Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File:                     WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier:          vKRXM/XpnnoNqfPJkoc6qvpimT4ii8gixst7TZ5qARg=
Subject key identifier:   0C:F5:62:11:90:BF:88:EA:30:DB:6B:BF:97:0E:26:6D:85:08:51:B9
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       1308
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number:          12E7
Signing time:             Wed 20 Nov 2024 14:57:35 +0000
Manifest this update:     Wed 20 Nov 2024 14:57:35 +0000
Manifest next update:     Wed 27 Nov 2024 14:57:35 +0000
Files and hashes:         1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: K0zzleZ5vC6EkVqzkVT8jS5Vhg623NwNi6gl2iPky58=)
                          2: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: aKhRdtJmaNOhR8gGmXyz52Y12otJGS1izbDkyoRgHFs=)
                          3: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: PAQkZZ3jUKMhKKWzlauMDLdfLxF+5ct2efz+amPISSA=)
                          4: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: 2yJ7kFYTJkf50U0uBqpDGHxgNhUCgO6DtJXDA60CFgc=)
                          5: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: v4A3aOGLqFfdel9id2hB6A+DdEXFsTsaUabYRHW1Kqw=)
                          6: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: Abdzbuu4OBM5C0vYjquJpKGR1irSfmaZVGnBXOhDHT4=)
                          7: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: hwDcahhNih+FP/MevD5QsAbn1+ZwNDSsZI1umu8nvg8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4872 (0x1308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Nov 20 14:57:35 2024 GMT
            Not After : Nov 27 14:57:35 2024 GMT
        Subject: CN=673df8df-6392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:dc:76:38:32:1a:79:9d:27:35:56:b0:7e:
                    86:28:16:02:cc:05:fb:16:25:06:f5:74:47:8c:b5:
                    81:72:8d:54:f7:f1:16:cb:49:43:7e:27:5e:a4:11:
                    49:99:cb:46:89:df:55:2a:26:6d:1c:8f:0d:f6:b3:
                    67:22:f2:51:58:84:44:fd:bd:a6:f5:02:e6:25:da:
                    e5:8e:0b:8c:cd:29:a5:fe:64:de:1c:8e:77:c5:ac:
                    24:7f:ee:fa:43:49:02:95:4c:e8:47:f9:36:44:9a:
                    73:ed:df:41:2c:92:8b:d5:64:a4:b3:e0:e1:42:44:
                    ce:20:25:4a:aa:8f:7e:a2:da:95:81:67:10:27:28:
                    76:c9:cf:e7:eb:24:0e:a3:a3:12:8b:74:88:8b:ec:
                    ab:34:fe:61:bb:48:0b:5b:c6:7d:d9:cc:85:39:81:
                    f7:95:21:65:d8:77:af:17:36:31:e6:26:72:8e:b1:
                    43:b1:22:4f:2d:a1:b4:65:c3:dd:e3:12:78:aa:82:
                    8a:46:92:13:2e:e1:e4:e2:15:1e:40:f4:77:33:eb:
                    b1:be:ee:f0:0c:10:48:fd:76:6f:c7:f2:24:12:fd:
                    ca:52:50:8c:71:d9:27:8e:2b:ae:f2:c6:c8:be:0d:
                    ff:d2:81:99:1a:1f:d6:09:6e:4e:ef:2d:80:76:ea:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:62:11:90:BF:88:EA:30:DB:6B:BF:97:0E:26:6D:85:08:51:B9
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:cd:59:f5:c6:a6:de:11:47:b8:31:01:96:7f:af:f4:ce:
         bd:85:49:74:f4:ae:dc:6c:35:1e:c0:41:5f:a0:e4:37:cc:5c:
         f0:70:d8:bb:a1:83:59:56:87:be:f4:33:7c:7b:1b:41:4e:2d:
         20:c9:7a:e4:a1:ea:cf:d8:6a:88:34:38:e2:42:05:5e:d7:40:
         b6:f0:2b:61:aa:2b:d6:4e:a7:60:87:b7:6b:8f:15:1b:7a:ac:
         39:15:92:27:cc:d9:2d:94:d6:fd:51:bd:08:99:b8:02:8c:e6:
         f4:d6:2c:7c:48:a1:f0:a3:c2:8c:80:b6:c5:8a:dc:85:9a:ee:
         de:d7:7a:94:8b:bf:69:a8:ab:c0:fb:50:f1:31:03:77:42:1c:
         40:7c:b7:9d:bd:2b:17:5e:6a:dc:c8:84:5c:46:68:67:f9:7e:
         3e:4e:7a:48:93:24:55:d3:07:1e:4d:83:70:7a:40:99:63:78:
         58:a8:3c:e0:94:7c:c4:f6:a0:2c:e3:92:c3:a4:7f:8a:a5:b8:
         3d:24:c6:72:b9:ee:c1:a2:58:5d:2e:48:0b:3d:a6:c0:d3:8d:
         2b:30:3c:fa:2a:4f:e9:23:cc:27:af:68:a6:5a:a9:fa:f8:b4:
         30:a2:c3:1b:2a:31:63:a5:32:67:aa:f7:d0:ff:f5:66:d1:70:
         42:b3:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:25 2024 by rpki-client on console-fra.rpki-client.org