Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File:                     WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier:          zUuocTmlvkygHBYPAMiDijKikdHzSykLFPpVgsCKc+g=
Subject key identifier:   7A:C2:1A:A0:DB:E6:32:85:5C:DA:F0:61:96:AD:4E:EC:FA:9A:6F:0D
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer:       /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial:       0E62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number:          0E5C
Signing time:             Fri 22 Nov 2024 17:42:36 +0000
Manifest this update:     Fri 22 Nov 2024 17:42:35 +0000
Manifest next update:     Fri 29 Nov 2024 17:42:35 +0000
Files and hashes:         1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: 7o+qHNPe2d0uoRGQdMfmFjm9G0vodu4jWLmliS8tY20=)
                          2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: kQ1ecN3du3BFvR7/Vwlq9mllQVMxIS/rTwYJnbfcfck=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
                          rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
        Validity
            Not Before: Nov 22 17:42:35 2024 GMT
            Not After : Nov 29 17:42:35 2024 GMT
        Subject: CN=6740c28c-d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:5f:b5:76:e0:a8:4d:ae:97:c3:80:df:be:
                    a4:80:d8:2f:ca:da:1f:c9:7d:28:f2:32:9d:50:b0:
                    4d:a0:4d:5a:f0:21:23:ab:e7:9c:fb:8e:68:56:3e:
                    9b:01:20:f7:b2:32:bb:da:72:e8:3c:af:3f:6f:f9:
                    4a:45:18:09:9e:c8:ac:03:6a:5f:91:2d:30:a8:16:
                    77:33:cb:c7:1e:3b:c6:e0:e0:09:52:46:84:69:f1:
                    54:7a:c0:fd:ee:69:e9:ed:31:b6:a3:7d:00:05:d0:
                    56:61:6c:2e:26:57:83:79:68:03:8a:a7:87:1a:84:
                    90:04:04:f8:b7:bd:af:50:14:20:88:c8:cb:e0:30:
                    6a:8c:2a:4b:a6:c6:77:f4:62:da:26:01:e9:d3:28:
                    b2:24:b5:87:40:0d:60:10:c0:50:8e:7d:44:8d:c0:
                    b6:1f:d5:1b:d7:fa:9e:fb:db:86:98:81:87:23:cb:
                    2e:df:af:70:f2:d6:8c:76:c0:a7:05:e6:53:3a:a2:
                    7b:88:4b:9c:01:06:3d:36:ac:90:a1:5c:75:d3:18:
                    d0:e7:9c:20:4a:f7:59:0a:e2:ba:4f:ec:d7:39:b6:
                    c7:43:c8:6b:aa:cb:ae:5e:b4:76:34:93:45:c3:d9:
                    88:0e:26:1d:2b:e2:ef:41:63:38:04:34:20:e0:52:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:1A:A0:DB:E6:32:85:5C:DA:F0:61:96:AD:4E:EC:FA:9A:6F:0D
            X509v3 Authority Key Identifier:
                keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:ba:3f:d4:9d:57:7b:74:92:2a:f1:e8:27:2c:66:2c:52:
         50:c4:d2:c8:08:9a:47:ea:4e:70:a7:53:cc:47:08:05:73:a8:
         81:c0:8d:87:e5:0b:9d:0f:d8:1a:16:db:ca:56:4b:08:5e:f6:
         70:80:5f:f3:2e:a4:40:f2:ab:ca:75:16:44:e6:fb:82:e5:f5:
         fc:55:63:e9:bc:e0:54:50:6f:26:8c:54:85:90:e5:29:1d:7d:
         fd:2c:a9:a5:cf:ce:cb:39:95:c2:67:f2:84:e8:3f:2d:13:67:
         2f:e2:9f:f5:f4:8f:fc:fb:c8:79:f5:d0:ce:91:4f:39:4b:6f:
         30:cd:ca:fb:7d:42:16:8b:b7:af:58:9a:bd:39:59:ed:18:cf:
         7f:5c:56:68:e5:02:91:a4:f0:8a:e8:73:ec:54:d2:79:e8:25:
         a1:9a:f9:45:ae:12:36:11:b5:0f:5c:f8:90:ad:79:86:79:20:
         c3:66:20:cc:2a:4c:61:46:83:3b:d0:f5:1d:5f:5a:00:12:e4:
         5b:8b:2a:0f:17:f6:94:5b:57:1b:f6:bf:dc:5f:44:24:95:1a:
         5b:0b:fa:9d:cf:d7:a4:01:82:ed:c9:74:ae:cf:05:63:e3:8f:
         bf:08:d7:16:16:3a:61:3c:12:4b:86:de:37:47:b4:f3:c8:de:
         3c:0b:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org