Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
File:                     WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json)
Hash identifier:          /o1HD+4d3+Fycyi49AMp2KNo1HfRIdr/A4mprYt5OVE=
Subject key identifier:   B9:0E:10:A4:31:B8:67:B0:A4:D5:AE:46:34:8D:64:DF:B3:22:7D:2F
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
Manifest number:          0749
Signing time:             Sat 18 May 2024 22:19:54 +0000
Manifest this update:     Sat 18 May 2024 22:19:53 +0000
Manifest next update:     Sat 25 May 2024 22:19:53 +0000
Files and hashes:         1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: xtQl3Gy8fsW7dO4QmPtXDTwM5dYALuTWg3CTZ1Ckwtk=)
                          2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: R/P6q3VrjcLUn293Dacl5oI6wIbMQ2zanmXpecozfUA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: May 18 22:19:53 2024 GMT
            Not After : May 25 22:19:53 2024 GMT
        Subject: CN=6649298a-972d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:09:37:78:a7:3c:e3:8f:c6:d5:ea:21:e1:
                    1a:54:69:fd:3c:cf:52:48:23:02:ec:c4:24:5f:c1:
                    59:de:68:68:1c:82:94:68:40:75:e2:ac:f8:98:d2:
                    ce:ce:58:c3:1a:e3:df:8b:d7:91:ba:8f:b3:81:85:
                    29:13:65:e1:75:cf:f6:19:04:04:37:bd:6a:83:19:
                    38:2a:2c:b9:6b:6f:38:54:cb:22:32:23:b8:3a:7f:
                    d1:fe:6e:1b:ec:2d:6a:de:d8:3d:2f:b2:0f:80:53:
                    ee:9f:f0:92:c5:ef:43:74:79:75:e1:29:4a:5c:22:
                    80:52:7c:75:dc:42:6d:4d:30:83:cc:f7:49:1b:56:
                    3d:ef:93:c1:55:8a:cb:9c:39:a9:15:54:51:d6:2b:
                    a3:90:be:8f:b6:bd:2f:88:db:be:03:f2:87:29:15:
                    76:c0:df:1f:d5:20:c9:47:41:19:c0:4a:06:e5:bc:
                    16:91:a1:40:4e:c9:01:f8:e5:01:53:d2:e6:ef:47:
                    43:34:21:26:9b:f4:bb:79:83:39:08:99:48:a2:b4:
                    ac:98:2c:b4:1c:6f:19:49:06:d9:f3:7f:65:cd:27:
                    0b:61:b1:71:83:d7:52:bf:23:25:82:9e:30:c3:55:
                    f2:ce:6e:5f:f5:86:05:62:2e:94:fd:b6:31:a6:08:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0E:10:A4:31:B8:67:B0:A4:D5:AE:46:34:8D:64:DF:B3:22:7D:2F
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:9e:a1:ac:09:ce:a1:c6:2a:ba:9e:e7:50:6d:93:59:02:
         d9:82:23:f7:ea:ef:f4:19:3c:ff:94:0e:fa:a3:f8:ed:16:ed:
         20:ea:c0:7f:ad:21:ae:5c:85:d0:b2:64:23:5f:a2:2f:07:05:
         ba:2a:eb:40:dd:5d:6f:48:7a:74:bd:52:77:e8:a5:09:4e:c1:
         8e:45:2d:9c:32:cf:0b:cb:56:bb:af:7c:2b:01:d8:7a:64:09:
         92:4d:f1:e0:29:b6:3f:17:41:bf:aa:ff:16:d4:51:9a:6d:f6:
         0f:66:45:8e:04:6d:62:39:e2:c2:4d:8b:b4:42:3d:43:0a:d3:
         0d:58:71:22:45:04:da:30:35:70:a4:3f:88:44:7c:3a:97:62:
         e6:86:29:a9:84:20:77:02:37:70:f1:0c:d0:a6:d9:85:b9:cc:
         e2:a6:1c:d4:b4:17:8a:e6:1c:dd:37:65:13:7a:41:45:bf:a5:
         2d:91:b9:2a:3e:75:b5:9e:1b:c4:8a:0f:24:36:07:3f:79:b7:
         ca:3a:42:08:f3:4b:10:78:6e:b0:0e:4c:bb:3b:0f:a1:b7:df:
         3c:e9:2d:a7:5c:ef:ab:bc:b4:c6:e1:ed:c9:d3:87:f0:85:94:
         40:84:af:f8:ed:20:98:cd:81:d3:bf:2f:f6:be:6a:7b:1d:da:
         e4:a7:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org