Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
File:                     WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json)
Hash identifier:          VNL7RRq4J+PHZRAWcAEAmGYY+QlSopG2URiLZEisPTI=
Subject key identifier:   C6:4D:C2:B2:02:23:09:7A:CE:8D:7F:6E:62:25:7F:4E:6D:2A:E0:B3
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Certificate issuer:       /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial:       0931
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
Manifest number:          091D
Signing time:             Wed 20 Nov 2024 20:02:38 +0000
Manifest this update:     Wed 20 Nov 2024 20:02:38 +0000
Manifest next update:     Wed 27 Nov 2024 20:02:38 +0000
Files and hashes:         1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: OB4m0dCb7ZKhgrTgyb7XfDxbndz02PmtaK3cWNwHoCo=)
                          2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: rU8ueRHigkcnrboSiyuAgDPtglpiwxpoV+xUGO9FxD4=)
                          3: 7C3B57D48FBE11EA9797847DC4F9AE02.roa (hash: tVnphRRZgGFSH92354sv/OpGtYFdnNRhky6OfyETCg4=)
                          4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: Y60lVXZCMvlg24lDH++SKV1ufImtIdM82ov4PLfGH4o=)
                          5: 7CD5A60E8FBE11EA9797847DC4F9AE02.roa (hash: 0N7KnyWQo6VcQUYOyNzJ4ZYibJk8iB5HaQ5JSpbobWM=)
                          6: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: ccG1BUs0i4CV7gjyI57tTXWxoo2ZO3TQ4gdTjDhcm5U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353 (0x931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
        Validity
            Not Before: Nov 20 20:02:38 2024 GMT
            Not After : Nov 27 20:02:38 2024 GMT
        Subject: CN=673e405e-98c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:ee:38:3c:72:a4:78:aa:57:8b:a2:f7:50:
                    12:7a:39:1d:45:17:dd:d5:2c:c5:3f:67:55:50:c9:
                    39:53:79:f7:b3:b4:4a:24:7e:89:75:4d:98:6d:6d:
                    d3:64:0e:71:74:ad:b4:bb:f6:66:d4:b0:67:bc:51:
                    7a:db:39:3d:8a:b7:f6:9e:56:d2:c2:96:84:5a:21:
                    66:c0:f1:dd:fe:62:64:ed:dd:c1:a8:ba:e5:80:45:
                    34:07:8f:b4:2f:f3:64:ff:b0:00:08:0b:d7:82:ae:
                    34:10:dd:9f:bc:43:cf:92:69:0e:bb:b2:79:32:b0:
                    05:6b:88:f7:8b:85:f6:bf:89:34:33:f7:6f:4b:c8:
                    77:56:4c:c0:3a:dc:24:83:72:26:b9:1b:eb:a5:4b:
                    9a:06:d8:e0:21:b0:a3:97:2d:3e:02:ee:c1:90:ce:
                    ee:34:00:3d:97:a5:7f:69:0f:56:b0:a3:72:d1:cc:
                    65:0c:bd:4a:1f:13:45:50:8a:24:8d:b7:b6:65:24:
                    75:e9:be:93:b8:4c:fa:9a:c4:41:a2:43:43:28:33:
                    cb:55:04:98:b2:b7:11:4b:60:cd:67:3d:f6:d0:4c:
                    a1:92:29:79:41:ce:ff:e8:dd:9f:c8:3a:0f:87:ea:
                    9d:90:a9:98:cd:00:ed:94:fb:1c:b4:e3:ba:69:18:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4D:C2:B2:02:23:09:7A:CE:8D:7F:6E:62:25:7F:4E:6D:2A:E0:B3
            X509v3 Authority Key Identifier:
                keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:06:17:e5:1a:3e:f0:4f:b9:91:ec:e3:17:3a:b0:61:d9:d5:
         45:99:9d:c3:8f:b4:2a:0f:48:ee:50:b8:a4:69:ff:74:5c:9d:
         c1:ef:95:27:b2:25:55:2e:25:79:c9:e0:73:cb:74:91:f2:7c:
         1c:b5:64:9c:c0:45:0e:b6:f8:11:0e:fe:e7:52:63:c5:3b:f6:
         6c:01:9e:c2:e1:c4:00:32:07:06:46:42:54:8a:5d:c6:c8:78:
         07:0c:ad:cb:7a:36:b6:ac:b6:f3:78:b2:ed:5b:34:fa:ca:08:
         f0:85:c3:a4:f8:fa:4b:63:c9:54:9b:5b:33:6e:12:55:8f:a2:
         46:66:e7:36:4c:55:d1:bd:a3:b4:68:2b:34:10:9d:33:80:26:
         c5:15:72:19:49:b0:8f:6a:da:33:64:c7:28:30:cc:a0:50:d1:
         69:32:86:c9:64:5b:e0:03:8d:06:99:02:35:0a:9d:3f:7d:cd:
         ce:dd:d5:a3:d1:d3:ae:47:48:d3:60:a1:e1:78:64:77:88:18:
         53:17:da:95:15:cf:90:bf:d9:3d:09:70:70:69:dc:f4:0f:23:
         28:8f:95:2f:98:64:84:1d:65:22:3a:1b:e5:55:bb:a7:08:c0:
         ed:9a:4a:9a:a9:ba:34:56:f9:cf:59:30:fe:b7:17:46:2c:fb:
         dc:ce:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org