Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
File:                     W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json)
Hash identifier:          mM0JiJ9HKAO1KYv4E6ABixE5Ck1ikoo7JWD9l2S+mG8=
Subject key identifier:   8F:FA:AA:D8:1A:EE:F9:42:A1:21:89:09:73:A6:0D:AF:9C:6E:6D:E6
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       04DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
Manifest number:          04DA
Signing time:             Fri 22 Nov 2024 23:19:22 +0000
Manifest this update:     Fri 22 Nov 2024 23:19:22 +0000
Manifest next update:     Fri 29 Nov 2024 23:19:22 +0000
Files and hashes:         1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: PTwUroKg/BfzobiGymEBEIwNoayqUjIgAEqqgkJx1S8=)
                          2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Nov 22 23:19:22 2024 GMT
            Not After : Nov 29 23:19:22 2024 GMT
        Subject: CN=6741117a-37af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:89:96:0d:3b:5b:bc:9a:6c:50:58:a6:93:
                    7d:29:7c:1c:83:41:96:59:d5:74:ed:9f:fa:af:9c:
                    fa:64:c7:45:d8:23:ca:80:28:ff:54:2d:d7:40:75:
                    3c:d0:49:ef:c0:30:b4:bf:2c:1b:19:b0:a1:67:6c:
                    cc:51:f2:62:01:74:91:bd:8b:45:41:82:ce:24:b8:
                    f9:9c:bf:ed:6b:41:31:7d:6b:17:5f:d5:57:88:b8:
                    98:bc:12:4c:c8:d7:3d:dc:13:20:7a:bb:b1:5b:42:
                    1f:34:9d:b0:7a:3d:38:e2:5a:79:8b:9f:c2:4f:59:
                    c1:34:e5:40:0c:7a:c9:4e:a8:f4:32:54:ae:18:12:
                    4e:ba:a2:f4:c0:9b:23:67:62:b6:c5:77:97:14:0c:
                    05:dc:62:7b:15:3a:e7:92:27:f5:ef:6f:01:f6:41:
                    56:50:8b:4f:76:26:d4:d1:90:83:14:5e:c0:1d:21:
                    86:df:2f:62:ef:3b:24:ad:7c:03:08:b2:de:a7:5e:
                    2f:8a:aa:22:25:e6:a1:8c:64:06:94:70:e7:78:31:
                    bb:79:c3:24:c4:85:8f:13:f1:cf:41:f8:bc:8e:a4:
                    c0:35:28:95:05:ca:24:bc:d7:2a:70:63:5d:80:4c:
                    62:bc:f9:cd:3d:c6:6a:b0:3c:44:95:38:bd:f2:f7:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:AA:D8:1A:EE:F9:42:A1:21:89:09:73:A6:0D:AF:9C:6E:6D:E6
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3f:2f:b4:fe:59:5d:b0:31:4d:15:bd:93:bb:20:1b:35:1f:
         94:0f:4b:ed:a5:6d:57:dc:2f:fd:88:5f:b3:8e:02:87:06:6e:
         51:52:8e:82:fc:07:3e:f1:e9:09:6e:d7:56:70:ef:e4:a4:13:
         ac:4f:25:1b:2c:b6:cb:e1:ee:81:e6:1f:75:00:dc:d4:fe:13:
         81:75:c4:f6:32:f4:f9:4d:69:a0:b7:63:de:7e:69:91:49:cd:
         69:c1:93:1a:4f:68:a2:a5:f0:f5:4a:d2:03:4f:24:c3:1d:93:
         4c:c0:99:b5:ab:aa:6b:25:7a:05:20:14:0b:16:1d:c0:f3:7c:
         fe:d2:a4:de:87:75:e7:bb:76:77:25:6b:53:cb:6b:b7:37:0a:
         67:0a:4b:db:37:b9:01:80:39:39:52:a7:13:2e:8f:bc:fc:80:
         07:97:a6:b3:4b:2e:b8:81:67:03:5b:8c:4c:05:91:5e:bb:1c:
         d7:d3:0b:01:e2:c7:3e:42:17:8e:7b:8a:95:44:81:b7:51:2f:
         06:ea:51:8e:90:69:f6:6e:f4:76:0d:30:1f:bf:e9:3c:c1:bc:
         a0:90:d0:f9:6d:6c:01:c1:94:48:32:e0:92:75:f8:1a:8b:76:
         61:db:ac:9f:76:3b:a3:66:d8:27:75:6c:62:4a:8a:a0:89:2a:
         f7:b9:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org