Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          SAuRehBNMTQ7JNTJqoM1up1XF6ugYrUu27XNoJ3pOMk=
Subject key identifier:   8D:F8:75:CF:5B:28:84:2B:EE:A4:C2:B8:C9:D9:65:59:6E:11:70:83
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       0F8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          0F3E
Signing time:             Thu 02 May 2024 18:18:34 +0000
Manifest this update:     Thu 02 May 2024 18:18:33 +0000
Manifest next update:     Thu 09 May 2024 18:18:33 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: neYn0urLt7dYVuiLdh6mUujsUK2PfS1whETcTdKtiO4=)
                          2: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: icRTAdMqAhD6EOBPnGJKJMdO+YjE0sqjrzfiUj6yyo4=)
                          3: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: n0I3mFWn4zx5HdP+/EVuE3GsQLubN+IQGazgufG3pgY=)
                          4: 9D164714168511EAB282BB44C4F9AE02.roa (hash: +Z5eq5GUeFS2MmmulFa88HJNuMpvnMOg5gvwg5dtvrw=)
                          5: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: mC8alSlqRvNrS3mIxvzPOKUF8N3H1asLuijq6BtCmLc=)
                          6: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: xo3YxEyFwniZbN8RkrtlYPP0V0NbKQQ/nc/1FJQGmBc=)
                          7: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: OpNEmGX2ba7z/P9BfT+t4IkpMepIYvoT+puV7LT+04c=)
                          8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: JYY7Jlcu8MvbqrTObq1zVkDo+73nlBcySqwLIuU2yn4=)
                          9: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: 4YobdsxDwRIrk/z/bKC20Bc3suxWt2VmXdAQxoroaO4=)
                          10: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MFk1nSICKweDEyitdcyRRusZH8cL5CRVKqUjAaaDNgc=)
                          11: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: 3WEuTkpxymDOhPpNtxE7OCAK0vRrg/LDsaux5yYOx7s=)
                          12: 884A03F4447111EC83674068C4F9AE02.roa (hash: BEHDTAZA1ATzsmitace9+w4q5zuGmH+c62oba+E6Pp0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 18:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3982 (0xf8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: May  2 18:18:33 2024 GMT
            Not After : May  9 18:18:33 2024 GMT
        Subject: CN=6633d8fa-5ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:00:fe:84:dc:84:d5:01:cd:8b:d9:93:ee:
                    93:78:14:b2:9f:b8:e6:df:58:7d:88:8b:b9:1d:9d:
                    6c:ba:37:52:1e:91:5a:0b:3b:64:18:59:9d:76:55:
                    62:f1:c7:25:24:56:9a:bc:7f:ca:e6:ea:fb:52:13:
                    5c:01:f5:56:f6:2b:28:04:75:90:48:f0:71:b4:c9:
                    b2:2f:1a:87:f4:3a:22:31:12:58:dd:37:cf:f5:ac:
                    a8:8f:67:64:fe:f6:81:8a:25:bf:09:b4:91:9f:15:
                    98:08:ce:a8:1f:ba:60:f9:4e:86:4f:6d:9b:f8:1c:
                    36:9b:50:85:d2:46:11:88:48:45:32:29:68:c6:16:
                    a5:f7:25:90:d1:be:64:da:9a:d0:3d:91:ba:a4:31:
                    cf:3b:ef:16:2e:cf:48:4e:05:d5:3e:15:78:2f:0d:
                    ae:0a:8e:f6:40:2f:a3:05:e5:5d:75:be:91:e2:32:
                    aa:c5:45:b7:a7:9d:6f:28:52:59:39:52:07:97:90:
                    b0:89:66:1e:a5:c9:ea:81:68:f6:89:ef:ea:f9:f4:
                    b6:64:5b:33:5f:ec:ba:08:f8:71:40:40:09:f7:71:
                    2e:be:2c:b2:ee:9c:6e:96:15:07:8a:49:e8:10:80:
                    10:65:93:40:bd:98:91:67:9a:ea:e3:1c:e2:9b:f5:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:75:CF:5B:28:84:2B:EE:A4:C2:B8:C9:D9:65:59:6E:11:70:83
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:31:f6:bd:8c:d9:ae:7b:94:48:26:39:63:85:a7:2f:75:
         87:47:a8:d2:1b:e2:72:96:33:be:9f:de:6f:25:42:19:50:97:
         5a:13:5a:c3:55:81:71:61:2c:cc:f7:2d:b5:74:b5:34:12:eb:
         6f:07:97:b6:a9:34:2f:8e:34:8e:a3:3a:b0:6a:c3:a4:7e:e8:
         30:f5:d2:23:b9:90:4c:72:79:ef:d3:d5:da:0e:64:d9:3c:ba:
         c1:09:ea:a2:fc:74:e4:1e:a6:c4:8f:d3:49:f6:60:da:f3:4f:
         5c:7e:d1:bf:b8:fd:d5:80:70:87:05:03:75:45:e7:79:03:d4:
         fe:5c:de:5f:6f:83:0f:f1:c4:4c:65:fa:4c:d4:d2:0d:a9:4d:
         f7:c7:33:09:22:d0:ea:f7:02:d4:d0:aa:9c:50:23:dd:2e:e8:
         88:56:64:49:23:a6:f3:95:0e:a1:c7:b6:3f:26:71:9e:fa:91:
         b8:a8:89:ad:91:28:80:43:1f:32:3a:bc:63:c9:0a:b9:6a:f6:
         f5:1e:b2:3c:31:56:6b:42:65:ef:8d:cf:aa:13:34:62:2e:d6:
         bc:49:8d:a6:5a:38:58:a5:44:d0:51:dc:54:ee:e2:bd:29:19:
         3c:99:da:53:51:2d:a8:af:26:44:16:fa:e1:cd:36:97:86:57:
         0a:45:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:04:26 2024 by rpki-client on console-ams.rpki-client.org