Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File:                     wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier:          WfAtm5BzwYX6FbpvfvkHiseVCzjZIDWhugxou2Y61Qg=
Subject key identifier:   91:01:0C:88:19:6A:5E:55:D1:70:40:6B:8B:0D:9D:52:5F:BC:55:F0
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer:       /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number:          048C
Signing time:             Tue 07 May 2024 01:37:33 +0000
Manifest this update:     Tue 07 May 2024 01:37:32 +0000
Manifest next update:     Tue 14 May 2024 01:37:32 +0000
Files and hashes:         1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: rUQDieV47LJYsSzWdBZ43FOWegRZdP1+EP/nX5xnVm4=)
                          2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: eFPk203hg7cXo9QFRNYvARtLOQK8ggrqzsG+zT7kC6E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
        Validity
            Not Before: May  7 01:37:32 2024 GMT
            Not After : May 14 01:37:32 2024 GMT
        Subject: CN=663985dd-530e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:be:f7:35:7b:d1:1d:a9:99:01:77:69:c6:
                    e2:83:75:b5:59:8d:70:85:e4:92:4b:6e:80:3e:ed:
                    84:5e:6e:a0:bc:8c:7f:e3:f8:dc:08:a6:a3:2c:06:
                    2d:41:73:c1:ea:87:c9:05:ad:19:95:ea:99:30:b4:
                    83:ce:9b:04:e4:3b:3e:d1:0f:17:42:ea:fc:bc:25:
                    97:ec:01:11:54:03:d7:7d:3d:04:91:77:28:ca:71:
                    7b:2f:47:5c:f9:3e:bc:b2:df:03:11:79:17:26:88:
                    32:02:75:35:ba:1a:fe:23:84:d4:1d:a0:c6:92:8e:
                    ea:50:11:01:93:11:de:cb:48:80:d8:47:d8:8e:46:
                    af:af:12:2f:e9:33:4b:fd:4a:1d:19:e8:15:1c:a6:
                    db:78:88:a2:c5:92:f0:21:6d:af:3e:fc:57:e1:b1:
                    0b:00:24:92:9e:e8:4f:34:92:a4:17:88:91:d9:5d:
                    5b:7a:da:8e:38:dc:09:68:38:ca:dd:aa:d2:cc:e8:
                    c2:46:93:1f:7b:9e:70:23:f6:44:7a:42:f4:18:7d:
                    40:ae:d8:31:f9:a2:c8:70:9a:d7:e0:1c:73:fa:dd:
                    28:d2:db:11:7c:61:8c:07:82:47:66:34:a4:09:53:
                    c1:8b:cb:63:07:40:41:41:ed:6f:92:61:4a:8a:8a:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:0C:88:19:6A:5E:55:D1:70:40:6B:8B:0D:9D:52:5F:BC:55:F0
            X509v3 Authority Key Identifier:
                keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:32:b8:d2:83:6e:2a:ff:c9:e7:26:9e:2c:e4:b8:a3:53:
         c6:b8:38:2e:6a:2c:bc:56:57:ee:3e:59:97:d9:89:29:20:3b:
         1e:32:de:87:3e:42:cc:38:ee:70:1b:83:d1:1b:06:27:f8:b6:
         51:27:a5:7a:a3:cf:d9:ec:9c:25:dd:af:ec:47:20:b3:d4:61:
         f1:65:8e:9a:1e:45:ec:56:39:c2:53:6a:33:88:11:8b:8f:c3:
         3c:f0:2c:cc:2d:1c:42:a0:9d:b5:2c:54:b7:ed:20:21:bb:44:
         42:35:66:58:98:c4:03:37:97:ee:81:9f:54:bb:56:69:71:5f:
         77:19:1d:77:fc:60:96:f5:20:ae:ac:4f:5a:9d:96:f3:e5:2d:
         c4:62:15:c7:86:64:3f:4f:e5:26:e2:89:e5:4f:00:1e:5a:3d:
         52:96:ec:69:f2:d7:2b:df:ab:e7:4f:bb:c7:44:98:35:13:07:
         ae:80:94:cb:72:ce:cd:36:e7:36:40:d0:3d:5c:25:a3:b3:4e:
         56:78:05:ce:ba:5a:4c:58:7e:b1:c7:ee:0c:e2:cc:35:82:5a:
         c8:20:3a:02:c1:36:34:c7:20:b0:b0:ec:98:dd:00:07:e1:2f:
         4d:45:d3:25:a1:c3:54:c9:73:06:71:b8:e0:2e:cf:bc:73:6f:
         a8:cc:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:23 2024 by rpki-client on console-fra.rpki-client.org