Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
File:                     Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json)
Hash identifier:          q0cCOAkv9XRkg9PzT04tMkzjbse6VaiVkD64nKuonSY=
Subject key identifier:   68:D8:4D:B1:14:1B:49:75:82:25:A2:7F:EA:A7:C6:9B:5E:7D:7C:5C
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
Manifest number:          05C7
Signing time:             Fri 17 May 2024 00:59:56 +0000
Manifest this update:     Fri 17 May 2024 00:59:55 +0000
Manifest next update:     Fri 24 May 2024 00:59:55 +0000
Files and hashes:         1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: Glxe+aT/zE0HyO5LFnxuIYYmoxOBEnquwcUZDWyNXss=)
                          2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: ZfqL0mekqMSkpT1JFuTMXYl9KofA+Q6YfWwZ2fBHwV8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: May 17 00:59:55 2024 GMT
            Not After : May 24 00:59:55 2024 GMT
        Subject: CN=6646ac0b-d957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:04:51:32:95:ed:c6:5b:dd:9c:48:24:55:
                    bd:8d:1d:56:82:0c:b9:13:17:42:27:5b:13:ef:a2:
                    0f:72:e8:52:18:e5:60:78:db:39:c6:30:36:3a:c4:
                    2d:4c:42:6e:e8:45:20:ae:15:87:32:fc:e5:21:df:
                    58:8e:98:41:2d:78:c5:a4:7c:23:87:6d:d1:d3:b5:
                    02:6b:22:85:85:69:56:cd:27:7d:e8:34:d6:42:51:
                    18:34:31:9f:72:5d:50:7c:12:42:82:58:f1:cf:6d:
                    d0:4e:4f:6a:4b:f3:f3:16:02:ef:b6:ec:ce:2d:48:
                    e2:e8:f3:78:a3:f0:47:cf:67:31:8a:49:d0:0a:59:
                    bb:d3:94:7d:a8:1a:32:92:81:61:ef:79:79:f4:88:
                    5a:9a:4c:16:75:d0:c2:47:6e:14:a5:36:79:05:94:
                    42:8e:3a:1f:e2:b4:52:f9:44:7c:f6:18:6f:d7:75:
                    39:2b:70:b3:7a:59:01:12:49:16:70:af:1e:e8:9a:
                    72:39:cf:43:6a:51:cb:b9:95:e6:2c:1c:bb:6e:e7:
                    f0:ef:0f:0c:a2:85:15:b0:4b:8c:31:3b:27:25:9d:
                    10:91:b0:1d:96:35:d7:c3:8a:db:0d:8d:53:ab:b6:
                    fe:a2:70:d5:73:6d:2d:41:fd:27:04:16:37:37:e8:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:4D:B1:14:1B:49:75:82:25:A2:7F:EA:A7:C6:9B:5E:7D:7C:5C
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:34:a9:d8:7e:b2:b7:45:eb:b6:18:2d:f5:a5:29:cc:e7:
         93:23:c6:ec:22:16:7a:d5:86:a8:54:16:1c:4c:3c:54:18:43:
         e2:77:88:52:68:71:53:f5:cc:5b:93:82:20:d8:c8:2a:b0:21:
         02:71:72:79:b8:85:8c:f4:20:c0:f3:3a:1a:6e:6f:f3:36:4c:
         f6:dd:8e:27:43:17:1c:53:1f:a3:19:b0:15:dd:1e:ef:99:11:
         1b:1c:57:6c:8b:0d:d6:fa:8e:7e:4b:c0:87:ca:c8:9b:07:86:
         4c:62:fd:8a:45:9f:15:4b:68:0b:52:53:81:63:df:4d:a7:b9:
         55:9b:2e:58:aa:4f:0a:c7:78:ff:79:58:37:0c:35:c8:1b:8d:
         9c:9f:3d:d3:99:fc:9f:85:94:f7:8f:eb:38:3e:e0:4e:07:9d:
         03:e4:37:81:71:09:b9:af:17:cd:70:5d:35:09:90:3a:79:69:
         5d:ae:d7:49:54:fc:fe:26:20:e0:07:cc:1c:2d:25:bd:75:96:
         32:0f:b3:60:d9:eb:ad:c7:1a:7a:3a:ef:6f:72:19:8f:fc:58:
         2f:1f:d6:e5:f3:90:8f:57:ef:7f:fd:a1:05:23:75:9d:1f:b4:
         54:1d:86:6e:14:36:ab:b1:4d:a3:5b:eb:e2:57:17:b9:8b:5c:
         30:6e:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:42 2024 by rpki-client on console-ams.rpki-client.org