Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          eXu7tfSw0eawcRltF9YtcQWFg8UK84mU4Vtmq83kudk=
Subject key identifier:   A5:BC:11:44:87:D8:D0:9D:9F:9B:07:E3:8D:DB:5A:67:67:EB:95:62
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       0557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          0556
Signing time:             Sun 05 May 2024 00:56:44 +0000
Manifest this update:     Sun 05 May 2024 00:56:44 +0000
Manifest next update:     Sun 12 May 2024 00:56:44 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: VwuAazdlRsqNkrbaXAQ4c99bJL9D1g0n29uxnkQ9CxQ=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: Ft/RnLHwgz/orNjOiWOlq050h8ZqZmiyFBfY/wLPhHc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: May  5 00:56:44 2024 GMT
            Not After : May 12 00:56:44 2024 GMT
        Subject: CN=6636d94c-3cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ea:92:c5:42:b3:83:a3:76:18:3e:80:9e:01:
                    8f:2e:da:7e:68:2d:6c:6d:4d:e2:b6:0f:42:47:15:
                    c3:19:d4:09:00:34:6e:88:8a:24:fb:0e:7b:0d:d1:
                    d4:d4:52:2a:e3:19:42:e3:36:aa:36:c9:46:47:2d:
                    7c:9a:0c:f0:f3:42:59:01:a1:81:aa:6b:13:e4:63:
                    66:08:7f:93:ce:99:39:24:d5:0c:f3:69:57:58:47:
                    97:25:3e:2d:2d:b8:a9:b0:85:f8:f7:74:3b:f1:eb:
                    b7:79:c9:03:bc:88:0e:c9:3a:20:10:8d:9a:58:9a:
                    87:5f:91:73:d9:c8:41:96:13:a2:4b:b1:38:74:6c:
                    9d:2a:bd:e8:c4:6e:b0:6c:88:d9:07:fd:1b:94:51:
                    21:58:94:2e:cc:10:87:a0:45:c5:1e:f1:fa:7c:86:
                    d6:96:3d:61:07:2b:64:10:4e:4b:b3:6a:86:32:a8:
                    e1:b5:04:7c:cc:f3:90:08:41:97:0a:ee:3e:ee:fa:
                    8b:f8:f9:92:e3:7d:b6:31:a9:94:e2:56:4a:a0:76:
                    93:38:97:d8:b8:8d:c6:18:f7:bf:1d:4d:f1:d7:0a:
                    d1:8e:e4:3d:d2:8e:34:81:2d:3b:0f:07:0f:e7:13:
                    bc:94:0e:dc:7b:23:0c:d1:f0:16:57:95:36:ed:1e:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BC:11:44:87:D8:D0:9D:9F:9B:07:E3:8D:DB:5A:67:67:EB:95:62
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:ea:b3:ec:1e:f9:91:2b:12:79:b1:f6:6e:df:dc:3f:14:
         24:1e:1a:e5:5c:30:da:81:08:38:7f:84:2c:46:92:27:ab:b7:
         a8:45:55:0d:56:c9:c8:31:ce:69:b1:2a:c3:11:18:03:0b:00:
         7a:fb:3b:5b:e2:44:be:19:73:a0:25:32:b8:95:54:45:2b:d9:
         74:19:bd:3d:3d:9c:51:c2:59:2f:f9:57:4b:ad:6f:8a:7c:69:
         02:59:c5:dc:20:0f:e6:80:52:4a:82:76:18:a9:6c:15:5a:f4:
         77:d2:4e:01:b0:6d:80:1d:19:49:44:12:1f:b2:3d:bc:7c:c9:
         68:79:9a:cc:93:9c:83:b3:73:cc:8a:32:e0:82:d5:e2:6a:2b:
         03:0a:af:cb:09:8f:51:2a:c6:9a:a3:ea:18:24:20:92:8d:cf:
         68:b8:b6:b2:ed:bd:1a:d1:5f:10:72:bf:b3:7b:1e:08:8e:27:
         ee:63:df:86:d2:5e:fb:80:bd:c6:54:02:b5:37:90:9d:cd:45:
         fe:85:55:a6:9a:b3:71:cd:cc:f6:71:14:18:fc:1d:1a:67:6f:
         4b:7c:f7:c8:37:aa:29:23:c5:de:50:e6:79:6c:0f:02:1a:a1:
         d9:33:04:7f:8d:dc:e1:e5:6d:01:11:25:2f:05:1c:37:27:e6:
         bd:a8:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org