Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.mft
File:                     _Whomcn-NG466Xyi7ReLPYH1VbU.mft (raw, json)
Hash identifier:          llt2yZAjnJV90Cxg2b3sk7Dy+vmVtJqB0K3xYFd4Aj0=
Subject key identifier:   C7:87:1D:A2:48:6B:A5:4D:5D:C6:E0:F1:E1:5C:78:13:0C:F9:A2:D2
Authority key identifier: FD:68:68:99:C9:FE:34:6E:3A:E9:7C:A2:ED:17:8B:3D:81:F5:55:B5
Certificate issuer:       /CN=A91527FB/serialNumber=FD686899C9FE346E3AE97CA2ED178B3D81F555B5
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Whomcn-NG466Xyi7ReLPYH1VbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.mft
Manifest number:          1377
Signing time:             Thu 16 May 2024 18:53:56 +0000
Manifest this update:     Thu 16 May 2024 18:53:55 +0000
Manifest next update:     Thu 23 May 2024 18:53:55 +0000
Files and hashes:         1: _Whomcn-NG466Xyi7ReLPYH1VbU.crl (hash: m0HDMEZoJU5fDuP8Y99IwA9FfrZZoU01A59COe7pRDk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.crl
                          rsync://rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Whomcn-NG466Xyi7ReLPYH1VbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91527FB/serialNumber=FD686899C9FE346E3AE97CA2ED178B3D81F555B5
        Validity
            Not Before: May 16 18:53:55 2024 GMT
            Not After : May 23 18:53:55 2024 GMT
        Subject: CN=66465644-be72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:42:c2:55:ff:93:f9:cd:cc:f5:b1:db:eb:ac:
                    8b:dc:37:5d:53:52:11:9b:0d:25:70:63:cc:d5:65:
                    b1:7e:1b:c2:78:f2:a7:94:cd:e9:f3:cf:1f:7c:eb:
                    f4:28:eb:4d:ea:54:f7:07:9a:e3:3a:53:ad:16:6a:
                    c2:a7:be:cd:78:97:96:31:05:8e:ed:ac:16:5d:5b:
                    ad:0e:6c:9f:e2:ea:4f:6c:bc:e6:22:2d:55:3f:f3:
                    07:2d:76:19:79:2c:91:89:9d:ed:ef:f3:c9:67:31:
                    ba:7d:1c:d4:d0:3d:dc:cd:d8:7f:5a:b5:14:b1:02:
                    cf:c5:1c:38:92:77:b5:24:b5:44:36:69:66:a0:6e:
                    84:68:94:9b:f4:cc:6d:af:84:12:f6:f0:e8:6b:a3:
                    b1:7c:e8:28:6a:2d:c4:18:c3:7d:8c:39:01:f9:b1:
                    ab:33:39:d9:71:73:07:78:75:42:2e:43:61:28:95:
                    86:77:d0:f7:7b:f5:81:74:37:96:c8:da:e3:21:c4:
                    e8:26:8c:59:83:45:b3:e5:dc:0e:29:b6:bb:b4:a0:
                    b5:49:5c:40:5e:97:42:53:90:42:6b:c2:dc:02:c8:
                    04:8d:07:06:d7:e1:e2:77:72:8b:16:9e:03:17:9b:
                    88:ea:d7:59:3d:eb:b9:8c:32:15:81:7e:8e:23:1e:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:1D:A2:48:6B:A5:4D:5D:C6:E0:F1:E1:5C:78:13:0C:F9:A2:D2
            X509v3 Authority Key Identifier:
                keyid:FD:68:68:99:C9:FE:34:6E:3A:E9:7C:A2:ED:17:8B:3D:81:F5:55:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Whomcn-NG466Xyi7ReLPYH1VbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527FB/B0EB6CBABE7911E9BEBE3374C4F9AE02/_Whomcn-NG466Xyi7ReLPYH1VbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:e7:f1:b2:79:21:dc:cf:3a:7e:76:1a:78:0a:51:9b:30:
         4d:7c:86:47:c6:65:bc:23:84:6b:84:6b:b1:fd:c8:c6:7e:53:
         80:53:a5:55:bd:64:b3:4b:00:8f:6a:ce:27:07:a9:a6:95:cc:
         21:3d:1d:4e:76:8b:d5:81:2f:b4:dc:ac:43:b8:2b:da:a0:0a:
         2b:5d:47:68:af:a9:20:a8:b6:a3:4f:48:c4:ac:5c:80:aa:d8:
         a6:cc:78:4d:97:1a:7f:50:e9:2d:a8:81:8e:4a:39:a2:9f:f7:
         6f:09:f3:63:01:5e:84:b9:60:b9:95:bf:c8:48:f2:a0:76:11:
         5a:2b:d7:cf:82:dc:6d:04:e8:2a:9c:37:c9:ac:73:9b:d8:d8:
         08:5c:6e:48:2a:f1:21:4f:a4:55:b4:5b:ea:2b:ee:ac:5f:1c:
         71:d6:a6:d3:0a:d2:df:16:e8:87:ed:31:ac:0f:28:1b:26:72:
         1a:15:55:57:c0:0f:ae:3b:f3:38:1c:47:46:86:9c:5f:b4:4a:
         31:ac:c4:07:8a:12:54:c3:23:02:59:dd:f6:d2:06:91:92:82:
         b5:4f:ff:2c:aa:cd:89:98:32:d2:83:ea:06:54:58:d0:bb:40:
         46:c8:01:ee:21:90:b5:e9:d4:8e:e9:88:f2:77:2e:be:a2:cb:
         75:c0:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org