Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          j/oj3xybcPCZPuN3N+5xJa4GWqT+45juQeA11uuJfhY=
Subject key identifier:   79:E2:8F:20:DA:80:DE:29:6E:86:19:68:2A:65:14:C2:C6:D7:9F:FE
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       3404
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          33EA
Signing time:             Sat 18 May 2024 14:41:56 +0000
Manifest this update:     Sat 18 May 2024 14:41:56 +0000
Manifest next update:     Sat 25 May 2024 14:41:56 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: NQQFqDUSuJ9/qgwsxH4Cgpvy6CpeIbuF83SjLl5pojk=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: hMq9ZBZKobiQQ+ITRX1aRNUFOYugNkQrLhEZQaSJZ0s=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: ecxfUMv8CveekPNpexIyh32yt82JgRfuOxFANCVgDNE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13316 (0x3404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: May 18 14:41:56 2024 GMT
            Not After : May 25 14:41:56 2024 GMT
        Subject: CN=6648be34-632a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:ef:74:11:51:f7:30:fb:35:b4:45:07:16:
                    79:68:53:96:1f:bf:c5:02:54:34:f5:84:e5:db:9d:
                    be:ee:c3:ae:f8:cb:77:53:07:9b:65:61:87:6f:38:
                    f6:e3:07:01:90:f9:40:00:9e:0f:42:3e:3c:27:8b:
                    36:6e:54:74:2a:dd:ae:2f:29:c2:fa:3b:aa:f2:1b:
                    6d:97:3f:9c:be:85:4a:ed:89:f4:13:00:55:82:93:
                    b6:1e:a6:50:56:1b:ff:53:ed:16:fe:9b:3b:48:27:
                    0b:7d:e8:ef:9b:76:38:0f:0f:85:8f:fa:ca:84:82:
                    80:8c:88:fa:c1:1e:5c:10:e8:a6:af:91:5d:f1:ca:
                    14:0f:20:18:e8:0b:3b:42:dd:97:a4:79:cb:c9:3a:
                    84:0e:b9:3b:cc:8e:aa:54:ac:7a:e0:76:49:e5:1b:
                    09:c5:7f:fd:04:a5:a9:75:4f:4b:39:05:8d:fa:73:
                    58:70:93:99:6c:f5:fe:e3:d6:5e:4b:42:1a:f8:7b:
                    a8:1a:f7:1d:61:38:bc:62:7f:49:7c:0b:ec:dd:ed:
                    3d:fe:62:16:95:de:f5:da:8e:8e:10:8e:4b:6f:c9:
                    6e:93:2a:4c:d8:f7:b2:8b:77:18:a2:e1:3f:3b:a9:
                    80:a3:95:d4:a9:02:c6:16:c2:c4:2d:69:a8:f9:e8:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:8F:20:DA:80:DE:29:6E:86:19:68:2A:65:14:C2:C6:D7:9F:FE
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:43:b1:02:12:d9:65:fa:26:9a:bb:95:11:45:d2:ce:c5:
         d4:73:16:81:22:ad:d2:23:9e:c6:38:d1:b9:7a:f4:1b:4a:cf:
         dd:50:af:f2:42:92:f7:67:d7:d6:83:ab:55:9c:a2:4b:ff:19:
         27:83:d0:52:bb:63:0e:8c:e9:6b:e4:d9:82:11:57:83:8e:bd:
         25:dd:31:99:74:c3:9c:ed:62:d4:db:d8:ef:9e:6e:9f:99:e1:
         bb:c0:e1:a6:26:b7:f1:e9:7a:31:f5:e5:ce:3c:e9:5a:f1:d0:
         7c:19:7e:be:77:1e:e3:b2:40:4f:82:98:d1:90:2c:c9:ef:a3:
         f6:9c:73:6d:16:7d:31:6c:b3:ba:be:7c:f4:39:f4:ee:8c:bc:
         ee:d5:3f:b1:f8:be:86:b6:fa:d1:07:21:bf:9f:b3:76:1a:ae:
         76:70:a4:b5:e1:f1:68:bc:09:ce:0b:c3:62:a1:8f:e2:27:3f:
         ed:69:2f:e2:3c:0f:49:06:b7:73:37:61:8c:eb:71:d2:43:36:
         60:51:51:7b:e0:1c:d1:c4:50:96:1a:b1:a0:55:9c:d2:88:ae:
         ee:6a:b3:17:63:c2:cc:0c:43:da:05:11:84:18:19:41:2c:1d:
         e7:bd:09:e4:3b:1b:ce:a2:b8:29:be:75:23:02:90:60:f6:6f:
         be:65:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org