Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
File:                     WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json)
Hash identifier:          UVC2e26wm17INevC9J5fxe+5XYmmEK3vOK8r5ZU9I5U=
Subject key identifier:   99:A1:9E:8E:20:8D:9D:D1:C6:FC:F3:C4:A5:6A:67:13:28:C4:E2:4E
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Certificate issuer:       /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
Manifest number:          B1
Signing time:             Wed 15 May 2024 06:41:16 +0000
Manifest this update:     Wed 15 May 2024 06:41:16 +0000
Manifest next update:     Wed 22 May 2024 06:41:16 +0000
Files and hashes:         1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: xL4SXJdQfRILUDkz8zRyvLFJdy/vtbtka0wqgHA2CW4=)
                          2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: CtHJodJQnL5Xz0yuYtNWAz2VQ1bux6VI2UVz4UoYjHI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
                          rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
        Validity
            Not Before: May 15 06:41:16 2024 GMT
            Not After : May 22 06:41:16 2024 GMT
        Subject: CN=6644590c-de63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:31:d4:d8:39:27:dd:94:6f:2b:3e:1d:32:
                    34:e8:83:71:49:6e:7a:1e:64:f8:69:4f:98:6f:bd:
                    eb:04:43:6f:98:a5:f8:77:70:97:19:e3:a5:bc:b3:
                    62:ce:12:7c:ce:42:7f:cc:5b:a3:78:b5:11:26:f9:
                    94:d9:94:17:f1:69:13:3e:70:cd:42:78:fb:e4:68:
                    ed:57:5e:be:84:7b:42:16:18:6e:24:16:e3:db:91:
                    2a:32:f7:23:51:80:2b:53:c4:36:38:d1:e4:a0:dc:
                    c4:c8:71:0c:1d:8e:7a:4c:ee:cb:cf:77:c1:37:f2:
                    03:76:73:25:ba:c7:61:8f:d7:3d:ee:d2:55:f0:1e:
                    10:6b:9e:f3:71:57:93:c2:50:51:30:ff:24:e1:ef:
                    35:8a:d2:f8:e3:76:0b:f9:c6:6d:79:88:ff:c5:26:
                    0f:47:97:58:8a:33:16:bc:bd:22:5e:6b:63:b3:7c:
                    a0:28:cc:06:c8:18:ad:09:1d:ae:23:34:c6:06:83:
                    d1:e3:63:0b:f9:ac:ef:4f:b8:fc:06:17:0f:ae:c9:
                    c0:40:b3:08:c4:be:d4:d8:77:d7:fd:fa:95:db:ec:
                    cd:fc:31:c7:19:3d:a7:83:23:91:64:5a:3b:f1:63:
                    12:e1:be:68:ca:96:c2:fa:f7:57:ec:99:26:54:34:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A1:9E:8E:20:8D:9D:D1:C6:FC:F3:C4:A5:6A:67:13:28:C4:E2:4E
            X509v3 Authority Key Identifier:
                keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:95:cb:3c:e8:6f:66:ea:0f:b9:46:cc:41:cd:57:87:e4:
         f1:17:c3:70:cf:b5:bf:b4:dc:ab:2a:4e:a7:ca:69:96:0b:05:
         5e:f3:01:2f:80:bf:5c:b4:51:b6:56:43:8a:db:38:26:fc:64:
         de:2f:76:aa:09:23:c1:01:b4:3f:ce:80:e6:62:d3:d9:1b:38:
         41:3b:f4:71:9a:f1:0b:ce:c8:6d:72:5e:a5:4c:a4:bb:80:55:
         13:bf:94:6a:f5:fd:5c:8e:a3:3e:5c:d9:93:40:c3:37:47:d7:
         d2:c8:95:a1:6a:4b:08:98:ec:88:7e:fa:b7:04:cb:dc:3c:fd:
         54:d0:0f:f1:37:c8:fe:04:4d:4b:4d:bf:90:10:7b:57:61:5b:
         d5:5c:ba:10:ed:6e:44:63:97:f7:32:f9:08:37:8d:fe:e1:ea:
         44:5a:eb:ec:f3:c1:a1:5d:de:aa:33:a7:df:78:89:2d:e2:b9:
         7f:a1:8c:d0:a2:cc:c6:4a:57:4d:da:e0:7e:3a:3a:77:df:6f:
         c6:15:9a:c5:e6:f0:9f:36:a1:e5:c2:d8:0e:cb:59:f4:3b:3d:
         14:d9:8c:6b:ff:50:bf:4c:bc:83:db:39:76:89:ae:9a:d1:fd:
         8d:30:00:9f:ad:39:91:e1:d9:49:13:88:e2:5b:5c:d0:57:b8:
         db:92:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:14 2024 by rpki-client on console-ams.rpki-client.org