Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
File:                     Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft (raw, json)
Hash identifier:          DkVNpQxDIlaOdbSrxFE1v1IMiEGbpKpftf4PPzZ0+Y4=
Subject key identifier:   E2:E5:A3:0C:A3:1A:F2:77:4D:C8:4D:39:D1:E2:40:43:EC:89:03:72
Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6
Certificate issuer:       /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
Manifest number:          06D5
Signing time:             Sat 18 May 2024 22:56:15 +0000
Manifest this update:     Sat 18 May 2024 22:56:15 +0000
Manifest next update:     Sat 25 May 2024 22:56:15 +0000
Files and hashes:         1: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl (hash: vBuTygglziAo+de+ZWc86Zvo+VsY2JJqXsxzBp3IVO4=)
                          2: EEC2740A08A811EBB9370955C4F9AE02.roa (hash: sYC7vuVf1spiB/QuvLvPtb+nw5OzbFfhDDht/P7uKzI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl
                          rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6
        Validity
            Not Before: May 18 22:56:15 2024 GMT
            Not After : May 25 22:56:15 2024 GMT
        Subject: CN=6649320f-829b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:d3:6e:bc:39:9b:4b:51:74:5b:5e:6d:65:
                    70:0c:1f:5d:6f:18:14:7c:6b:3e:31:13:2c:b4:d9:
                    35:c5:22:28:d3:61:fc:79:dd:1c:99:0c:90:d8:a9:
                    42:f5:0a:2c:58:b5:02:dc:1d:c0:1d:56:bd:1b:ea:
                    79:0c:ee:1d:ad:0f:91:38:da:40:64:be:78:5b:5e:
                    ec:18:6d:bf:50:44:1a:81:26:3e:ed:7b:b1:6d:7a:
                    4a:e5:4f:00:5c:e1:ce:88:31:b5:46:74:a3:78:3e:
                    98:46:c4:e3:1a:92:57:60:bb:37:6c:e1:af:56:77:
                    e7:ff:63:1b:fe:dc:bd:bc:aa:5e:6d:97:a5:e5:0f:
                    d6:19:6b:dc:25:4d:d6:a1:0a:03:27:7b:8c:ba:61:
                    e2:2a:6c:0f:75:78:3a:98:7e:d2:07:8b:4a:27:17:
                    57:5f:c0:9f:fb:1d:08:bf:77:a8:fa:d9:8e:81:be:
                    68:58:8d:16:95:d1:ef:4c:81:5e:60:43:cd:6d:ce:
                    c4:14:e8:61:ab:22:84:a3:8c:5d:49:0c:81:87:86:
                    e3:a4:46:f3:01:46:5a:52:69:44:9b:f9:89:16:7f:
                    6f:4f:10:9d:4e:7d:0c:73:5c:93:5a:9e:9e:f2:92:
                    5f:d2:3f:00:b4:15:8c:13:56:c3:96:7b:a8:28:fa:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:A3:0C:A3:1A:F2:77:4D:C8:4D:39:D1:E2:40:43:EC:89:03:72
            X509v3 Authority Key Identifier:
                keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:50:f8:31:10:5b:ea:17:3c:c5:ba:e2:53:e3:aa:ac:74:de:
         b7:e5:8b:e9:67:06:52:bc:02:5d:9f:b0:ae:f0:fd:9d:bc:ad:
         5a:44:ef:84:d4:f3:85:ba:4b:0e:0b:63:f4:f3:cc:ad:3c:1e:
         93:3f:f8:21:cd:ea:68:45:12:e7:4b:32:70:96:66:f6:92:3a:
         a3:e6:df:d2:e5:4b:03:2c:92:d1:77:42:f7:9a:36:b7:c2:ea:
         80:97:1c:e6:04:f1:2e:d7:47:75:92:3f:37:ee:1a:df:92:16:
         d0:0b:df:02:77:82:58:e0:cb:41:8c:56:6b:28:c7:1c:13:be:
         2c:b4:3c:9f:4b:f6:7d:bd:16:4d:84:d7:d6:8e:0a:63:20:42:
         6f:54:c7:cf:62:03:29:01:70:29:bf:d5:bd:3f:ea:7c:92:88:
         23:71:3d:84:32:2c:cf:21:1d:e8:0d:64:71:3d:21:14:07:e5:
         dd:c7:c6:1d:42:76:64:6d:57:d9:91:72:b7:ca:86:90:a9:46:
         fc:ef:89:88:b0:43:d9:44:4f:d0:58:33:2f:52:54:c3:69:c0:
         5f:8d:4c:24:92:8d:0d:4a:d5:83:c4:23:be:52:0b:8f:63:04:
         54:80:8a:5f:27:78:7c:43:77:52:c9:c2:e3:f4:11:a3:4e:0a:
         84:90:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org