Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
File:                     WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft (raw, json)
Hash identifier:          ZWl7BXzmjx8P6ocOGGIw62veDjbggfAVhMlUFghiS/A=
Subject key identifier:   D6:17:82:78:17:FF:41:8F:CB:44:FD:BC:DE:0E:75:1E:0F:37:19:E5
Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03
Certificate issuer:       /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
Certificate serial:       0A2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
Manifest number:          0A2C
Signing time:             Fri 31 May 2024 21:12:33 +0000
Manifest this update:     Fri 31 May 2024 21:12:32 +0000
Manifest next update:     Fri 07 Jun 2024 21:12:32 +0000
Files and hashes:         1: WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl (hash: iyj1+uflrZ8YXJkhIt5EkP7U0uvdcD9ux/FwbWgjDCM=)
                          2: 8E49B7320E8C11EDAB2A8680C4F9AE02.roa (hash: Vv8Vj2CQY2WTQMBqO6pos1ZPHZns0aipT9C2c2KARg4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl
                          rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
        Validity
            Not Before: May 31 21:12:32 2024 GMT
            Not After : Jun  7 21:12:32 2024 GMT
        Subject: CN=665a3d41-65d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:31:16:b6:fd:1f:2c:76:6a:15:ac:48:a2:
                    1b:de:31:49:5e:d5:1e:66:ee:05:87:63:cb:03:83:
                    0c:f4:77:75:dd:f1:63:03:40:4a:63:d3:6a:98:cc:
                    ec:bc:45:e2:57:c6:37:55:99:6b:4a:17:f8:ab:0e:
                    b4:eb:e8:de:f2:a1:a9:b2:39:56:7a:ae:66:18:66:
                    1b:b1:c5:a3:19:d3:df:05:ba:32:64:2b:52:bd:14:
                    7c:8f:d6:50:97:14:2b:4d:25:60:08:c4:c1:de:e3:
                    3b:5e:11:4b:24:5c:c0:4c:29:79:10:fd:b0:34:7b:
                    8e:1d:f7:59:c4:52:d1:a3:39:ef:2c:d4:e6:b6:38:
                    90:38:87:7b:f0:be:32:a7:f3:9e:fc:92:fc:e1:ed:
                    87:46:28:8a:5b:c1:d1:30:5e:de:71:b4:b6:a1:b0:
                    2d:1d:c6:12:d3:5e:b6:4b:dc:65:38:74:02:31:fa:
                    e9:f1:d4:d6:66:1f:ec:f0:86:34:4f:90:f2:9c:9e:
                    09:e0:da:75:b9:e4:91:21:ed:29:22:0c:5a:28:61:
                    62:3c:d6:3f:4e:8c:5c:62:e7:18:2b:e0:4b:6f:46:
                    47:43:d5:da:e9:ef:26:b0:a2:eb:c2:c3:7d:46:4a:
                    f4:2e:5b:5a:60:dc:f7:0e:dc:b8:95:73:44:e5:00:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:82:78:17:FF:41:8F:CB:44:FD:BC:DE:0E:75:1E:0F:37:19:E5
            X509v3 Authority Key Identifier:
                keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:cc:43:70:75:c6:36:a1:13:16:49:78:f5:8a:f2:cd:6e:d4:
         6a:63:24:e5:6f:fc:51:a6:1a:06:c0:e8:88:01:f9:41:e5:6c:
         43:f4:59:5b:55:b1:4b:50:c4:be:cf:c3:80:3b:d0:4e:80:12:
         d6:b8:7b:bb:c1:d1:bd:ff:73:ab:a1:f7:98:2d:eb:f0:99:a0:
         54:60:16:38:53:30:78:79:47:d0:ac:2f:86:f3:93:03:44:c0:
         87:5d:bb:d9:58:c3:d3:5b:34:be:85:bf:66:35:92:a2:12:8f:
         f0:99:6a:b0:49:5e:45:b5:fb:30:0c:a1:ac:05:9b:f7:f2:5f:
         34:41:1c:ba:e2:4a:18:a5:fb:c0:a6:42:65:5d:4f:63:1a:49:
         f8:ba:24:33:8c:e3:38:4e:c1:dc:d3:2d:c9:84:b9:5d:91:c1:
         00:d7:58:e7:55:cf:bb:11:02:f0:e1:ce:67:9b:13:9a:8e:11:
         a0:8f:99:72:55:4b:96:54:08:c6:5e:14:c3:e9:26:cf:f0:07:
         77:93:3c:94:cb:c9:07:94:13:8a:38:cc:6a:5d:76:aa:52:79:
         bb:40:fa:f3:e3:36:52:ce:f9:c3:cb:4e:aa:6e:6d:cc:07:37:
         84:fa:3c:17:81:64:70:e1:95:5b:86:5a:ba:3f:07:6a:f8:15:
         fa:75:9c:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjY2MzgxMTAvBgNVBAUTKDVBNkNBODZFNDBGQjZDMjY4RThGRTY1MUZGMzJFQ0U0
NEQ4NTdEMDMwHhcNMjQwNTMxMjExMjMyWhcNMjQwNjA3MjExMjMyWjAYMRYwFAYD
VQQDEw02NjVhM2Q0MS02NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlg4xFrb9Hyx2ahWsSKIb3jFJXtUeZu4Fh2PLA4MM9Hd13fFjA0BKY9NqmMzs
vEXiV8Y3VZlrShf4qw606+je8qGpsjlWeq5mGGYbscWjGdPfBboyZCtSvRR8j9ZQ
lxQrTSVgCMTB3uM7XhFLJFzATCl5EP2wNHuOHfdZxFLRoznvLNTmtjiQOId78L4y
p/Oe/JL84e2HRiiKW8HRMF7ecbS2obAtHcYS0162S9xlOHQCMfrp8dTWZh/s8IY0
T5DynJ4J4Np1ueSRIe0pIgxaKGFiPNY/ToxcYucYK+BLb0ZHQ9Xa6e8msKLrwsN9
Rkr0LltaYNz3Dty4lXNE5QB8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYXgngX
/0GPy0T9vN4OdR4PNxnlMB8GA1UdIwQYMBaAFFpsqG5A+2wmjo/mUf8y7ORNhX0D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjYzOC80MUVGQzUxRTQ4
Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JDYU9qLVpSX3pMczVFMkZm
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dteW9ia0Q3YkNhT2otWlJfekxzNUUyRmZRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjYzOC80MUVGQzUxRTQ4Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JD
YU9qLVpSX3pMczVFMkZmUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDPzENwdcY2oRMWSXj1ivLNbtRqYyTlb/xRphoGwOiIAflB5WxD9Flb
VbFLUMS+z8OAO9BOgBLWuHu7wdG9/3OrofeYLevwmaBUYBY4UzB4eUfQrC+G85MD
RMCHXbvZWMPTWzS+hb9mNZKiEo/wmWqwSV5FtfswDKGsBZv38l80QRy64koYpfvA
pkJlXU9jGkn4uiQzjOM4TsHc0y3JhLldkcEA11jnVc+7EQLw4c5nmxOajhGgj5ly
VUuWVAjGXhTD6SbP8Ad3kzyUy8kHlBOKOMxqXXaqUnm7QPrz4zZSzvnDy06qbm3M
BzeE+jwXgWRw4ZVbhlq6Pwdq+BX6dZw3
-----END CERTIFICATE-----
Generated at Fri May 31 22:13:05 2024 by rpki-client on console-fra.rpki-client.org