Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          hpQVY7exRtGXxxFCDBrLxz6kIH1vgWhIf4mZINfxI8s=
Subject key identifier:   D5:20:E5:CB:61:5B:1A:64:5D:6B:D8:B0:2C:04:AF:61:BE:28:62:0C
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          06
Signing time:             Thu 21 Nov 2024 06:15:52 +0000
Manifest this update:     Thu 21 Nov 2024 06:15:52 +0000
Manifest next update:     Thu 28 Nov 2024 06:15:52 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: oVvuzHx8WBdoZzwLz+lTvCkMo+JbQEFATw3h6bVaBCM=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Nov 21 06:15:52 2024 GMT
            Not After : Nov 28 06:15:52 2024 GMT
        Subject: CN=673ed018-e65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:cc:1a:fb:e5:75:37:77:cc:b5:0e:ef:ef:
                    fd:7e:2e:b1:95:69:3a:c2:17:14:0a:44:39:9b:41:
                    67:9f:dc:37:1d:0a:a7:63:5f:b2:9c:58:5e:35:17:
                    8b:40:f8:2b:63:e7:62:65:59:cb:2e:18:93:ca:ee:
                    6d:d8:98:f6:26:d8:e5:02:57:36:7a:e5:11:48:ce:
                    76:38:df:bc:93:c0:92:71:49:95:00:d6:f6:41:e2:
                    9b:ef:14:59:37:3c:7f:81:05:0d:ff:01:28:1d:67:
                    49:67:cc:67:d4:fc:98:04:97:e0:35:54:64:66:b6:
                    35:07:a9:93:d9:5a:18:80:df:aa:e3:d8:1e:30:36:
                    6d:b7:07:fc:43:b9:57:cb:79:b5:f6:d4:de:3a:18:
                    47:23:2e:98:c8:c9:f5:98:9d:96:70:dd:4b:de:bf:
                    61:93:97:70:d8:83:fb:ee:89:08:b5:0e:ea:d1:66:
                    f7:76:25:34:98:d7:70:b8:a3:fd:19:e8:1b:67:d2:
                    c1:9f:83:57:9b:58:9e:e0:69:05:13:2c:39:3c:25:
                    b1:77:37:6b:01:76:75:48:fe:e4:1d:9e:a5:1d:f5:
                    d1:be:63:ce:4f:20:6a:ac:5a:68:45:f9:16:91:39:
                    29:20:20:aa:ac:1b:bd:97:1f:6a:b3:cb:25:19:c2:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:E5:CB:61:5B:1A:64:5D:6B:D8:B0:2C:04:AF:61:BE:28:62:0C
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:46:89:2e:97:c8:c5:bd:71:bd:02:2f:de:e8:dd:e2:60:
         c0:49:ae:85:05:68:59:2a:a8:07:3e:e7:49:22:a5:70:40:65:
         d7:d6:53:a0:86:5e:23:03:89:69:d0:c7:65:c9:a4:91:e8:9f:
         6f:95:16:41:83:c7:8a:34:03:20:42:a2:5a:fd:ae:ba:03:33:
         9c:99:d5:c3:a3:91:1b:cc:88:b4:c9:d3:2b:81:64:29:4e:cf:
         44:9d:71:3f:d2:21:6e:ba:9d:1d:6a:26:ff:2d:65:26:fe:66:
         23:aa:13:4b:08:a1:aa:7f:bd:f7:ce:ab:ba:d5:5e:7b:c3:5b:
         4e:6d:a6:7a:be:e7:8d:88:89:99:9d:58:ae:95:83:d0:70:d0:
         dd:65:0a:1c:65:4a:64:f3:c5:47:98:00:8f:ab:a9:e2:0c:50:
         ab:64:6d:b6:a1:d0:62:0f:62:dc:7e:49:92:8a:84:23:81:b4:
         da:67:75:00:93:a0:cf:29:24:16:a3:91:a5:b3:7f:31:9e:ff:
         a8:4c:84:2b:9c:b0:c1:4e:24:0f:34:18:17:e5:67:79:38:b2:
         ef:c4:c1:e8:f1:f1:13:a0:fb:89:9d:42:d1:cf:70:45:1c:a9:
         de:2c:57:28:7a:06:11:31:94:dd:6d:d6:33:1d:fc:20:db:5c:
         a5:64:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org