Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          2Bc9u//GJtEk3ysgH2U1h3L/14HrztfR2F6R/H/ycxQ=
Subject key identifier:   AA:8B:97:9B:A7:50:4C:55:D6:9E:25:2E:07:F7:93:6A:2F:60:2F:B3
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          33
Signing time:             Mon 25 Nov 2024 05:32:47 +0000
Manifest this update:     Mon 25 Nov 2024 05:32:47 +0000
Manifest next update:     Mon 02 Dec 2024 05:32:47 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: Bk+PAZSzEyKssFKyWiCIqizCnLzrxAmTqvcGmv4huVQ=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 05:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: Nov 25 05:32:47 2024 GMT
            Not After : Dec  2 05:32:47 2024 GMT
        Subject: CN=67440bff-fe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:35:38:ca:44:82:a1:50:73:d4:2f:fe:27:
                    b4:b1:c0:c8:9e:82:e9:88:eb:ec:9c:1b:50:0d:b3:
                    60:08:4d:88:b2:68:cd:0a:7f:32:46:38:32:9c:2d:
                    03:7c:93:12:04:33:88:ca:f7:a7:f2:d8:27:36:a8:
                    1c:bb:8d:24:fe:87:e1:85:44:e0:14:31:8f:7c:2c:
                    af:e6:f8:d2:f7:0b:dd:ba:96:3c:2d:0f:4f:98:ee:
                    2b:66:8c:6d:51:3b:78:c5:3d:f9:a7:26:0a:f9:a4:
                    c7:e2:09:fb:e1:02:4d:cb:33:e6:f4:37:aa:1d:f7:
                    cd:93:df:f6:23:02:a7:88:96:43:f0:ed:71:91:a6:
                    f2:9f:78:1b:cd:76:17:ee:68:96:fc:c7:01:44:bb:
                    15:a9:2f:22:d7:31:0a:db:31:04:d1:b2:a9:3b:11:
                    b3:2e:a2:73:38:53:72:f1:2f:dd:dc:cf:36:b7:eb:
                    1d:73:e1:0d:4b:dc:4d:5a:e2:25:f3:87:f4:28:d9:
                    10:60:d8:15:4a:aa:87:43:ca:47:50:90:9b:89:4a:
                    41:6d:d2:72:c5:cc:0f:6f:00:d2:8d:f9:9a:52:7d:
                    89:63:2f:84:68:6a:a2:aa:30:59:fa:0a:28:c9:38:
                    4a:1e:b9:76:0e:b9:27:73:3f:db:69:ca:c4:0a:e5:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8B:97:9B:A7:50:4C:55:D6:9E:25:2E:07:F7:93:6A:2F:60:2F:B3
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:dd:81:63:e1:cc:33:a7:bc:5b:29:2e:da:04:8b:bd:cb:
         6c:73:27:78:d1:64:f0:ef:69:c1:c9:fa:5f:07:3a:96:22:fa:
         0f:ea:ac:b3:27:c6:3c:f4:ab:ec:01:39:20:f3:ef:c7:3d:6a:
         4e:ca:25:3c:d0:07:a6:2d:9a:40:45:76:e9:87:7f:eb:cd:40:
         8c:5b:55:f5:e7:6f:da:47:f7:a6:a9:79:f9:5c:72:9a:9d:6f:
         7f:ad:54:87:d1:79:0e:35:24:a6:c7:32:7d:f7:fd:a9:28:34:
         c9:86:ab:bc:e6:78:29:df:7b:80:e4:73:55:91:b2:2c:57:2b:
         30:88:0c:62:a5:d4:50:70:1e:b1:3e:e5:a9:a5:9d:cb:ff:6c:
         d3:b5:b8:0e:01:c2:7f:81:24:a8:9a:2b:6c:81:45:19:00:93:
         17:02:6a:ce:d4:f1:ce:c5:a9:d3:88:9c:f6:b1:be:e3:61:55:
         8b:af:13:35:13:29:8a:3a:dd:b9:6f:8e:b2:a6:d1:ac:0e:d7:
         86:f7:be:81:e8:f4:ac:f1:06:fc:f6:73:8a:e8:a7:16:02:39:
         d9:bc:2e:7b:c2:58:3a:37:8a:f9:4d:d6:91:48:2d:30:8d:90:
         9e:54:e4:5b:99:d8:36:49:e4:a3:16:1e:d3:01:62:6d:0e:dd:
         f5:aa:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:19:50 2024 by rpki-client on console-ams.rpki-client.org