Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          sHv7VoDBiZ1A+1/MsYe0rnO7qOBwVIebdW88X9qDVHE=
Subject key identifier:   21:2E:3B:7E:F8:B0:DA:91:E6:C8:F4:4E:DD:1B:E2:2B:74:5B:29:FC
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          22
Signing time:             Wed 23 Oct 2024 06:29:15 +0000
Manifest this update:     Wed 23 Oct 2024 06:29:14 +0000
Manifest next update:     Wed 30 Oct 2024 06:29:14 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: RFHnuElQ8c918n1DymiTJCeQzGU5LICpzFNA+WLdvpA=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: Oct 23 06:29:14 2024 GMT
            Not After : Oct 30 06:29:14 2024 GMT
        Subject: CN=671897bb-6456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:70:90:35:e1:c0:4d:48:77:a9:8a:64:6d:9b:
                    04:34:5c:d6:46:e4:24:cd:3a:74:76:4d:e6:80:71:
                    1a:63:11:b1:53:e2:0f:a4:9a:30:e3:5a:21:23:8b:
                    5a:82:a5:be:0c:46:68:29:ff:15:d6:c9:57:21:58:
                    f5:92:90:fa:b8:a4:11:2e:a1:40:a6:a6:99:74:20:
                    30:10:59:68:8d:a8:de:03:46:47:e7:f7:f1:cc:34:
                    eb:90:b0:a7:e2:65:6f:ad:93:50:17:95:c4:12:99:
                    c5:2f:97:af:17:e6:ee:47:06:cc:b0:fb:6b:40:0e:
                    81:ee:47:4f:43:9e:bb:3f:38:aa:68:84:07:f3:c1:
                    55:39:de:6d:16:92:8f:f5:ad:6c:93:41:b0:fb:4f:
                    c9:72:c6:17:68:b0:57:6e:6e:3f:4a:d3:ae:10:b9:
                    db:71:49:1d:28:95:cb:4e:20:da:b5:22:d0:93:88:
                    bc:78:50:39:91:63:68:0f:61:29:e6:11:b6:f4:82:
                    80:48:66:1d:dd:e8:dc:a3:60:12:3a:f3:27:1e:c3:
                    84:ae:13:01:c1:60:99:c9:6a:0b:62:b7:2f:d8:30:
                    fd:9f:86:8c:6c:f7:11:ef:26:6f:33:07:57:d5:ed:
                    ee:2a:e3:e5:5d:b5:39:1c:83:a2:e8:78:0e:d8:a9:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:3B:7E:F8:B0:DA:91:E6:C8:F4:4E:DD:1B:E2:2B:74:5B:29:FC
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:64:c4:a7:6e:d4:54:b7:0e:99:6c:10:54:a9:69:2e:ad:
         42:c8:74:b1:49:4d:e3:ad:93:cd:5b:8b:62:b4:42:84:dd:cd:
         0e:07:67:c0:52:c0:94:45:3a:81:14:d1:72:57:fc:ee:9f:b1:
         da:63:bd:30:dd:1d:65:47:32:3e:e4:a6:cb:a3:fd:2d:ce:1b:
         86:51:93:cb:09:a6:3d:60:1a:ba:71:d1:24:f8:0b:2e:70:f0:
         3a:a5:d7:46:05:66:94:26:31:8b:be:d4:6e:14:98:82:b9:da:
         85:0f:bd:2d:83:31:19:6c:59:d2:b8:3e:0f:2c:37:a4:38:8c:
         86:7e:d8:23:bb:bc:8c:b5:a4:2c:47:fb:a0:49:ae:0a:89:a0:
         d1:5c:ad:4c:cf:6d:7d:f7:2c:0e:ad:d1:21:3e:12:15:f9:f8:
         73:be:53:35:2c:14:44:49:0f:a0:a1:36:fa:f9:da:d8:20:97:
         d4:3e:0c:29:05:29:6d:84:12:f3:b6:34:b3:23:ba:02:05:77:
         18:3f:30:3a:17:71:13:32:db:83:db:f4:51:5e:4a:d9:29:7e:
         c5:95:4a:81:d9:1c:b3:08:02:2b:ea:e3:9d:8a:47:3f:ad:14:
         8c:21:3f:17:21:d1:ce:d8:10:7e:31:54:cc:36:15:a7:b3:8a:
         67:6b:11:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTNFRDExMC8GA1UEBRMoQzI5NTk3QjI1OEFENjYwQ0UwQkE3OTc1ODMwOUVCOEM1
Nzk1OTQzNTAeFw0yNDEwMjMwNjI5MTRaFw0yNDEwMzAwNjI5MTRaMBgxFjAUBgNV
BAMTDTY3MTg5N2JiLTY0NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDycJA14cBNSHepimRtmwQ0XNZG5CTNOnR2TeaAcRpjEbFT4g+kmjDjWiEji1qC
pb4MRmgp/xXWyVchWPWSkPq4pBEuoUCmppl0IDAQWWiNqN4DRkfn9/HMNOuQsKfi
ZW+tk1AXlcQSmcUvl68X5u5HBsyw+2tADoHuR09Dnrs/OKpohAfzwVU53m0Wko/1
rWyTQbD7T8lyxhdosFdubj9K064QudtxSR0olctOINq1ItCTiLx4UDmRY2gPYSnm
Ebb0goBIZh3d6NyjYBI68ycew4SuEwHBYJnJagtity/YMP2fhoxs9xHvJm8zB1fV
7e4q4+VdtTkcg6LoeA7YqUJVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIS47fviw
2pHmyPRO3RviK3RbKfwwHwYDVR0jBBgwFoAUwpWXslitZgzgunl1gwnrjFeVlDUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzcwMjhDNkM4NUYz
NzExRUZCRjM2OUU1OEM0RjlBRTAyL3dwV1hzbGl0Wmd6Z3VubDFnd25yakZlVmxE
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd3BXWHNsaXRaZ3pndW5sMWd3bnJqRmVWbERVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
M0VELzcwMjhDNkM4NUYzNzExRUZCRjM2OUU1OEM0RjlBRTAyL3dwV1hzbGl0Wmd6
Z3VubDFnd25yakZlVmxEVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA71ZMSnbtRUtw6ZbBBUqWkurULIdLFJTeOtk81bi2K0QoTdzQ4HZ8BS
wJRFOoEU0XJX/O6fsdpjvTDdHWVHMj7kpsuj/S3OG4ZRk8sJpj1gGrpx0ST4Cy5w
8Dql10YFZpQmMYu+1G4UmIK52oUPvS2DMRlsWdK4Pg8sN6Q4jIZ+2CO7vIy1pCxH
+6BJrgqJoNFcrUzPbX33LA6t0SE+EhX5+HO+UzUsFERJD6ChNvr52tggl9Q+DCkF
KW2EEvO2NLMjugIFdxg/MDoXcRMy24Pb9FFeStkpfsWVSoHZHLMIAivq452KRz+t
FIwhPxch0c7YEH4xVMw2FaezimdrEZA=
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:56 2024 by rpki-client on console-ams.rpki-client.org