Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
File:                     wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json)
Hash identifier:          Nt43d55g2Z4jHMxJ66nbGdHkhGcdVV7LQigMzSmuf60=
Subject key identifier:   A1:C1:E8:02:0B:17:48:DA:51:93:72:E9:FE:9B:15:86:AD:A3:48:60
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Certificate issuer:       /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial:       05A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
Manifest number:          059D
Signing time:             Fri 31 May 2024 00:55:53 +0000
Manifest this update:     Fri 31 May 2024 00:55:52 +0000
Manifest next update:     Fri 07 Jun 2024 00:55:52 +0000
Files and hashes:         1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: 1168QDbC5dIkxG+bF7NM+JCjFb6+8IyQN7RQT7Pe/+U=)
                          2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: CbHsq57/eJvXO0BkyHVi4E+MVBNbLF4Z32ylgf85Fxk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 00:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
        Validity
            Not Before: May 31 00:55:52 2024 GMT
            Not After : Jun  7 00:55:52 2024 GMT
        Subject: CN=66592019-c27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:c4:ba:ec:a0:f9:8e:db:54:fd:85:38:a4:
                    ac:c5:55:f6:48:87:5a:7f:cd:98:1d:9a:ee:41:56:
                    6e:e3:ec:27:04:eb:ef:16:a8:2e:9f:76:48:3f:82:
                    76:89:2b:b1:1b:12:9f:c5:a8:f4:20:3e:66:1b:39:
                    97:ad:ab:f7:08:98:71:51:10:2d:0b:28:5e:0d:68:
                    d9:68:2d:4e:51:95:f6:4e:72:ef:57:b6:5e:ce:8e:
                    5b:45:1c:d6:44:20:af:0b:56:53:e7:62:83:55:d7:
                    59:5b:1c:2e:6d:bf:65:7b:7a:1e:9a:b0:91:89:bd:
                    80:c1:8e:de:70:db:3a:85:1c:9b:c6:19:a7:a5:e9:
                    2a:fc:28:c8:cc:4c:36:5e:7d:78:b5:6b:83:5e:b0:
                    df:9d:c9:9b:f3:2b:13:4d:09:80:e8:77:88:80:23:
                    9f:a7:bc:57:0e:1d:15:b8:91:3d:bb:81:ad:68:c8:
                    d3:91:46:e8:0a:04:8a:ad:a6:be:ef:46:65:c4:23:
                    ca:3e:2a:94:57:60:fb:ae:63:06:fc:f6:1b:08:2e:
                    8c:e4:00:96:c2:96:54:d5:fa:a4:40:c0:15:0b:4f:
                    2d:7e:7b:e9:21:3c:cc:2a:d2:5a:c5:68:6f:2b:49:
                    80:80:b0:9b:db:f5:70:27:da:06:9e:2f:ab:2f:5a:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:E8:02:0B:17:48:DA:51:93:72:E9:FE:9B:15:86:AD:A3:48:60
            X509v3 Authority Key Identifier:
                keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:b3:8f:31:53:35:c7:59:3f:ff:7a:5b:cf:ac:0f:fd:17:
         8e:52:9d:f1:e9:49:77:b6:cc:61:1c:cd:9b:48:cd:c8:a3:bc:
         15:27:b4:30:b7:a2:6f:81:4c:78:8c:bf:19:8c:bd:00:89:6f:
         1b:cd:a4:4c:3c:eb:53:e4:51:46:d1:d4:93:05:0c:d0:23:df:
         41:a4:cd:9e:05:e0:c6:64:ce:3e:23:e0:be:5b:fa:61:47:26:
         84:6b:85:ae:cc:ae:f2:d9:44:04:23:a4:bb:a6:c1:a0:5b:40:
         5d:85:44:e3:66:20:1e:fe:7b:83:67:51:19:22:b8:a3:b8:b4:
         ec:c8:44:a9:a8:0b:81:f6:77:e0:ed:60:7e:72:3d:dc:79:e4:
         be:0e:fc:49:d3:36:97:c6:b3:3d:af:64:6a:b1:5d:40:b9:1b:
         a9:bb:51:3c:e2:71:87:fc:7c:53:62:ef:3a:6a:e3:4d:5a:9f:
         78:b8:01:99:f7:8e:84:16:2c:e8:3e:03:b0:c0:7b:06:e7:ea:
         81:73:71:21:db:21:86:e6:d7:56:f8:86:a7:26:ce:f2:51:b0:
         56:85:3e:b2:8e:ba:b6:b2:88:4b:e3:56:4b:4c:f4:62:78:5d:
         2b:ed:63:d4:16:71:26:12:7d:ba:1e:48:3a:68:ed:b1:66:70:
         a9:18:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:15:00 2024 by rpki-client on console-ams.rpki-client.org