Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          Q2D+yUqLuQO4li14sFb7H+PORMsgi6Hu422u/uJmEYg=
Subject key identifier:   3C:51:F8:64:03:F6:5A:85:4B:CA:F9:66:6B:F9:FC:38:EE:EA:5C:A8
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          020C
Signing time:             Sun 19 May 2024 04:07:55 +0000
Manifest this update:     Sun 19 May 2024 04:07:55 +0000
Manifest next update:     Sun 26 May 2024 04:07:55 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: tKCouf9Iswxh9l2RDERhAbiKLbGUMmLsfcai9RtRXCg=)
                          2: 1BB004005A5F11ED87558C5DC4F9AE02.roa (hash: gzhiY6733nAsRQa6TZbVTFq5lHDaOVITl4ckSX4MK2c=)
                          3: 8409527078B011EE8D737723C4F9AE02.roa (hash: Ncl+a5PXfkQi0ceg2GixYDGu2kxajLWRY1PTSbthHtY=)
                          4: E99BBB345A7D11ED870D4726C4F9AE02.roa (hash: 1XwKSY+eq+Y1++qgKdmdm33pEAhM2jfrsMnSz0IF6PM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: May 19 04:07:55 2024 GMT
            Not After : May 26 04:07:55 2024 GMT
        Subject: CN=66497b1b-b276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9b:31:ab:16:7c:d9:5f:b7:db:9e:c4:ce:ba:
                    4f:bf:07:5c:12:6c:3b:1c:5f:33:87:53:68:d3:9a:
                    68:c8:36:41:2c:1d:a1:33:91:f5:e4:27:03:c7:27:
                    04:67:51:ac:be:3a:a1:f8:6c:5d:05:4f:f5:34:07:
                    77:93:6a:66:fb:7e:3b:2c:a0:bd:32:af:38:e3:6f:
                    ed:e2:0a:e1:2d:df:d2:0c:78:e7:42:b2:d4:8a:7d:
                    f5:f0:5a:53:80:3b:59:28:b2:b1:02:f6:7d:15:1b:
                    e4:7a:7e:11:60:11:b3:fb:87:81:57:5f:f8:ac:a5:
                    e7:2e:77:0a:2b:14:b2:1c:4a:ee:1f:f6:ce:e9:a3:
                    b1:ce:72:e0:65:14:c5:a9:77:78:43:3a:ec:13:ca:
                    e2:65:d9:4a:b4:ef:f1:0a:dc:59:35:44:22:e9:d4:
                    c6:e8:68:d3:d9:11:98:61:e2:d0:90:8b:e4:87:42:
                    06:bd:82:c1:cd:ce:dd:40:1c:16:b7:93:e8:7d:44:
                    c6:2b:81:87:02:66:58:d4:4a:c8:98:c8:a0:78:7f:
                    b9:ec:0f:98:b4:47:02:66:f7:32:d5:86:e4:43:e9:
                    b3:90:85:6d:ef:80:5a:b1:08:a1:82:de:1a:c6:43:
                    6c:67:2c:29:c4:39:0f:64:af:0c:cb:2d:e9:bd:70:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:51:F8:64:03:F6:5A:85:4B:CA:F9:66:6B:F9:FC:38:EE:EA:5C:A8
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:87:d8:cd:cf:68:24:81:54:a9:ba:33:e9:a7:3a:6d:10:
         d5:0d:62:5a:1e:2f:6d:ed:8f:b4:9b:8c:99:cd:0a:be:35:01:
         1a:b1:57:14:b9:af:e7:b6:0a:83:b3:5c:ba:93:aa:4b:d2:4f:
         95:1a:5a:50:d3:f7:c3:93:a6:d6:bc:e7:b3:f2:26:b8:b3:4f:
         eb:88:3e:23:a2:ff:c5:51:98:c7:cd:cb:0a:2e:9e:20:18:bc:
         9b:d8:8a:f0:89:04:14:d2:ad:d9:8c:68:1b:24:2f:e2:b8:af:
         48:f8:d7:cc:26:f0:4a:74:fd:20:72:06:d9:ec:66:b8:16:67:
         b6:10:f1:70:91:50:21:81:f5:ac:0c:88:7d:be:bc:91:42:4d:
         29:ad:16:c0:a9:a9:5e:e0:f9:e1:30:2a:b7:4f:9d:fa:d0:af:
         14:ea:96:e7:79:06:ce:0a:d8:ac:04:ce:20:57:ce:55:f8:f6:
         40:2e:5b:03:38:00:67:15:b8:51:20:f9:95:4c:69:a3:36:e9:
         47:58:7c:86:98:db:18:47:f0:87:e3:1d:6d:6c:a7:65:e4:b5:
         54:e6:c6:50:a8:84:fe:bd:82:e7:4f:e5:cf:3c:3c:75:c1:21:
         1d:d9:cb:c6:6a:0e:a2:a3:af:7d:53:aa:1e:c2:55:c9:d4:01:
         05:8b:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org