Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File:                     wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier:          k0kuDEf9yahGCrLhlBLt3Rna//MYpwcfxSv5G/HikHY=
Subject key identifier:   DB:EC:43:F8:B5:1A:0C:5C:28:83:62:FF:53:59:22:CC:90:C0:3A:AE
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer:       /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial:       04F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number:          04F3
Signing time:             Fri 22 Nov 2024 23:15:36 +0000
Manifest this update:     Fri 22 Nov 2024 23:15:36 +0000
Manifest next update:     Fri 29 Nov 2024 23:15:36 +0000
Files and hashes:         1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: xHT7EdOuXq+Yrk6PotNW+5Gp7Q05qS/pBXJ2c0ZAZC4=)
                          2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: bEuAdA3yRgHUx1B8M9eSaNpdhvP9aDsmMm6seL8p7oY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
        Validity
            Not Before: Nov 22 23:15:36 2024 GMT
            Not After : Nov 29 23:15:36 2024 GMT
        Subject: CN=67411098-c802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:90:61:d0:3b:46:c2:a1:40:d9:bb:09:48:
                    3f:c5:b3:84:fa:a7:ba:24:d1:dd:92:60:60:a3:ae:
                    d8:ff:a8:da:9f:9a:00:b2:70:b5:71:50:9e:6f:c3:
                    68:c4:28:ec:6e:17:fa:38:10:09:96:5e:f3:73:5c:
                    d7:8a:e8:22:c5:7c:8d:bc:44:d1:43:60:2d:de:45:
                    bc:ba:b1:08:43:de:5a:a2:3b:52:9c:a7:78:75:d5:
                    dc:ad:b3:45:05:63:49:b8:3b:02:bd:b3:3d:ad:ac:
                    7e:48:51:3c:cd:51:32:3c:61:60:5e:a4:99:f3:55:
                    81:da:d2:7d:00:b4:aa:44:04:92:e2:a8:f1:e5:ab:
                    2b:98:67:66:d6:7d:02:bc:ff:62:ac:8e:5f:61:94:
                    d4:cc:75:eb:49:6a:09:1e:c3:1c:28:78:10:63:7a:
                    75:06:fe:a3:9a:87:d6:0a:11:69:f8:2e:e3:03:40:
                    a7:ef:cd:1b:c0:9f:a5:be:81:fa:a0:45:81:8a:82:
                    33:74:d5:99:0e:aa:ae:d3:eb:85:ab:9a:e4:3b:62:
                    e2:1c:15:a1:d5:7b:b9:5c:12:2f:03:b6:c2:b0:16:
                    6c:a1:3a:7f:c9:ac:25:f6:8e:be:3b:31:97:be:9e:
                    46:70:d3:70:2c:9f:c4:6a:c1:39:d7:df:08:c9:83:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:43:F8:B5:1A:0C:5C:28:83:62:FF:53:59:22:CC:90:C0:3A:AE
            X509v3 Authority Key Identifier:
                keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:17:55:27:ce:93:2a:eb:3b:af:d7:07:39:8e:a9:a2:11:
         0e:fc:9c:58:f1:c4:9d:ca:e7:d8:7d:5c:ed:1e:b5:c4:50:2d:
         97:1c:70:27:ad:d4:3f:70:f7:bd:89:73:d1:3b:c0:2a:53:cc:
         a7:40:b3:1c:35:79:73:01:c1:b4:d2:0e:24:f8:31:b4:5c:57:
         0f:1d:e8:f7:ed:a1:17:5a:87:78:0e:1c:4e:77:5e:8e:e7:cc:
         73:46:58:17:9b:90:ec:bb:57:f4:67:4a:af:33:1d:20:07:a9:
         69:f4:8e:06:1e:60:c0:f3:34:04:82:6b:f2:f7:8f:0e:88:79:
         10:3b:7b:14:75:98:4e:59:7f:b4:c9:8c:ae:86:89:e2:1b:a3:
         66:64:06:73:af:ba:eb:fe:ef:c4:a9:5a:83:54:b4:0e:30:3d:
         72:c5:f7:2d:b6:43:1a:9d:68:dc:d7:56:01:06:f8:a8:9b:e6:
         5f:98:66:e9:dd:d2:60:48:ec:af:0d:ef:ad:96:fa:f5:0c:2d:
         a3:a9:51:75:70:08:a0:38:46:14:59:bb:2b:07:97:55:a5:38:
         f2:f2:39:d8:bd:81:ae:03:fe:d1:50:e9:51:23:c9:37:9f:ae:
         3c:d6:85:2a:a8:c1:6c:3a:cf:c0:1b:96:03:df:65:9b:81:43:
         fd:1e:fa:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE
QUFBMTc4NEQwHhcNMjQxMTIyMjMxNTM2WhcNMjQxMTI5MjMxNTM2WjAYMRYwFAYD
VQQDEw02NzQxMTA5OC1jODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qaQYdA7RsKhQNm7CUg/xbOE+qe6JNHdkmBgo67Y/6jan5oAsnC1cVCeb8No
xCjsbhf6OBAJll7zc1zXiugixXyNvETRQ2At3kW8urEIQ95aojtSnKd4ddXcrbNF
BWNJuDsCvbM9rax+SFE8zVEyPGFgXqSZ81WB2tJ9ALSqRASS4qjx5asrmGdm1n0C
vP9irI5fYZTUzHXrSWoJHsMcKHgQY3p1Bv6jmofWChFp+C7jA0Cn780bwJ+lvoH6
oEWBioIzdNWZDqqu0+uFq5rkO2LiHBWh1Xu5XBIvA7bCsBZsoTp/yawl9o6+OzGX
vp5GcNNwLJ/EasE5198IyYOjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvsQ/i1
GgxcKINi/1NZIsyQwDquMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG
MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ
d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClDhdVJ86TKus7r9cHOY6pohEO/JxY8cSdyufYfVztHrXEUC2XHHAn
rdQ/cPe9iXPRO8AqU8ynQLMcNXlzAcG00g4k+DG0XFcPHej37aEXWod4DhxOd16O
58xzRlgXm5Dsu1f0Z0qvMx0gB6lp9I4GHmDA8zQEgmvy948OiHkQO3sUdZhOWX+0
yYyuhoniG6NmZAZzr7rr/u/EqVqDVLQOMD1yxfcttkManWjc11YBBviom+ZfmGbp
3dJgSOyvDe+tlvr1DC2jqVF1cAigOEYUWbsrB5dVpTjy8jnYvYGuA/7RUOlRI8k3
n6481oUqqMFsOs/AG5YD32WbgUP9Hvpl
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org