Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          3mKVGMKcqjLPEv6ZOqUvelH0uQiCSprPirygdIBF0hs=
Subject key identifier:   B7:18:82:95:CE:BF:00:5A:74:55:AD:B3:40:32:B2:A3:39:00:FE:E0
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       02EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          02E5
Signing time:             Fri 03 May 2024 03:25:09 +0000
Manifest this update:     Fri 03 May 2024 03:25:09 +0000
Manifest next update:     Fri 10 May 2024 03:25:08 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: vJ0D7xC1U7H6GGzCsJwa8d++QkCbfw9YoeyH19OwcCI=)
                          2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: UZE4B7TQF7OmOrR/d21Mir8aueARJYHSHmfJPdIjU8c=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: m2OzrFcbyuzoJP5mPfZB+1cRhziOQ1KX17g4FbokyA4=)
                          4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: Y95Ni0g3l7/8tisSt7S1J1Br0BC1KHqfH6u9RqUysuw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: May  3 03:25:09 2024 GMT
            Not After : May 10 03:25:08 2024 GMT
        Subject: CN=66345915-01c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:dc:36:83:61:b8:59:72:55:b1:fb:22:6e:
                    1f:b6:71:c8:25:5d:1a:43:c2:12:75:c8:45:dc:17:
                    6b:2f:61:1f:39:3c:ff:a8:00:81:ab:97:70:48:c8:
                    7b:85:8c:bb:13:1b:c8:1b:08:73:42:85:19:84:b3:
                    d5:1a:64:79:14:dc:79:99:e3:0f:a0:f3:65:38:d7:
                    e6:c1:39:d2:0c:db:b4:4f:d7:39:f5:f7:2c:e2:d6:
                    fd:5a:c9:34:29:ac:2b:14:e7:0b:d5:8a:03:44:e8:
                    c2:ec:6c:56:ba:00:b7:8f:bf:51:13:88:30:06:20:
                    f8:21:7b:70:42:dd:3f:86:52:2c:90:59:e1:5d:6f:
                    d6:13:a6:08:4d:f8:83:94:f5:fd:c2:a3:33:97:d2:
                    de:eb:db:fb:29:57:d4:62:ad:48:78:02:d4:40:78:
                    d2:b0:43:72:c6:4f:0d:08:4a:33:a5:dc:0d:04:ca:
                    39:c2:d6:9f:91:5a:9a:aa:a6:02:17:76:b0:ef:b8:
                    db:01:7e:62:b6:e4:50:7c:6a:15:15:ab:66:a9:bc:
                    f5:47:f3:23:d3:46:ba:62:d0:15:28:22:f3:27:19:
                    bf:8f:41:91:5f:e4:3c:fe:bc:69:f7:a0:ad:a8:36:
                    bf:de:89:06:46:f8:47:4c:bf:e4:bc:44:e0:16:47:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:82:95:CE:BF:00:5A:74:55:AD:B3:40:32:B2:A3:39:00:FE:E0
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:6c:87:af:eb:64:d5:8d:36:31:99:29:78:a2:8a:fb:86:
         a8:2b:55:9f:ce:1f:6a:41:ff:37:27:4b:68:0c:79:15:26:48:
         a0:8c:90:65:dd:2d:c8:a6:ee:78:f3:4c:d9:00:3c:86:4d:ae:
         9c:9f:76:ac:a1:c8:2a:9e:35:92:09:ef:df:8a:b7:8f:ad:8c:
         31:1e:2d:39:04:d2:ff:b1:10:a9:7e:da:f2:c4:15:ae:80:a6:
         55:e7:dc:98:b3:29:55:c3:6a:81:a9:39:df:06:b7:9a:64:93:
         0c:a4:ce:db:c1:5f:2d:e5:89:79:85:71:57:59:86:4b:ac:8c:
         7d:5b:f2:6c:6e:48:af:d7:0a:35:7f:e4:da:40:15:b1:26:48:
         1e:fa:a9:5b:e0:e6:d0:01:4c:b9:e8:ed:9b:15:0c:dd:11:89:
         87:01:fa:6d:05:99:0b:2e:9d:0e:62:5f:c7:dd:a1:c1:16:70:
         a7:f6:80:bb:f2:6c:cb:82:4f:98:3c:1b:ee:09:42:d1:7c:5c:
         0c:cc:4b:dd:87:3a:d9:ac:46:e6:d4:c3:c9:d1:a4:41:36:ba:
         fd:38:15:54:51:ab:64:03:c2:10:6e:97:24:da:36:9c:2a:ed:
         0d:d0:c5:b2:7d:72:72:7b:a0:38:52:9b:ef:89:74:56:60:e4:
         91:b3:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:52 2024 by rpki-client on console-ams.rpki-client.org