Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
File:                     wpOM5j17miRX6TKieulx0gcEp_0.mft (raw, json)
Hash identifier:          LiCT+xvWs0m8bRrqtT9am8kvZS0IU1ouAn5WcSU5HTI=
Subject key identifier:   0A:41:8D:8E:6C:37:B9:54:45:1A:DC:96:46:E7:B7:93:14:FC:CE:E7
Authority key identifier: C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD
Certificate issuer:       /CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
Manifest number:          12
Signing time:             Wed 25 Dec 2024 06:09:14 +0000
Manifest this update:     Wed 25 Dec 2024 06:09:14 +0000
Manifest next update:     Wed 01 Jan 2025 06:09:13 +0000
Files and hashes:         1: wpOM5j17miRX6TKieulx0gcEp_0.crl (hash: jgRUKtzS5RBruNvPBNvhqFV5bMj6XbyBIknVLv3QL7E=)
                          2: 486461F6AFD211EF96F7E025C4F9AE02.roa (hash: se6dcnf5oUUz27oGGKGs0jgaJTjerrRk/IMu7lgFuq4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jan 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
        Validity
            Not Before: Dec 25 06:09:14 2024 GMT
            Not After : Jan  1 06:09:13 2025 GMT
        Subject: CN=676ba18a-5abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:10:d4:56:a9:ca:30:ed:fb:c8:ac:61:65:
                    b9:fc:c9:44:c3:53:2b:64:1e:c5:dc:a2:66:b8:86:
                    48:3c:ce:98:de:9a:fa:da:15:14:18:fb:65:85:8c:
                    03:46:b6:07:49:69:6b:4f:01:4f:dc:a0:b5:ba:30:
                    3c:47:cf:07:e7:4a:2c:d9:0b:66:e5:9f:4c:30:6e:
                    9e:fe:e8:fe:f7:3a:3d:f0:f9:cc:ae:e3:f9:a1:15:
                    ba:be:4d:d2:67:da:4e:b4:fa:fd:4e:21:46:09:38:
                    4e:e0:e8:ad:77:26:98:9c:ad:fe:1a:41:02:9a:a3:
                    f9:7e:83:98:e0:e8:fc:ad:80:86:fb:24:ac:52:97:
                    68:73:25:58:9d:0b:ca:a7:0a:07:10:9f:99:2c:b0:
                    eb:99:a7:7a:01:17:8c:e2:73:44:12:94:7d:b6:73:
                    cf:ec:0f:69:75:50:94:25:7a:6d:fd:37:0c:44:79:
                    be:e4:77:4e:99:6e:f4:4c:3e:fc:3c:a2:c4:43:81:
                    e0:65:98:73:eb:83:a8:59:ee:9b:d1:fb:51:33:42:
                    a7:67:4c:9e:6e:52:2b:65:42:ee:7b:f4:74:e7:cd:
                    9b:98:f6:49:9f:e8:3e:b2:21:4e:00:48:66:5b:62:
                    d5:08:82:82:5e:e4:98:54:8a:cd:0a:65:1d:aa:53:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:8D:8E:6C:37:B9:54:45:1A:DC:96:46:E7:B7:93:14:FC:CE:E7
            X509v3 Authority Key Identifier:
                keyid:C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:9a:66:99:12:80:00:ed:54:e9:cd:c1:95:93:58:c2:7a:
         b8:ef:da:00:21:75:ad:0d:5d:5e:fc:14:d2:7c:9c:a7:6e:05:
         42:cf:8b:a4:9f:44:50:e5:08:0c:f1:bf:ea:ac:58:84:e8:7f:
         8a:eb:0f:5a:c6:5c:1d:01:fc:48:e8:87:41:90:c6:94:91:cc:
         18:7f:81:a8:bd:a8:09:0c:99:00:8b:b3:92:7a:26:43:c2:fc:
         eb:dc:0c:a6:81:4d:26:b4:6e:9a:17:8d:f2:a0:5f:5c:5a:81:
         db:80:4c:91:b2:1c:2a:ee:7f:2d:25:b2:a5:e0:4a:28:e1:38:
         2c:a0:2b:da:d0:74:0a:d7:2f:16:a5:df:f8:40:5f:83:54:40:
         f7:43:62:7c:97:f6:67:49:d8:c8:c6:26:f7:ca:8b:c1:58:75:
         d2:00:6d:5f:3a:64:32:8f:2c:5e:77:73:df:78:5f:a0:b6:fc:
         f0:39:0d:40:d8:86:12:68:c1:1c:a2:55:5e:2f:c5:af:6b:93:
         c3:a3:f5:fd:63:36:dc:fa:85:58:bb:18:55:cc:f0:c6:a2:67:
         6f:ed:17:e7:02:df:11:ae:26:57:77:67:ed:f4:d8:7c:03:6b:
         82:03:32:13:28:fd:a4:be:da:49:3f:4a:31:ac:07:5f:d4:55:
         8b:22:04:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QjVENjExMC8GA1UEBRMoQzI5MzhDRTYzRDdCOUEyNDU3RTkzMkEyN0FFOTcxRDIw
NzA0QTdGRDAeFw0yNDEyMjUwNjA5MTRaFw0yNTAxMDEwNjA5MTNaMBgxFjAUBgNV
BAMTDTY3NmJhMThhLTVhYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX8RDUVqnKMO37yKxhZbn8yUTDUytkHsXcoma4hkg8zpjemvraFRQY+2WFjANG
tgdJaWtPAU/coLW6MDxHzwfnSizZC2bln0wwbp7+6P73Oj3w+cyu4/mhFbq+TdJn
2k60+v1OIUYJOE7g6K13Jpicrf4aQQKao/l+g5jg6PytgIb7JKxSl2hzJVidC8qn
CgcQn5kssOuZp3oBF4zic0QSlH22c8/sD2l1UJQlem39NwxEeb7kd06ZbvRMPvw8
osRDgeBlmHPrg6hZ7pvR+1EzQqdnTJ5uUitlQu579HTnzZuY9kmf6D6yIU4ASGZb
YtUIgoJe5JhUis0KZR2qU2n3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCkGNjmw3
uVRFGtyWRue3kxT8zucwHwYDVR0jBBgwFoAUwpOM5j17miRX6TKieulx0gcEp/0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNUQ2L0Y2OERGNTUwQUZE
MDExRUY4NzJFRTMyM0M0RjlBRTAyL3dwT001ajE3bWlSWDZUS2lldWx4MGdjRXBf
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd3BPTTVqMTdtaVJYNlRLaWV1bHgwZ2NFcF8wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC
NUQ2L0Y2OERGNTUwQUZEMDExRUY4NzJFRTMyM0M0RjlBRTAyL3dwT001ajE3bWlS
WDZUS2lldWx4MGdjRXBfMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAnmmmaZEoAA7VTpzcGVk1jCerjv2gAhda0NXV78FNJ8nKduBULPi6Sf
RFDlCAzxv+qsWITof4rrD1rGXB0B/Ejoh0GQxpSRzBh/gai9qAkMmQCLs5J6JkPC
/OvcDKaBTSa0bpoXjfKgX1xagduATJGyHCrufy0lsqXgSijhOCygK9rQdArXLxal
3/hAX4NUQPdDYnyX9mdJ2MjGJvfKi8FYddIAbV86ZDKPLF53c994X6C2/PA5DUDY
hhJowRyiVV4vxa9rk8Oj9f1jNtz6hVi7GFXM8MaiZ2/tF+cC3xGuJld3Z+302HwD
a4IDMhMo/aS+2kk/SjGsB1/UVYsiBMw=
-----END CERTIFICATE-----
Generated at Wed Dec 25 08:01:25 2024 by rpki-client on console-fra.rpki-client.org