Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          IeJWRbS8HaExO25AIMBVeMraNVmeYtrJ3Kf97HcpeaM=
Subject key identifier:   A6:56:D9:1F:B1:34:3A:89:23:55:44:D0:7A:96:47:19:F8:E8:43:CD
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       03E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          03E6
Signing time:             Thu 21 Nov 2024 00:04:16 +0000
Manifest this update:     Thu 21 Nov 2024 00:04:15 +0000
Manifest next update:     Thu 28 Nov 2024 00:04:15 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: +UZx7o7LqKDcH7PXFA1pOU56V5Fq7KNRzHoswc/baEg=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: pcbA5T57P2MUdlC7Jx80FkjuDIgIlZMdTN8tkpoBtzI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Nov 21 00:04:15 2024 GMT
            Not After : Nov 28 00:04:15 2024 GMT
        Subject: CN=673e78ff-e7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:ce:f7:94:1f:6f:16:58:ef:dd:c9:23:c9:
                    83:d1:8d:25:ae:c4:88:e9:f6:b3:e7:5b:d4:f6:77:
                    23:ed:0f:91:47:4d:69:02:9b:0e:9d:8f:74:a2:36:
                    99:72:f2:5b:8c:bc:eb:9d:6b:f6:e7:88:9a:6f:00:
                    78:4b:39:f0:eb:ad:c4:4f:58:fe:63:c7:b7:3d:a8:
                    87:e7:8d:20:b8:a1:c4:d7:bf:5f:e0:4e:21:47:31:
                    33:74:bd:ac:ea:23:8a:79:46:d5:34:00:0c:65:a8:
                    24:fc:e7:99:cf:92:15:86:cf:31:24:b4:cd:32:5e:
                    05:a3:2e:e4:a7:f9:03:c0:2f:64:5c:f4:07:fd:0b:
                    a0:c2:dc:d6:4f:3f:24:7d:c4:b4:05:cc:3f:d0:b1:
                    35:84:29:d1:4f:ce:c1:6b:1a:47:a3:d4:bb:36:b5:
                    6f:fe:ac:b1:02:fd:e7:d4:ee:23:29:82:5a:66:4f:
                    a8:0f:9a:74:02:b9:9d:5a:2c:de:df:ea:5b:7b:09:
                    79:24:51:57:30:df:c3:16:75:03:fd:c0:5e:a2:71:
                    26:87:c9:e1:07:3f:98:c9:df:f5:0a:31:81:a2:89:
                    8a:b2:4c:5c:59:bf:18:f0:c5:47:db:20:c8:ff:c2:
                    f1:2f:e8:37:a1:e0:26:5a:f3:ee:df:e4:3b:2c:2c:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:D9:1F:B1:34:3A:89:23:55:44:D0:7A:96:47:19:F8:E8:43:CD
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:c3:6d:88:91:20:27:3f:7d:d8:12:ab:10:75:88:50:39:
         36:a0:a6:b0:2c:f6:2c:fd:b6:5f:c9:95:17:94:66:64:f5:ce:
         4d:da:32:69:02:d8:1b:61:34:1d:32:4f:f3:65:4c:b6:b6:95:
         f3:b8:60:3b:24:2b:79:f8:29:90:cc:43:f0:fe:76:96:f7:0c:
         9d:9a:d2:77:5b:68:f0:5b:36:c0:85:6a:9b:34:67:f1:89:d1:
         46:1e:39:22:79:32:45:35:71:58:46:19:2a:9a:73:d9:79:b7:
         60:0a:54:a3:ba:9c:b6:0f:86:ff:14:8b:49:aa:78:b1:a6:db:
         b2:50:4f:1d:36:d2:5e:7b:4c:1b:2d:31:a9:29:42:13:27:ee:
         52:36:34:9e:bc:fb:b1:10:d6:66:d4:4c:cd:b2:85:a6:f6:b4:
         71:44:9b:f5:c0:78:68:67:b2:1a:7b:78:e9:0f:02:45:97:10:
         ca:c3:89:aa:de:69:33:a6:c3:6f:5c:e0:40:ee:41:13:39:b4:
         cc:a8:e8:42:94:18:5d:f3:7f:24:34:24:fc:16:2c:e2:61:ee:
         71:96:6f:e9:e5:f5:d5:86:85:84:d4:71:ec:e8:c8:a6:90:15:
         b1:ed:cf:4e:76:21:c3:92:73:3d:77:9b:8f:41:83:2e:39:b9:
         1d:18:35:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0
QjFEOURBQTIwHhcNMjQxMTIxMDAwNDE1WhcNMjQxMTI4MDAwNDE1WjAYMRYwFAYD
VQQDEw02NzNlNzhmZi1lN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7+TO95QfbxZY793JI8mD0Y0lrsSI6faz51vU9ncj7Q+RR01pApsOnY90ojaZ
cvJbjLzrnWv254iabwB4Sznw663ET1j+Y8e3PaiH540guKHE179f4E4hRzEzdL2s
6iOKeUbVNAAMZagk/OeZz5IVhs8xJLTNMl4Foy7kp/kDwC9kXPQH/QugwtzWTz8k
fcS0Bcw/0LE1hCnRT87BaxpHo9S7NrVv/qyxAv3n1O4jKYJaZk+oD5p0ArmdWize
3+pbewl5JFFXMN/DFnUD/cBeonEmh8nhBz+Yyd/1CjGBoomKskxcWb8Y8MVH2yDI
/8LxL+g3oeAmWvPu3+Q7LCyvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZW2R+x
NDqJI1VE0HqWRxn46EPNMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow
VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAahMNtiJEgJz992BKrEHWIUDk2oKawLPYs/bZfyZUXlGZk9c5N2jJp
AtgbYTQdMk/zZUy2tpXzuGA7JCt5+CmQzEPw/naW9wydmtJ3W2jwWzbAhWqbNGfx
idFGHjkieTJFNXFYRhkqmnPZebdgClSjupy2D4b/FItJqnixptuyUE8dNtJee0wb
LTGpKUITJ+5SNjSevPuxENZm1EzNsoWm9rRxRJv1wHhoZ7Iae3jpDwJFlxDKw4mq
3mkzpsNvXOBA7kETObTMqOhClBhd838kNCT8FiziYe5xlm/p5fXVhoWE1HHs6Mim
kBWx7c9OdiHDknM9d5uPQYMuObkdGDVP
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org