Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
File:                     WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json)
Hash identifier:          7MMJx8GM/1hJ0fSzisDc1xeRQesl4HsymWkq7+HvKjk=
Subject key identifier:   9A:BE:AB:A6:61:54:5C:9B:BD:54:59:45:1B:7A:71:8C:16:A7:C0:E0
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
Manifest number:          25
Signing time:             Sun 19 May 2024 08:31:42 +0000
Manifest this update:     Sun 19 May 2024 08:31:42 +0000
Manifest next update:     Sun 26 May 2024 08:31:42 +0000
Files and hashes:         1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: L6f5QRJGbZ905ohdOnuVlv5uZ76UOtYsJL1WXKjMVmU=)
                          2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: IbdaHFfeEoQaUZaW7ARqIDcFtCSyxpUy30pPQAG7s/E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: May 19 08:31:42 2024 GMT
            Not After : May 26 08:31:42 2024 GMT
        Subject: CN=6649b8ee-8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:2e:6f:4e:a9:64:d7:87:e2:d1:f1:95:01:
                    09:0c:22:82:08:f6:57:ba:61:e5:44:45:e6:13:4f:
                    c5:21:f4:15:11:dc:8b:29:ad:e7:26:98:e2:07:b6:
                    9a:9b:c3:c9:70:20:46:c3:1b:f6:7e:41:ea:35:69:
                    d0:61:3b:88:cf:ae:88:f6:e0:8a:56:a4:d8:f0:2a:
                    c0:d5:9e:c4:4d:f8:c4:33:70:d9:b6:5e:3d:52:ac:
                    e5:b1:30:f1:9a:20:d3:b6:54:cb:84:ab:3f:83:a6:
                    b6:c8:d7:53:92:d7:1d:62:be:78:dd:a1:5c:3d:93:
                    1a:77:81:ac:c0:db:70:a7:a6:a5:16:73:5b:2c:89:
                    07:9b:7a:f3:a1:74:ef:bc:ea:40:20:d5:da:9a:67:
                    32:49:25:37:c7:a0:fd:e1:e2:6d:00:bc:95:c9:ee:
                    69:dd:13:c2:ec:2d:27:1a:39:51:1e:ce:78:b1:42:
                    51:11:26:3c:df:02:c1:61:40:ac:22:71:ba:ed:9a:
                    98:af:97:57:2a:fb:5e:2b:b6:09:53:a5:e0:c2:7c:
                    e4:b1:86:44:c8:0b:4b:d3:0d:4d:2a:64:29:fe:d6:
                    4f:5d:f4:f3:f0:35:c4:af:ad:a5:ea:4f:91:0e:8b:
                    37:24:4b:a3:b7:8b:c9:72:4a:6b:71:13:78:2b:0f:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:AB:A6:61:54:5C:9B:BD:54:59:45:1B:7A:71:8C:16:A7:C0:E0
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:42:a8:f2:c0:76:95:11:1c:fa:51:9c:c4:18:e4:da:f3:71:
         8a:4c:5c:c6:8e:53:a1:f7:36:a6:8d:03:ae:0a:b8:5b:c7:7c:
         e3:35:ca:82:35:d2:ca:64:d4:d3:85:37:6e:a1:93:19:34:30:
         d8:86:db:a7:fd:0c:df:bc:15:9e:85:0d:0c:e9:97:b2:b9:22:
         5f:9b:2e:43:38:d5:52:16:84:01:71:52:2d:09:a5:7d:b0:2c:
         c4:18:a8:2f:16:c9:80:90:56:b2:47:07:87:b4:ed:23:63:d7:
         82:9c:a2:af:d1:59:5b:9d:e4:cc:a4:65:90:b5:eb:73:52:56:
         bf:fb:1d:d6:c0:3d:24:70:63:ba:b6:45:3c:fa:f0:58:83:ab:
         bc:68:5f:19:c4:6b:a2:47:c0:ef:0b:79:ba:0b:46:1d:df:33:
         a1:ff:b1:91:7b:45:e3:c9:75:4c:24:cb:8d:57:e3:75:66:07:
         4c:a1:f8:7f:65:5d:28:b6:61:23:66:f3:6a:52:b7:20:7b:ed:
         70:4b:1f:3e:08:31:17:73:ba:09:04:50:39:f9:21:6b:e8:9a:
         e0:31:ae:93:d7:7d:a4:b5:a4:5e:b0:ef:57:8b:88:88:32:5e:
         d9:40:8f:cc:ed:23:57:3a:ae:4e:88:fa:07:61:d9:65:53:44:
         e0:f7:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org