Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
File:                     WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json)
Hash identifier:          dcr6SSksZpv+IqAtoDb5GqCOEhfujhukNLDRFAf/gRo=
Subject key identifier:   9D:DD:97:81:86:13:CE:3C:78:1E:6D:D3:04:8B:8C:7C:A7:3B:D8:15
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
Manifest number:          84
Signing time:             Sat 23 Nov 2024 04:37:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:37:20 +0000
Manifest next update:     Sat 30 Nov 2024 04:37:20 +0000
Files and hashes:         1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: gYQU5YErfnZ6TcDGxSRm+5WfDzIoWdB9Rp9o5O3gQUI=)
                          2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: IbdaHFfeEoQaUZaW7ARqIDcFtCSyxpUy30pPQAG7s/E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: Nov 23 04:37:20 2024 GMT
            Not After : Nov 30 04:37:20 2024 GMT
        Subject: CN=67415c00-6cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:c5:22:ab:96:1c:d6:f5:48:db:38:dc:7b:
                    af:a4:5c:be:74:e6:25:30:63:71:84:18:d4:2d:6f:
                    f4:79:b5:5b:77:d7:85:0a:a0:ee:64:f8:9c:a4:41:
                    cf:b4:e4:9a:91:6f:da:08:17:53:e0:db:ad:74:07:
                    80:9c:9c:df:46:0c:29:fb:43:90:af:d0:96:f4:b1:
                    89:37:9b:df:b9:f2:e4:de:db:b5:5a:f9:7a:c6:97:
                    ea:9d:58:16:4d:f3:85:a8:fe:b3:cd:14:af:8b:d6:
                    c8:b2:a3:10:8f:44:b4:8f:18:db:59:c8:c1:da:b0:
                    c6:c0:a4:bf:32:f5:cb:b8:8d:cb:61:75:c5:4b:83:
                    07:f4:79:13:47:3e:13:e1:39:bb:d5:7f:bf:04:58:
                    0f:4a:11:b9:40:dc:c8:1a:00:94:ad:1c:ec:e8:b0:
                    ad:2d:8d:1f:93:10:a6:e5:14:7c:03:98:82:60:8d:
                    c1:4a:8c:67:c4:9c:e8:a9:9d:89:f4:e3:ea:ba:12:
                    95:95:eb:73:8d:a4:7c:0a:ab:c1:32:60:84:e0:ed:
                    1d:26:2a:1a:03:d9:aa:e2:21:07:de:f5:6d:02:59:
                    43:95:02:30:b0:8f:64:29:c7:67:c8:d1:68:08:a7:
                    8b:e0:cd:e5:c1:d8:18:8f:5b:52:78:54:4d:d0:d8:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DD:97:81:86:13:CE:3C:78:1E:6D:D3:04:8B:8C:7C:A7:3B:D8:15
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:ae:78:0e:27:50:49:d4:d3:ab:07:30:9f:66:93:f5:90:
         57:07:5e:6a:d5:1d:c9:66:8c:4d:31:30:0a:0e:eb:78:9e:3c:
         97:77:99:19:ca:35:d9:3b:ce:13:00:56:31:6d:93:85:a2:05:
         2b:56:ca:3e:09:63:6c:f6:75:be:d9:33:95:32:2e:91:7a:e2:
         a2:cf:4f:e6:25:73:3b:cb:36:ef:ea:99:0d:a9:42:50:61:73:
         c8:ba:31:f4:aa:9f:f9:d6:7f:d1:92:2d:1b:e7:12:22:1b:62:
         3e:75:81:2b:bb:2a:1a:a2:a3:c0:b5:41:24:e4:98:af:02:c2:
         f4:0a:fc:a8:2b:0d:03:12:99:6c:4a:9a:47:f3:71:50:14:57:
         92:ec:4c:9e:56:44:f7:d4:90:a1:b2:03:84:26:49:95:b7:ab:
         5e:43:0b:4f:8d:12:97:47:9d:eb:36:85:36:80:e5:9e:8c:b1:
         b4:7e:36:38:3c:76:de:f3:af:e7:d1:f7:52:21:e5:a6:88:64:
         6d:eb:4b:c7:d6:bc:92:42:86:a0:b6:45:82:7c:19:d7:bf:87:
         2f:32:09:e6:37:47:34:b2:b2:59:27:a9:80:83:89:9e:f8:f1:
         13:87:5d:1d:b8:57:bd:73:d0:fa:1a:e0:3d:6b:2d:44:1d:7f:
         c0:30:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org