Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
File:                     wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json)
Hash identifier:          3YEd2YSdzXCnPAAuvES6f7dyaBiCFo3VT7HzvXoRGlM=
Subject key identifier:   89:D9:67:D1:2F:11:F3:5F:72:11:67:F8:5B:00:51:1B:9B:D9:FB:48
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Certificate issuer:       /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial:       0542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
Manifest number:          0538
Signing time:             Fri 22 Nov 2024 23:04:00 +0000
Manifest this update:     Fri 22 Nov 2024 23:03:59 +0000
Manifest next update:     Fri 29 Nov 2024 23:03:59 +0000
Files and hashes:         1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: 7DY5aPsXmi/N//Aos2Sor17HRuXxukfwHg4NF+lo0H8=)
                          2: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: it97aMVO7z/szOuRdoiZildMRkb16qoJyAaIBBrlycw=)
                          3: 96033290E15611EC9E14513DC4F9AE02.roa (hash: 9rUYZVVSecYKVgGZS3+LYYtxh4AnVM4o9EV4HsZiQko=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
                          rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
        Validity
            Not Before: Nov 22 23:03:59 2024 GMT
            Not After : Nov 29 23:03:59 2024 GMT
        Subject: CN=67410de0-c739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:ea:cf:91:8a:a8:e2:8e:43:58:2c:6f:c7:
                    af:63:27:59:b4:ef:3d:83:93:06:82:b0:73:66:dd:
                    e9:0e:3d:a2:8d:ae:bb:ff:31:20:bd:e8:09:58:10:
                    7e:00:43:5c:09:4f:5c:4f:fb:6f:6e:c4:ee:01:86:
                    a7:13:82:05:c1:e2:76:ad:07:5a:84:43:e8:cc:8b:
                    8c:76:d1:90:52:48:6f:ef:53:c5:54:c5:22:03:e0:
                    1d:6b:7a:bd:15:89:e1:c3:3f:85:cd:62:62:f5:81:
                    d4:02:cb:d7:13:16:d7:44:fb:7c:57:a7:79:4d:aa:
                    14:bf:75:40:85:85:13:aa:58:3a:10:f9:b2:ea:0b:
                    c2:11:b6:63:88:c2:36:a9:c5:b0:63:6a:cb:db:e4:
                    1f:9f:5f:b6:d8:8d:60:ec:d4:a7:83:46:4f:60:17:
                    e2:25:39:a1:ba:7e:8e:bc:d1:c8:2a:56:59:07:12:
                    04:44:14:39:79:45:32:68:9a:4c:20:9a:e1:10:a1:
                    76:7c:bd:14:b0:1c:d4:c3:d3:16:1e:4a:b8:ed:16:
                    fa:a9:43:01:3c:51:c9:8c:42:68:b5:4d:7e:1b:f1:
                    9a:2f:b0:bd:78:41:af:ad:11:25:b3:0b:d0:fe:77:
                    ca:f2:32:ec:3f:1b:4d:c8:0f:72:50:fd:92:aa:12:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:67:D1:2F:11:F3:5F:72:11:67:F8:5B:00:51:1B:9B:D9:FB:48
            X509v3 Authority Key Identifier:
                keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:04:9c:95:60:76:14:32:77:ad:c1:8d:f9:eb:6b:46:64:
         6d:55:f3:03:06:22:22:af:82:98:f4:c2:c5:8c:b3:9e:bc:4c:
         fe:e0:6d:ee:15:aa:ca:24:7f:a4:96:30:51:14:48:0a:61:41:
         0e:d3:49:68:b9:45:64:c4:75:76:e8:9a:d5:7e:5e:5d:fc:a1:
         09:fe:7e:8b:7b:02:88:10:0f:9d:27:98:d6:01:ae:4d:3a:39:
         a3:84:63:c7:a8:53:c7:3b:3e:cb:65:51:4d:a7:3d:17:d5:ad:
         84:dd:fe:5c:57:41:ed:40:96:46:55:66:ad:0f:ff:50:47:cd:
         d6:c9:59:6e:0a:78:3e:bf:9b:02:2e:6a:4a:88:74:6a:81:5f:
         60:8d:71:28:0d:bd:95:10:5f:f8:6e:e5:14:68:66:8e:0d:86:
         85:03:61:33:01:30:5e:d5:19:ea:8e:1e:48:6a:b5:26:7a:05:
         7c:d9:82:0a:95:71:55:22:ba:e4:ac:c7:a7:bd:59:a0:c8:e7:
         ec:54:a7:45:c5:bc:47:ab:3c:d6:93:99:6f:8b:74:09:c9:4b:
         91:cf:7c:0f:82:44:39:ef:94:a2:09:87:65:52:96:58:7d:6e:
         3d:0f:1b:32:79:78:bd:88:f0:cb:1b:4b:3e:30:5f:28:da:b5:
         b1:25:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org