Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
File:                     WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json)
Hash identifier:          xqPheiR+pc/YbKAwdeH4mINoS8F2ztzFiCmmivsWCNo=
Subject key identifier:   1F:32:56:EF:A2:8B:A9:21:5F:A7:59:65:AD:B0:98:04:A0:57:E6:6D
Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
Certificate issuer:       /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
Manifest number:          06
Signing time:             Thu 21 Nov 2024 06:17:15 +0000
Manifest this update:     Thu 21 Nov 2024 06:17:14 +0000
Manifest next update:     Thu 28 Nov 2024 06:17:14 +0000
Files and hashes:         1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: n7higddhQFYrZEB2ZmzryQ6LiUqp/Cn2ypVcOPIdgwQ=)
                          2: D104C618A4B511EFBA73001BC4F9AE02.roa (hash: CuyOcZ0MuPuNPZ5rINAnGA4hE1Y4mvsuj4q4DxHyxl4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
        Validity
            Not Before: Nov 21 06:17:14 2024 GMT
            Not After : Nov 28 06:17:14 2024 GMT
        Subject: CN=673ed06b-9074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:7a:6c:3a:ac:54:e9:e5:e1:49:50:79:3f:
                    d8:57:b6:34:52:19:45:1f:0f:7b:ce:67:0c:17:c0:
                    b0:08:72:af:c4:7e:8e:e2:0b:73:20:fb:93:a4:44:
                    31:04:f2:4c:fc:48:2e:a9:c6:38:89:dc:bb:f9:9d:
                    f0:72:7c:88:98:d7:cf:d0:c0:45:08:d7:32:3e:da:
                    bd:f1:25:a0:4e:74:34:6f:b4:db:27:39:11:b2:46:
                    9b:20:36:32:f7:7f:69:a7:d0:7f:af:bc:71:52:f5:
                    94:73:e6:74:96:ef:db:d6:69:1f:70:97:63:d0:6a:
                    9a:50:95:98:83:ca:44:55:3f:73:20:43:8d:f0:ae:
                    e7:24:3d:55:3f:03:15:5a:e5:00:89:a7:8e:f2:61:
                    8b:76:10:5f:11:21:a4:40:d9:79:15:80:ef:58:5c:
                    03:db:8a:80:1a:b6:cc:f7:cb:0b:c4:8e:40:b6:1e:
                    40:29:2e:04:88:8a:b8:ee:25:2c:7e:f8:58:7a:8e:
                    85:3c:e3:30:5d:e2:46:0d:2a:3d:69:b1:61:8f:bd:
                    02:ea:fe:4d:5b:0a:16:fc:61:b0:eb:66:87:42:81:
                    88:f8:cc:e6:62:bc:a2:e6:1f:ed:aa:a3:79:3b:f8:
                    26:07:d0:e9:34:4a:aa:40:9e:f0:c7:3e:28:21:7d:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:56:EF:A2:8B:A9:21:5F:A7:59:65:AD:B0:98:04:A0:57:E6:6D
            X509v3 Authority Key Identifier:
                keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:3e:1f:c6:c2:59:8e:e4:f1:cd:e2:b8:69:0e:71:6e:7a:
         a6:29:36:d8:50:0c:93:47:5c:46:3d:61:00:56:ad:42:1c:fb:
         26:f5:7d:97:0d:6e:83:4a:f8:ed:68:00:b2:26:9b:c1:cf:25:
         df:8b:0b:00:55:16:3d:9e:e9:00:98:90:36:9e:a2:c9:c4:b1:
         c2:e1:7d:66:20:ea:ef:0d:d5:ce:c0:b6:5c:75:5d:65:b6:a0:
         8e:35:ef:c6:49:a2:a0:e8:4e:52:6f:5d:f0:18:9d:1a:f9:6d:
         66:e2:32:a2:0b:06:8c:71:9f:8d:c6:bb:85:81:b2:9c:54:ac:
         9c:21:e3:09:c9:a0:0a:30:00:5a:c7:0a:c5:43:df:04:f9:1d:
         fa:9a:fc:73:2e:e9:a0:32:ef:93:8d:ac:a1:57:e5:f1:37:ae:
         da:a9:bb:9c:b0:39:c3:81:c3:e3:69:fa:b1:21:9c:9c:7c:7e:
         a2:43:d4:7b:6e:a6:c0:cb:8e:b3:1c:d1:8f:37:ec:e4:d7:b5:
         54:83:45:55:bb:1d:7f:d7:ae:fb:ad:9f:bf:1d:8d:02:d0:bb:
         bc:bd:53:71:49:36:c1:17:ec:56:a5:f6:d2:75:71:84:2a:db:
         2e:49:09:56:0f:b5:a7:13:0b:d7:9c:ae:82:20:4e:c1:5c:82:
         1e:e7:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org