ff:73:46:90:a0:94:81:82:
         2e:b4:85:07:a7:9b:0a:fc:91:5d:5c:c8:0f:32:c6:0e:7c:08:
         5a:c7:dc:6a:79:eb:9d:45:44:10:d9:23:a1:0b:bf:61:8c:a1:
         17:f1:f0:97:51:d0:bd:a0:a1:56:66:e6:33:3f:39:3b:1c:23:
         ae:67:d7:32:4e:34:2c:3f:8a:5e:95:ec:97:90:df:25:6d:38:
         2f:16:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org