Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          PzuQW0hQQPFKYvOyhFry7tjLU/XlrULR9Ns9yLyTpnc=
Subject key identifier:   91:5A:8A:DA:9B:E5:83:99:16:A0:6A:A7:BE:7D:C6:9B:29:54:C4:1C
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       34B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          341A
Signing time:             Tue 30 Apr 2024 14:55:47 +0000
Manifest this update:     Tue 30 Apr 2024 14:55:46 +0000
Manifest next update:     Tue 07 May 2024 14:55:46 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 8/Ne1jzlyTfIjj9vnyPenPdiidMgGxIBDg0GsKvMbao=)
                          2: 0FF8DFF0FBA911EEA155441FC4F9AE02.roa (hash: z38sw4H4zMnuec64Bme/6wFJKwyXiA08DrtuuKTixnw=)
                          3: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: pEgR/uaJ2DZe31/ENqWmV9FilCTqUVShs1Pbvv7fnEo=)
                          4: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: xBVcl9K9zM7fLiJwsoUfGrwIgCw9s+5aROWr0sqSM8U=)
                          5: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: 4hZ16gCIk+RsBL0u6it3OvUakXI2/pdXfz/ORJbE0RI=)
                          6: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: o/vUD/nCiZ+ySKOMaw8gBTTWbH+R45ErKi7mpsVWHJk=)
                          7: C26CD836728511EBB881CA44C4F9AE02.roa (hash: kDkNjBRL+JnI10O3D4WzSJENnjKaDZiWfwk0xrqWEAc=)
                          8: 834853DEA70E11EB95B8534CC4F9AE02.roa (hash: 3ReFCclMPQMTswa6qM/DHe8OD36KCWoTarf3PrxCj8k=)
                          9: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: 6KWTd2rXh+ful8oeipK3kh8zEc7Yh6+AszVcCtxE0nI=)
                          10: 173820C2EE3C11ECA9E43485C4F9AE02.roa (hash: JJJbxa86cWGg8n4cpGlAoAgIGDCuSo03KEfohLmG65Q=)
                          11: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: JxJV0Rzwhaz+9qNK0CUkmj89aacomYZ251F/YULfVrw=)
                          12: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: hk7xry9rV52DaLNbR3V0PziX4NkqYuWldri3QW1j7mw=)
                          13: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: DBj09de4wITn+cXNCuUavgeGqwH9wx4Wj+0A61ybnGM=)
                          14: 0F123208FBA911EEA155441FC4F9AE02.roa (hash: FXcLUM7nDChteXY/er5AHWxekNSMvnuB0D3IzRIKq1M=)
                          15: 01C9F0C2AE4611EA8B726A0BC4F9AE02.roa (hash: aHUk7vMqj0lSO4Ix961O4zPhauFBpOyKGVXEKkP2pUw=)
                          16: C13BA596728511EBB881CA44C4F9AE02.roa (hash: xwjKNa/aqkXPpcmRlpByCPs5VVvmynsl+NieU17rhjI=)
                          17: 9B94AFC4B29511EE82B22D12C4F9AE02.roa (hash: tvJLq0Ed2jn/fRsU7wwMIbul9KvBeYQRC1NaKaLi+2s=)
                          18: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: 6CaRTeaLzhLUKokyF7MlFiWo9VHwko4UcFuO3tTV/Ak=)
                          19: A4DAA2347C8811EEAC761023C4F9AE02.roa (hash: K39HiWit/Egs5vibG01MdqRLkp9NPqdJjpqVlj6juvE=)
                          20: C1BEE9CE728511EBB881CA44C4F9AE02.roa (hash: gf70m7BhBP4sg9OKjIr1QOUlnzg4UcL5/jHCOjyQgZY=)
                          21: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: yYmmjqUinhs6foAw0rVw0E3zo7BVr3wB2iaS6mqbIxY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 14:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13489 (0x34b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 30 14:55:46 2024 GMT
            Not After : May  7 14:55:46 2024 GMT
        Subject: CN=66310673-fa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:37:ab:ed:a7:53:ef:36:ac:a4:ff:59:73:
                    be:ad:66:60:8d:f6:63:90:4e:63:37:2a:da:cf:ca:
                    bd:ac:89:e4:39:85:7d:b0:c0:45:f7:7b:f3:96:4e:
                    97:90:01:a8:61:ac:76:c7:8d:1d:3b:a5:08:71:89:
                    16:c6:28:99:c2:01:8a:0e:61:84:1f:63:58:1b:72:
                    41:01:4b:d8:81:34:cb:ba:a9:05:e9:ab:03:8e:c2:
                    4e:2f:76:25:39:02:b9:2b:0e:e2:57:78:11:be:92:
                    0e:91:54:9d:f7:07:b0:66:c6:bc:47:80:b1:9a:43:
                    a1:93:67:53:54:2b:26:c3:02:13:f8:08:75:7e:66:
                    64:e9:3e:b8:7c:ce:c8:a1:08:d6:63:90:8f:d7:1e:
                    e2:e2:5e:66:a6:cc:0a:4a:ce:6a:be:ed:99:3a:89:
                    75:b9:3a:4b:4a:9f:c5:e2:4f:38:f9:df:2c:1e:41:
                    7d:64:b9:9e:88:0a:f9:ad:cd:02:9c:10:59:fc:49:
                    4f:20:f3:85:16:e9:27:e9:e4:55:92:aa:22:7a:96:
                    a5:e7:78:f8:7e:fc:e9:10:26:f5:9f:d7:91:d7:2a:
                    c6:38:58:c5:3b:12:be:b5:be:76:cf:1a:96:06:1f:
                    51:c1:ec:5c:f0:b8:72:2f:75:53:78:f5:fb:cc:ba:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:8A:DA:9B:E5:83:99:16:A0:6A:A7:BE:7D:C6:9B:29:54:C4:1C
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:14:43:7b:c0:97:1f:f4:9c:03:c5:f0:c9:03:fa:cd:2a:
         cd:fa:de:83:f5:f8:55:4b:e7:aa:7b:13:5f:43:68:6a:1c:60:
         96:9d:8c:6a:45:4b:b5:a7:f3:29:0f:0a:2a:ba:08:43:9a:cd:
         77:53:fc:2e:17:97:7c:1e:dc:18:10:fd:8d:0b:b3:d5:b9:b4:
         af:b1:30:e9:f6:39:60:e8:48:7a:03:ad:16:12:61:b8:37:2d:
         c9:9c:fd:b4:2c:be:92:d1:d9:ee:fd:92:e9:56:84:da:d3:17:
         33:d5:98:8d:98:11:9c:36:37:1b:05:70:8d:cc:cc:05:29:18:
         7b:a9:34:19:a5:cf:0d:1d:47:d6:2a:d2:bf:10:53:68:64:ef:
         3e:17:f7:1d:45:aa:cf:1b:a8:a0:0c:e2:29:f9:38:53:22:4c:
         1b:cc:2e:c9:51:ce:fc:62:d2:c5:7c:ef:94:48:cf:dd:0a:03:
         84:e3:95:ce:2d:d1:df:a8:77:67:26:c3:9d:58:f9:4f:49:23:
         f5:85:63:79:d5:d9:37:ed:e4:77:a7:95:42:12:1f:18:70:45:
         86:bb:de:ea:11:df:4b:ff:be:a0:99:9d:ea:b7:fa:a1:77:74:
         55:f2:96:c6:92:c1:93:c1:ba:e8:69:21:0a:60:57:d6:ac:6d:
         4f:c6:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:52:36 2024 by rpki-client on console-fra.rpki-client.org