Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          tYpNXSpxURBdqpoD9/+9dq7YXlzj3TvTbpCoB0Io14s=
Subject key identifier:   DC:C3:05:12:00:9A:0E:56:E8:F5:D2:1D:74:8D:0C:45:3B:97:D0:9E
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          B3
Signing time:             Sat 23 Nov 2024 04:09:12 +0000
Manifest this update:     Sat 23 Nov 2024 04:09:11 +0000
Manifest next update:     Sat 30 Nov 2024 04:09:11 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: UQF2neQXb9A8OoGY8Bm2EkOR8WLnGEFEd0Vvm7Atn6k=)
                          2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: ZkuyjzQM5NywNPNPqesV9btZaP3Tg8fDuRFKbMiHyfA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Nov 23 04:09:11 2024 GMT
            Not After : Nov 30 04:09:11 2024 GMT
        Subject: CN=67415568-cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:34:25:4d:d7:0d:ce:08:a4:a6:bd:b5:36:
                    05:9f:9f:1a:86:a1:61:be:36:05:2c:f4:60:ec:8b:
                    16:8e:3d:f9:db:68:dc:56:51:92:38:cf:08:5a:51:
                    dd:0e:24:4b:8d:fe:57:9c:0a:4f:ec:f3:67:e8:fc:
                    0d:2d:16:1c:09:27:e6:77:9f:f0:e9:83:e4:83:d3:
                    ce:df:5f:46:9d:e5:61:7e:81:b4:e8:2c:88:a2:f9:
                    92:59:45:4e:12:3c:88:4c:a1:27:1b:3d:05:01:76:
                    7a:80:cb:bd:1a:3f:eb:ad:fa:33:c8:30:57:4c:10:
                    85:2c:51:5f:b7:00:ef:30:90:39:1e:16:8e:a6:7d:
                    fb:35:41:5d:54:40:cc:14:9b:69:47:2b:df:c5:71:
                    ef:4f:a9:c5:3a:b9:f3:df:c6:33:1c:4a:20:02:41:
                    f6:36:ae:6e:d1:44:e8:57:14:0a:d2:30:b2:cc:39:
                    a8:32:44:20:19:8c:f0:93:0e:d7:72:97:a7:ee:cb:
                    b5:5b:01:72:d9:32:f5:7b:3c:45:51:88:a8:5d:d6:
                    af:8c:26:77:c7:b3:72:bc:ec:aa:02:52:be:03:cb:
                    f4:11:49:28:5c:ba:8c:39:cf:f5:ad:6d:ba:d8:36:
                    c4:0b:6c:7a:f1:3a:fc:27:1d:1e:54:f1:17:4f:d3:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:05:12:00:9A:0E:56:E8:F5:D2:1D:74:8D:0C:45:3B:97:D0:9E
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:16:12:5f:a6:b8:56:19:e6:2f:32:9f:c8:1e:65:4c:6f:9f:
         97:df:49:e0:93:62:24:6e:fc:ba:85:5a:65:c4:45:a7:5a:a9:
         ce:1d:23:74:07:38:9e:9c:ae:0a:16:0d:fe:66:ef:e6:28:36:
         ac:2f:ae:dc:62:3e:de:7e:cd:fb:d7:0a:ad:a5:84:2c:aa:96:
         c5:d2:ae:52:90:7d:ed:cd:1a:54:32:3a:82:24:fd:5b:e5:9e:
         f9:f4:2d:9f:14:fb:91:0e:25:99:f9:26:e0:a3:db:c7:af:d3:
         b4:42:19:0c:6d:b3:23:73:92:ae:91:27:e4:1b:b4:1e:96:85:
         cf:8a:32:19:53:99:8c:ad:1e:af:45:45:75:63:f3:b5:d6:1b:
         7c:99:89:fd:aa:5e:89:1a:1c:a2:10:87:60:6e:85:04:0f:2e:
         41:6c:e9:6b:29:12:c7:43:3e:97:19:9f:67:b6:c3:7d:b6:3c:
         c3:13:fa:5c:3d:7a:d1:a7:b3:29:71:8e:81:54:f2:e7:a1:ab:
         47:24:97:47:ef:f2:5d:ac:f6:5b:d0:b2:14:2b:56:ce:c6:0a:
         31:14:6e:2f:4c:5c:40:f8:63:f2:33:e3:3e:1f:1b:c5:1e:21:
         31:71:fe:12:22:99:cc:9a:4c:52:60:bc:4e:65:98:54:f1:5c:
         d1:b2:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org