Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          xHfjkjHR6ZMg+eUF5r8pQ5FEozNui1QvclsQ021rF3U=
Subject key identifier:   F1:A3:CA:8A:6F:C8:54:D6:31:F1:CA:0B:2F:A0:23:00:C7:6C:C8:E7
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          34A4
Signing time:             Wed 20 Nov 2024 14:48:26 +0000
Manifest this update:     Wed 20 Nov 2024 14:48:25 +0000
Manifest next update:     Wed 27 Nov 2024 14:48:25 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 4mie6F/yHDZerADJYxKApreei2VI/m+Y/VgyMkS2Y2s=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: btnrujWCL3lq2Vb0/eedRuKvGzTSWA7ubFR4fMa0qko=)
                          3: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          4: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          5: E70CF0985A0511EF92608A5AC4F9AE02.roa (hash: EZ1VbcZHsoMz7Sd9EvSQ3My9clfOZzps00wK3EeAjnE=)
                          6: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          7: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          8: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          9: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          10: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          11: 9F7197668A6B11EF8AEFC222C4F9AE02.roa (hash: R6Lp1fgyPDXkSO/i9acilUL+p3HmjmzVmfYhojSO7HE=)
                          12: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          13: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          14: 9EAE71DC8A6B11EF8AEFC222C4F9AE02.roa (hash: u8JpCW1zxpePJtq3dV7+Y1GKZRVJ0PpXF3cCprMNaCs=)
                          15: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          16: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          17: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: Jw2jxIBnYxFTmaiPQvgGpxU9RxlNikOHjxGMOl6u2DE=)
                          18: 7D0ED1A62E8711EFB6F7260DC4F9AE02.roa (hash: vvKJfh1JIoAIuPO2bQPnOgFvK4sfYR2WIovGwxZb+IQ=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          20: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          21: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Nov 20 14:48:25 2024 GMT
            Not After : Nov 27 14:48:25 2024 GMT
        Subject: CN=673df6b9-6692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:67:39:53:e9:04:8b:6e:b9:79:4b:a2:a6:
                    cb:3a:62:62:17:ce:10:17:13:da:e7:ef:a6:52:e0:
                    b8:d9:5a:cf:12:42:e5:c5:6a:ca:01:b3:ec:a1:aa:
                    23:9f:73:c3:69:bb:16:40:c5:85:56:34:39:c0:6c:
                    3b:bf:74:b3:89:be:b4:28:1b:1c:74:8b:33:fb:76:
                    bf:bf:75:eb:47:68:04:13:54:d7:6e:92:e9:09:d1:
                    69:06:a0:45:51:d5:8b:e8:19:a0:0f:2b:36:73:18:
                    a9:3c:ef:99:1b:4b:f0:4e:0e:74:07:1d:fc:81:40:
                    91:46:1b:13:dc:2b:c0:f8:5c:74:5f:ed:9e:07:04:
                    52:8a:c1:fe:12:f5:29:ff:b7:35:a8:25:76:50:01:
                    9a:61:e7:84:be:d8:cd:46:fc:11:27:1c:bd:80:86:
                    db:40:19:f5:4e:17:f1:fa:35:48:7d:d6:71:de:b2:
                    63:7f:1c:df:84:2f:69:1f:be:a6:5e:3b:29:70:d9:
                    78:1e:7e:8a:3f:f4:a9:fb:5a:88:6e:b5:52:20:04:
                    2e:a0:0b:bd:49:99:41:ef:79:d7:e9:a0:c2:7a:49:
                    00:8b:64:74:df:c3:75:c1:76:c8:f5:b8:13:4f:a5:
                    e6:8a:4d:b3:f2:f1:3d:ba:eb:9a:26:52:b2:e8:45:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:CA:8A:6F:C8:54:D6:31:F1:CA:0B:2F:A0:23:00:C7:6C:C8:E7
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:f5:56:26:e0:11:0a:e8:eb:3f:c2:cf:d4:6e:d1:32:34:
         39:c2:9f:91:b8:1b:2c:2c:ea:b8:76:7f:b8:fc:09:29:fc:b9:
         63:a2:6d:75:bc:fb:c8:1e:1d:a4:3e:1b:37:f5:6b:e0:5d:18:
         61:cf:99:82:b9:68:b7:bf:d2:2c:af:9b:aa:d7:fa:92:7c:a8:
         ba:40:7c:87:ee:c3:9a:1a:b5:e9:fd:ff:f2:5d:3a:ea:e2:83:
         43:b5:71:67:27:8e:cb:c0:12:a0:ac:46:ce:0f:53:2f:9e:fb:
         a0:e4:68:85:c2:bd:46:28:c7:90:da:7b:ed:0b:23:3f:8e:e3:
         65:96:86:85:b0:1b:6f:2f:22:02:48:ce:9b:be:6a:f8:a2:26:
         79:ab:48:03:2a:ad:73:00:9c:84:ec:cc:28:e7:9d:df:0c:34:
         05:98:48:15:01:71:bd:1b:46:63:89:47:6e:ca:1b:17:a5:d5:
         41:ec:d4:fc:a0:17:0f:d4:93:58:e1:49:d8:1e:60:8b:a0:80:
         5a:2e:05:82:d2:eb:3b:5e:b5:1c:b5:b8:dc:be:b2:01:89:73:
         38:6c:73:68:68:9f:f8:3d:16:7e:eb:c9:bd:a4:d8:d7:12:2d:
         c2:c1:96:18:90:54:f8:34:58:0b:30:20:d3:b1:27:fa:e9:ed:
         f8:d8:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:19 2024 by rpki-client on console-ams.rpki-client.org