Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
File:                     Wnw4Syls_H8kJg8FEI1n1gxurc4.mft (raw, json)
Hash identifier:          9+sw62c/q+5dUGpfGp+zDAD0xRJ1beeaUhCDaQk4JQw=
Subject key identifier:   81:B4:24:1F:00:74:5F:5C:44:D9:52:76:5A:3A:AF:2E:AF:AA:98:60
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
Manifest number:          5C
Signing time:             Sun 19 May 2024 07:53:13 +0000
Manifest this update:     Sun 19 May 2024 07:53:12 +0000
Manifest next update:     Sun 26 May 2024 07:53:12 +0000
Files and hashes:         1: Wnw4Syls_H8kJg8FEI1n1gxurc4.crl (hash: 99cQqO2OFZ+IcqBjPmYpEdDWrS++PkEztAnC/mZV+L8=)
                          2: 6BD285BA971D11EE9333CE70C4F9AE02.roa (hash: 2jcnVakS3krjydQJ7BjvsbQVu2ZW2FY3I2XTF3DMhnM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: May 19 07:53:12 2024 GMT
            Not After : May 26 07:53:12 2024 GMT
        Subject: CN=6649afe9-879b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:d7:5c:98:b5:dc:00:25:59:de:a2:24:6a:
                    07:0f:35:a6:bc:d5:3b:fc:ca:5c:59:cb:5e:ab:29:
                    dc:da:d6:0d:36:1c:1e:c0:8e:81:38:67:ba:e3:d8:
                    18:dd:7e:d1:03:b5:b9:24:18:42:8b:38:a7:27:cd:
                    7c:88:46:7c:86:52:54:9d:79:56:04:38:e6:1d:f0:
                    c3:d9:ea:3c:b0:be:2c:10:5a:cb:7f:38:09:a1:a8:
                    9b:cf:ef:7a:88:b9:d5:6d:2c:7e:ac:87:58:d0:54:
                    bd:2c:16:9e:f8:6b:e4:a7:2a:e4:28:d4:2b:e6:87:
                    e8:40:15:29:df:0b:04:1e:63:54:ee:29:9a:8c:a5:
                    68:49:03:c8:5f:46:4a:b5:f4:eb:67:64:1f:7f:0a:
                    71:ef:89:c9:a0:6f:03:21:3b:71:2a:8e:5a:e4:2a:
                    ed:7e:a6:84:eb:44:7a:e2:81:23:b1:92:89:1e:17:
                    cd:ee:2a:24:db:95:de:13:e1:73:f5:cf:f2:d6:61:
                    05:71:bc:97:aa:b2:56:9d:2a:8b:17:b3:87:3e:1f:
                    4d:7a:88:6c:f7:1e:a5:bc:69:1e:c2:bf:cd:9d:09:
                    7c:d7:f7:74:90:60:02:6a:84:9b:ce:43:ce:4b:47:
                    fe:40:4f:98:31:33:9f:2c:b0:04:c8:fd:b0:fa:99:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:24:1F:00:74:5F:5C:44:D9:52:76:5A:3A:AF:2E:AF:AA:98:60
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:9d:e4:fd:9e:07:b6:45:b5:ae:a8:67:72:98:8b:aa:42:
         54:ed:60:e7:73:b6:c6:f4:3f:71:9b:1e:e3:d7:4c:a3:94:65:
         0a:ec:a9:74:ba:1e:82:e0:46:59:b5:54:7f:62:26:d5:86:51:
         03:bd:68:e0:a5:42:27:8d:da:7b:6a:50:da:6b:05:09:32:83:
         6e:6e:5d:1f:8b:2f:f0:fe:8d:aa:4e:4f:42:fa:a7:bb:31:0c:
         b3:32:87:07:af:bd:37:94:f5:06:8e:66:6d:6d:10:2e:03:6e:
         31:05:d0:66:02:cc:65:b4:ba:a1:57:16:66:f6:4c:5d:5d:c0:
         93:10:e2:c5:4d:1a:03:a4:3d:29:b6:d2:69:2f:48:1d:17:43:
         a1:a7:4c:ac:34:73:03:a8:ec:a7:5c:a4:97:0b:92:6f:91:43:
         f0:4f:ba:70:59:6c:d8:e4:93:07:8d:eb:1c:e8:bc:2f:d7:c7:
         1f:27:89:d0:15:a8:2a:d9:15:40:6d:d5:61:52:5a:82:7b:5d:
         43:c5:df:d7:91:d5:19:8b:b4:c3:5f:f0:de:84:0c:fa:83:6e:
         15:43:09:78:c8:3f:cd:fc:8b:be:a3:c1:11:ef:9d:ac:b4:f8:
         0d:bf:b9:ca:9d:82:9f:10:b0:b5:de:8d:9c:93:32:c4:e7:18:
         51:f1:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org