Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
File:                     WuYzaTnqj177KiHkMGc_gMzVBVo.mft (raw, json)
Hash identifier:          2x52aBvOnK5HeITqTYVf9sQKvm52IDHmdF4BPgXq8AI=
Subject key identifier:   21:64:8B:56:FC:9B:62:5C:89:91:B3:03:B4:20:8F:72:69:FE:53:61
Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A
Certificate issuer:       /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
Manifest number:          0646
Signing time:             Sun 19 May 2024 00:46:39 +0000
Manifest this update:     Sun 19 May 2024 00:46:39 +0000
Manifest next update:     Sun 26 May 2024 00:46:39 +0000
Files and hashes:         1: WuYzaTnqj177KiHkMGc_gMzVBVo.crl (hash: YuhTWKm9ncAJ3+tirYKx/wQ2iqQVYQy0aQZKgrJXMUQ=)
                          2: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (hash: zq5Smsxfkgz2eR/9pMB72X8pxmyX+qoPjCoVnr3b1dA=)
                          3: CFD5A5D6E52211EDBE69751CC4F9AE02.roa (hash: yMn17JpM0IteEPO93FiEw1fhObRPCAKXZzwRnAQf3Ac=)
                          4: 6135B1E2011B11EEBB26C24BC4F9AE02.roa (hash: EMgw10msp56fFVqWWNcTVWdwyvIyUX9S86/d63PydTI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
        Validity
            Not Before: May 19 00:46:39 2024 GMT
            Not After : May 26 00:46:39 2024 GMT
        Subject: CN=66494bef-b92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:a1:61:b2:bd:97:dd:b0:64:b7:b1:9f:73:
                    fc:f2:bb:a7:71:95:a7:e5:f4:f4:f9:16:b5:b9:59:
                    02:a2:61:14:a7:2c:52:67:95:56:85:39:dd:83:dc:
                    55:2d:81:62:f6:17:65:8b:1f:33:71:29:7e:72:38:
                    bd:0a:77:94:9d:02:02:14:c1:3f:1b:80:2b:83:b2:
                    df:39:f1:7f:69:8f:13:42:23:78:81:f4:d7:97:ca:
                    49:67:e0:a8:e0:ff:dd:1f:57:63:a7:b6:b2:8e:ce:
                    22:50:57:b9:6a:97:b0:25:e0:7e:b1:8f:43:1d:86:
                    77:0d:fc:8c:d5:ea:51:23:75:09:20:2b:1f:d2:b1:
                    67:48:46:6a:64:93:38:cd:08:4e:65:a2:a7:0f:b6:
                    17:85:fb:4a:1d:87:b6:7b:7d:a4:39:38:6d:a4:04:
                    b4:57:96:24:08:d4:a1:5e:de:05:cb:c2:75:06:9b:
                    15:c4:29:cd:2b:a5:fe:9e:f8:e9:e9:cc:98:6c:a7:
                    94:b1:c7:af:d2:cf:7c:2c:c5:55:b6:f5:09:df:38:
                    b4:e3:54:c2:cb:e9:47:54:39:c4:9d:3b:60:a9:22:
                    c9:76:10:0b:99:d6:20:9f:17:15:47:12:47:d9:5a:
                    40:43:c9:74:9a:23:9c:ff:cf:da:1c:bd:b1:31:35:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:8B:56:FC:9B:62:5C:89:91:B3:03:B4:20:8F:72:69:FE:53:61
            X509v3 Authority Key Identifier:
                keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:b4:6a:58:bf:96:dc:00:9d:d0:aa:e6:bd:0d:6c:5f:f1:
         b5:22:61:c2:cb:04:15:68:de:f7:91:b0:1e:f2:79:58:79:2b:
         f6:3b:e0:f5:c5:e3:10:9d:bf:b0:e2:6b:20:99:31:27:66:63:
         57:c9:5b:56:f4:58:ee:97:30:52:ce:fa:66:31:15:ec:e5:75:
         d2:7e:05:e3:89:f2:ca:e6:fd:92:81:95:9b:e5:78:df:9d:65:
         79:52:6b:f2:5b:8e:88:3f:38:50:cd:35:cd:7d:ae:dd:63:be:
         f3:0b:ab:7a:57:14:21:17:04:7b:6e:49:6d:a7:b7:04:57:db:
         45:02:60:7d:18:6f:c9:e0:33:12:cc:bd:c0:3a:f7:52:ce:ca:
         92:e5:be:cc:d4:87:1c:c8:2c:c7:79:2c:3c:af:fd:47:4e:8c:
         79:0d:06:2a:c2:50:6e:77:66:6d:bc:a6:43:7a:f0:9f:22:4b:
         e0:25:43:fa:27:69:88:7c:ee:11:7a:d9:6a:a5:4e:f1:6d:3f:
         05:20:fe:7b:66:95:a4:37:42:1b:20:d8:0c:12:bc:1d:2d:1a:
         fd:e2:75:13:b0:87:5b:a2:e1:1b:1a:05:ec:c3:7a:3f:28:e0:
         11:1e:c9:98:a6:95:b8:92:2e:6b:e1:1d:a2:3f:77:a6:a9:1e:
         6a:96:aa:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2REUxMTAvBgNVBAUTKDVBRTYzMzY5MzlFQThGNUVGQjJBMjFFNDMwNjczRjgw
Q0NENTA1NUEwHhcNMjQwNTE5MDA0NjM5WhcNMjQwNTI2MDA0NjM5WjAYMRYwFAYD
VQQDEw02NjQ5NGJlZi1iOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HShYbK9l92wZLexn3P88runcZWn5fT0+Ra1uVkComEUpyxSZ5VWhTndg9xV
LYFi9hdlix8zcSl+cji9CneUnQICFME/G4Arg7LfOfF/aY8TQiN4gfTXl8pJZ+Co
4P/dH1djp7ayjs4iUFe5apewJeB+sY9DHYZ3DfyM1epRI3UJICsf0rFnSEZqZJM4
zQhOZaKnD7YXhftKHYe2e32kOThtpAS0V5YkCNShXt4Fy8J1BpsVxCnNK6X+nvjp
6cyYbKeUscev0s98LMVVtvUJ3zi041TCy+lHVDnEnTtgqSLJdhALmdYgnxcVRxJH
2VpAQ8l0miOc/8/aHL2xMTXvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFki1b8
m2JciZGzA7Qgj3Jp/lNhMB8GA1UdIwQYMBaAFFrmM2k56o9e+yoh5DBnP4DM1QVa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZERS9BNTNBQjc0QzlD
MzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWoxNzdLaUhrTUdjX2dNelZC
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d1WXphVG5xajE3N0tpSGtNR2NfZ016VkJWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjZERS9BNTNBQjc0QzlDMzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWox
NzdLaUhrTUdjX2dNelZCVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrfLRqWL+W3ACd0KrmvQ1sX/G1ImHCywQVaN73kbAe8nlYeSv2O+D1
xeMQnb+w4msgmTEnZmNXyVtW9FjulzBSzvpmMRXs5XXSfgXjifLK5v2SgZWb5Xjf
nWV5UmvyW46IPzhQzTXNfa7dY77zC6t6VxQhFwR7bkltp7cEV9tFAmB9GG/J4DMS
zL3AOvdSzsqS5b7M1IccyCzHeSw8r/1HTox5DQYqwlBud2ZtvKZDevCfIkvgJUP6
J2mIfO4RetlqpU7xbT8FIP57ZpWkN0IbINgMErwdLRr94nUTsIdbouEbGgXsw3o/
KOARHsmYppW4ki5r4R2iP3emqR5qlqrp
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org