Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          WlmpxOhYxUcUSOiy2Kw6g4a1XAVuI+Hrbw5z+JJIafo=
Subject key identifier:   4F:B2:33:EE:4C:80:AD:1A:C8:FE:E0:A6:D4:C6:29:DD:5C:D8:BE:66
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0811
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          0806
Signing time:             Thu 02 May 2024 22:00:46 +0000
Manifest this update:     Thu 02 May 2024 22:00:45 +0000
Manifest next update:     Thu 09 May 2024 22:00:45 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: kCOV2AdfIr4nYleH05tHPn1SyPwTWvsMda/jEykFuHM=)
                          2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: vous3xXvjFiAXL/Nl/pupAEtSC4yfMyFz8lsRruGfJA=)
                          3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: uzwGZx0lOKgMiII26y/rxgrO7suGbXUTp9/KngrkqPU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: May  2 22:00:45 2024 GMT
            Not After : May  9 22:00:45 2024 GMT
        Subject: CN=66340d0e-e89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:27:ad:e6:55:8b:70:6e:66:96:9d:ec:e9:
                    99:96:b1:34:9f:17:ef:60:ad:54:ca:a8:ff:b6:f6:
                    b1:b1:40:99:1b:bc:f3:9b:c3:7c:cd:b0:e9:b5:7d:
                    3f:97:5a:33:a2:4c:4f:15:51:6f:1b:14:c1:c4:bc:
                    fb:07:d8:85:08:08:48:38:ce:ae:41:db:38:c1:a0:
                    c4:4c:c0:aa:a7:66:8d:a0:b7:03:41:1b:ea:56:bc:
                    d5:7f:c4:7a:e6:8f:9a:c0:67:e5:41:dc:ea:4c:85:
                    9e:c8:76:af:a1:bb:d6:1f:c6:fa:6e:dd:9d:3a:27:
                    ac:d3:2a:8f:ec:f4:5c:73:25:5a:50:6e:e0:6a:f8:
                    a7:53:62:e2:39:ca:cf:9a:55:a0:2f:32:23:08:4e:
                    da:e1:57:9e:ed:70:b4:0b:f7:a9:9b:fd:0e:5f:75:
                    c7:1d:ba:36:7f:aa:e5:b0:49:37:24:a2:71:04:b9:
                    6b:61:04:1c:ff:26:df:76:5e:0e:1e:9c:7d:94:0a:
                    96:8a:50:1b:6d:04:a0:30:9f:6b:9a:2e:d4:ad:0d:
                    74:97:d6:cc:fb:fe:67:a1:3e:d1:5e:e6:1e:46:3e:
                    48:58:4f:b7:0d:99:39:01:92:0f:8d:92:2b:35:49:
                    4d:46:d9:a5:c4:b2:3c:b5:99:63:bf:9d:18:49:b1:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B2:33:EE:4C:80:AD:1A:C8:FE:E0:A6:D4:C6:29:DD:5C:D8:BE:66
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:81:d0:30:c7:f3:18:28:21:60:b7:51:7b:60:c5:4c:f4:04:
         4c:90:60:f9:c7:c4:b8:b8:74:54:58:6c:5c:72:b3:89:7d:8c:
         26:71:d7:2c:90:62:9d:7e:f3:15:a0:a1:f1:7c:ea:58:b4:65:
         3b:3b:be:48:cd:ca:36:05:c7:cd:32:eb:27:9e:e7:fd:4c:a3:
         20:e3:61:6a:1c:8b:74:92:91:cc:5b:7f:d1:4d:19:4c:96:43:
         0b:d5:5b:a5:ce:09:4f:32:84:ba:84:1e:ec:ff:bf:4e:88:9d:
         bb:b5:fc:23:23:44:9d:58:61:2c:87:73:53:9e:d7:67:eb:11:
         11:4c:38:4f:82:e4:5d:e9:0e:3c:b6:74:c5:2e:04:bf:a8:a4:
         de:d1:5d:8d:60:73:15:dc:b0:67:a6:82:61:1e:89:b3:02:c9:
         1d:55:1e:9a:06:73:84:d0:84:3c:15:29:2f:13:4b:b7:e0:af:
         50:f4:c8:c4:66:b1:ca:59:e3:b8:9c:9c:ed:c0:a7:a2:7c:cc:
         74:ea:7b:95:f8:9d:1f:1c:26:3f:24:7d:bc:9d:89:2d:43:a7:
         d0:19:95:cd:22:b4:81:f3:fb:65:eb:e1:a6:27:00:7a:c5:39:
         7e:7d:0f:2e:fe:bc:e7:e7:80:7d:f9:b3:2f:81:fc:02:6b:b1:
         25:2f:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org