Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
File:                     WH54lgJQA6zQwpt_PymgcI9rKGo.mft (raw, json)
Hash identifier:          nm5+rdd5y3wmjBEJpK9qUp6Dfv0LAlrZ62+3kcQygoE=
Subject key identifier:   37:DA:83:EC:2D:00:83:F6:95:44:16:4F:83:C4:94:D3:D0:0C:90:77
Authority key identifier: 58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A
Certificate issuer:       /CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
Manifest number:          0717
Signing time:             Thu 02 May 2024 22:43:39 +0000
Manifest this update:     Thu 02 May 2024 22:43:38 +0000
Manifest next update:     Thu 09 May 2024 22:43:38 +0000
Files and hashes:         1: WH54lgJQA6zQwpt_PymgcI9rKGo.crl (hash: wG9cFnE7X4OpPBcw4pmoi7YZ02mXSpq2iIYKkyOmh3U=)
                          2: 909B1B4AF08211EA87323C3AC4F9AE02.roa (hash: Vl48E2A8JFjSptMCx9DeWZuXsFkH1UyVDV9qvLb1iC8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl
                          rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A
        Validity
            Not Before: May  2 22:43:38 2024 GMT
            Not After : May  9 22:43:38 2024 GMT
        Subject: CN=6634171a-3df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:89:e1:0b:1a:d7:7f:fc:ea:b6:83:68:3c:
                    6b:54:9b:81:39:2d:6b:dc:4b:f6:b2:71:23:7f:30:
                    d7:fb:a9:a8:cd:9a:9c:13:06:11:ad:2a:07:5b:68:
                    73:dd:2a:8a:ca:e5:d6:51:3e:9f:11:a5:9e:1d:3f:
                    15:c8:05:34:dd:a5:0d:fa:83:a3:8a:34:15:3d:e2:
                    30:57:d7:5c:1e:01:ef:05:2e:2f:2d:98:8d:a1:f1:
                    d8:12:97:49:5d:4b:6f:77:ea:b7:5a:3a:37:a1:24:
                    b9:6d:61:28:ea:7f:01:3b:26:b6:34:30:03:7e:fc:
                    8c:77:f0:63:3f:18:ef:03:c6:f3:54:e8:41:2d:52:
                    f2:8c:4d:b3:51:59:10:f6:18:84:2f:aa:98:13:79:
                    41:f9:11:fd:fd:48:26:a9:12:57:43:4e:fd:ea:9c:
                    8c:8d:af:70:c6:d8:64:7b:66:e6:f2:08:94:af:59:
                    1f:14:23:6e:53:b9:6f:cb:63:09:37:10:bf:7f:06:
                    72:c4:63:a4:bb:cd:c9:54:a7:bb:e9:72:5d:8e:1f:
                    85:f7:e3:6a:19:ce:4e:11:2c:1d:2d:67:c9:31:cc:
                    6f:97:73:04:60:bf:67:81:9e:fc:d2:c1:4a:d9:5e:
                    8c:ad:c8:39:8a:69:d8:32:dd:80:16:0c:a8:ad:eb:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:83:EC:2D:00:83:F6:95:44:16:4F:83:C4:94:D3:D0:0C:90:77
            X509v3 Authority Key Identifier:
                keyid:58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:af:73:1b:c9:36:d9:4b:05:a5:4d:45:19:dd:2c:93:a7:13:
         2f:49:af:30:58:4a:6c:3b:10:87:89:2b:7f:9d:0d:31:b1:3f:
         75:74:99:0f:5d:df:47:bd:b0:18:21:1e:e0:06:67:87:06:79:
         42:57:e6:02:a6:c0:ed:0a:7f:31:78:60:5f:41:49:84:5e:dd:
         c6:ee:81:6e:7d:25:29:9f:2c:7f:68:19:87:a4:84:d0:d7:23:
         c9:05:1b:64:c4:9d:f9:29:1b:22:01:a7:21:21:43:1a:78:85:
         d1:99:72:bc:13:02:ec:5b:93:39:bd:b5:b1:91:00:30:d5:0c:
         63:b8:47:f3:c1:7f:00:d8:39:c7:de:2c:23:d5:0e:04:7f:6c:
         2a:b8:8e:98:cb:e7:bf:d1:65:8d:7a:77:f4:d2:2d:64:5a:79:
         ca:40:d8:88:28:91:db:0d:a9:aa:33:95:ff:09:a0:4c:5e:59:
         bf:58:7d:8c:42:6e:bf:db:f5:7e:80:54:34:f1:3b:78:d3:0f:
         c3:95:b1:78:cf:a8:14:eb:d1:56:d1:7d:85:2b:24:af:4b:d6:
         80:13:75:1e:97:eb:48:fd:38:e8:a9:4c:39:e2:dd:2b:55:e4:
         50:29:4d:15:a0:0b:b7:84:f8:01:a4:30:71:f0:60:ab:9b:31:
         d7:66:85:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNDMTYxMTAvBgNVBAUTKDU4N0U3ODk2MDI1MDAzQUNEMEMyOUI3RjNGMjlBMDcw
OEY2QjI4NkEwHhcNMjQwNTAyMjI0MzM4WhcNMjQwNTA5MjI0MzM4WjAYMRYwFAYD
VQQDEw02NjM0MTcxYS0zZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLmJ4Qsa13/86raDaDxrVJuBOS1r3Ev2snEjfzDX+6mozZqcEwYRrSoHW2hz
3SqKyuXWUT6fEaWeHT8VyAU03aUN+oOjijQVPeIwV9dcHgHvBS4vLZiNofHYEpdJ
XUtvd+q3Wjo3oSS5bWEo6n8BOya2NDADfvyMd/BjPxjvA8bzVOhBLVLyjE2zUVkQ
9hiEL6qYE3lB+RH9/UgmqRJXQ0796pyMja9wxthke2bm8giUr1kfFCNuU7lvy2MJ
NxC/fwZyxGOku83JVKe76XJdjh+F9+NqGc5OESwdLWfJMcxvl3MEYL9ngZ780sFK
2V6Mrcg5imnYMt2AFgyoreuWvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfag+wt
AIP2lUQWT4PElNPQDJB3MB8GA1UdIwQYMBaAFFh+eJYCUAOs0MKbfz8poHCPayhq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0MxNi8yNEQzOUQ2MkYw
ODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2elF3cHRfUHltZ2NJOXJL
R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dINTRsZ0pRQTZ6UXdwdF9QeW1nY0k5cktHby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0MxNi8yNEQzOUQ2MkYwODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2
elF3cHRfUHltZ2NJOXJLR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRr3MbyTbZSwWlTUUZ3SyTpxMvSa8wWEpsOxCHiSt/nQ0xsT91dJkP
Xd9HvbAYIR7gBmeHBnlCV+YCpsDtCn8xeGBfQUmEXt3G7oFufSUpnyx/aBmHpITQ
1yPJBRtkxJ35KRsiAachIUMaeIXRmXK8EwLsW5M5vbWxkQAw1QxjuEfzwX8A2DnH
3iwj1Q4Ef2wquI6Yy+e/0WWNenf00i1kWnnKQNiIKJHbDamqM5X/CaBMXlm/WH2M
Qm6/2/V+gFQ08Tt40w/DlbF4z6gU69FW0X2FKySvS9aAE3Uel+tI/TjoqUw54t0r
VeRQKU0VoAu3hPgBpDBx8GCrmzHXZoXh
-----END CERTIFICATE-----
Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org