Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
File:                     WLauhcbhBzDPdWfXIqNGxJtSKqk.mft (raw, json)
Hash identifier:          o+W2aor8aSuckn9ghivG5h0OFgWkttvCe+7hAgP95tk=
Subject key identifier:   20:5A:6E:78:04:3F:E1:53:D9:E3:7A:D2:B5:88:36:40:C9:2E:28:4A
Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
Certificate issuer:       /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
Certificate serial:       0755
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
Manifest number:          074D
Signing time:             Fri 22 Nov 2024 21:06:08 +0000
Manifest this update:     Fri 22 Nov 2024 21:06:07 +0000
Manifest next update:     Fri 29 Nov 2024 21:06:07 +0000
Files and hashes:         1: WLauhcbhBzDPdWfXIqNGxJtSKqk.crl (hash: mU7MQeBTF+gM+ct6EyD33GDOVV8uC5omxlkluxkSul8=)
                          2: 0136F4540FE611EC8DD2020EC4F9AE02.roa (hash: WY35or/UWPFnJgi7e9bjldWY/rVtpdp9nvzV7837P9s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl
                          rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
        Validity
            Not Before: Nov 22 21:06:07 2024 GMT
            Not After : Nov 29 21:06:07 2024 GMT
        Subject: CN=6740f240-2956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:32:22:00:9e:fe:f7:3e:48:57:73:07:fd:
                    4b:d3:45:b5:f4:0b:39:eb:51:8a:9c:94:16:91:33:
                    34:6d:71:50:82:49:d0:ac:8c:be:c1:55:1d:34:ff:
                    1b:b0:81:b3:03:60:28:97:1d:10:26:58:28:a6:80:
                    a4:8b:2a:42:87:ab:3e:7a:a3:5a:bf:bf:b4:66:1c:
                    3c:b3:71:04:de:20:1f:8a:dd:88:48:f6:1a:10:41:
                    d5:dd:be:e6:1b:a9:1f:af:e0:09:cb:65:ad:f0:2d:
                    ac:ca:9a:0c:db:ac:19:4a:4b:39:74:ef:cb:b7:f5:
                    d4:5d:88:43:6b:96:61:0e:5c:fe:0e:68:9d:01:a4:
                    47:9a:81:82:19:50:06:08:9c:38:85:bb:2c:db:4b:
                    09:56:f5:02:78:65:c3:8b:33:eb:04:fa:3d:a6:cc:
                    1f:71:f5:11:6d:b5:a7:99:72:49:c0:17:79:e0:77:
                    40:1b:d8:fd:7e:37:c6:c1:94:ad:d1:dc:57:7d:ec:
                    9b:b9:21:db:d7:57:a7:59:0b:bd:1d:4e:60:1a:9c:
                    c0:4e:77:22:84:1f:27:aa:ea:5f:b8:a2:c6:83:dc:
                    f6:18:54:5d:0a:cf:aa:bc:1f:95:b2:cf:d7:ba:83:
                    28:14:b5:9c:8c:dc:58:9e:2a:21:7d:b5:27:fd:05:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:6E:78:04:3F:E1:53:D9:E3:7A:D2:B5:88:36:40:C9:2E:28:4A
            X509v3 Authority Key Identifier:
                keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:9a:b4:0b:a5:f1:8a:97:df:ad:4d:7b:5c:e7:88:aa:a3:
         bd:74:0f:48:02:11:ce:05:4f:ce:95:cd:af:d9:ef:c5:28:21:
         cd:90:79:fe:57:99:c5:ad:f4:d7:36:94:60:0e:4b:dc:da:05:
         e6:d5:fb:d3:49:13:ee:5d:ad:03:0a:f7:2c:21:7c:0c:06:18:
         90:f6:ae:c8:2f:f1:53:db:3b:3e:68:ab:ae:b2:62:f2:2a:9a:
         16:99:b3:58:0a:f0:d5:a1:ad:6a:fd:1e:60:cb:8a:b4:6e:a1:
         ee:e2:8f:99:a7:aa:bf:c4:f0:84:93:6d:b4:85:44:b3:fa:86:
         a7:7d:fd:34:f5:2d:2c:e3:a3:51:c2:a0:d1:5a:38:76:b4:5a:
         18:be:be:b3:0f:8d:00:e9:fc:fc:97:64:61:82:29:5c:a4:59:
         9c:7c:84:8c:41:c2:21:56:81:0c:5e:ce:93:5b:f9:d7:81:72:
         06:b3:a8:d1:2d:98:94:68:01:c4:b7:b0:eb:69:1f:83:b3:69:
         ea:48:9f:af:a6:90:22:71:4b:25:7a:db:0a:ef:af:24:ef:77:
         86:55:ea:b6:7e:9a:f8:e0:21:16:26:b9:e2:7f:bb:c7:3e:be:
         86:54:41:de:78:a7:1b:83:84:36:8e:f8:a0:37:73:18:78:07:
         67:04:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org