Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File:                     WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier:          tP0+0cSORBC8kX4mk3spPiBW2HmQYadMEWSb+cPZkuI=
Subject key identifier:   06:A9:E9:B0:51:30:79:2C:8E:00:EC:D9:5F:75:91:A8:1C:56:F8:31
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       0516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number:          0504
Signing time:             Sun 19 May 2024 01:12:02 +0000
Manifest this update:     Sun 19 May 2024 01:12:01 +0000
Manifest next update:     Sun 26 May 2024 01:12:01 +0000
Files and hashes:         1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: NsNkaF69x50gCzByoyb8Lkm6IrQk3IXexh0dLxNkR2Y=)
                          2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: PXR3knfTU1XX9VuSWCCiRrgPsUJ1IKyVZ2u+Yo54itM=)
                          3: 101150200BF211ECB242D930C4F9AE02.roa (hash: ce46HscI+9w3Pjwx1sxXAavOYbbAn9FavLZ9Lr3IFKY=)
                          4: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: 8ZBWrB4Cmgw4+khhlLKVt4TaGBSu9E8OvSyvF5SrN3g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: May 19 01:12:01 2024 GMT
            Not After : May 26 01:12:01 2024 GMT
        Subject: CN=664951e1-4883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:48:d8:7c:9d:dc:9a:6a:46:76:a1:82:63:
                    b0:9b:16:8c:01:6f:b6:d0:1f:d2:2d:75:71:e9:89:
                    53:1b:82:63:59:8a:64:b8:c4:94:00:58:59:e5:3f:
                    3d:5c:15:10:ae:ef:67:21:35:95:ab:8c:03:a3:b2:
                    e2:88:21:c1:f1:a2:be:d3:68:34:ca:2a:da:42:4c:
                    19:23:19:e6:d8:b0:f3:31:42:4c:b8:d8:77:c3:23:
                    e1:f5:29:63:d1:7e:1c:c0:67:32:a1:f2:a8:c0:18:
                    93:ec:08:2d:9a:9b:56:41:76:f7:39:f0:63:62:43:
                    13:45:a7:83:b5:c8:1d:28:62:92:4b:7b:66:a5:71:
                    96:d6:3e:83:06:ba:ca:ad:9b:2c:c0:7f:5b:8b:60:
                    0c:c2:5e:84:6c:27:88:75:b6:5e:ac:01:7f:50:3c:
                    a5:64:28:32:90:de:43:32:c0:b6:0c:73:97:f2:b4:
                    6b:5a:e5:bf:77:41:af:e5:36:b4:f4:78:6e:78:4f:
                    cc:d4:ee:22:14:05:da:2d:c7:16:f2:c3:f9:7c:53:
                    9c:57:30:5a:b3:ef:a2:20:cf:49:7d:2e:5e:85:3f:
                    dd:53:1f:ae:49:53:9a:cb:3d:72:2d:68:89:43:c0:
                    3c:97:68:95:38:bf:42:de:7b:c4:c3:b3:29:58:45:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A9:E9:B0:51:30:79:2C:8E:00:EC:D9:5F:75:91:A8:1C:56:F8:31
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:79:4f:ac:4b:84:44:d7:8e:08:58:bd:c0:79:d8:17:11:58:
         34:da:db:c0:97:1a:0b:ed:a3:9c:c3:61:91:0a:5d:72:2a:76:
         eb:91:e7:0f:96:76:00:8f:61:c5:cd:5f:e5:34:56:de:3e:91:
         93:b0:f2:0c:b0:3e:a0:42:ee:06:56:49:9c:a8:71:58:98:8e:
         ec:e3:f5:c0:01:4b:1a:3d:f5:b1:e5:db:46:e7:ab:30:1c:43:
         a7:28:b2:2e:e6:19:1b:e0:32:ae:d4:13:b1:d2:3e:1a:8d:6a:
         30:29:3e:92:bf:9a:e4:be:96:c5:9f:c4:a6:9c:c8:05:5b:4f:
         d7:52:95:2c:5b:aa:5d:14:79:4d:1b:55:c8:a9:5e:7c:70:b6:
         58:c2:a5:59:ce:9e:84:0b:f5:24:45:98:99:9e:50:f3:ab:78:
         78:78:a6:ae:45:d6:ea:51:f7:fc:51:f0:5e:02:08:c5:e8:df:
         af:80:b4:27:0b:46:73:02:c4:4e:67:a9:a4:69:63:f9:c1:3b:
         59:59:95:6e:f0:22:1a:7b:c9:a6:7b:0a:4e:e5:40:23:18:16:
         40:05:8f:2f:2c:58:60:13:9d:4b:42:7e:6f:a2:22:9d:5b:cc:
         ab:9d:29:3e:15:8b:d7:a6:52:7f:c5:3c:a3:fd:8f:46:55:50:
         66:94:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org