Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
File:                     WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json)
Hash identifier:          xyHvLzif/FR12EYnkjOjAQfK6cg9MwJF6aPF85RU6so=
Subject key identifier:   57:AB:C4:7A:48:56:2A:39:5A:AB:9F:3B:26:02:5C:34:35:2A:36:FA
Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48
Certificate issuer:       /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
Certificate serial:       1893
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
Manifest number:          29F6
Signing time:             Sat 18 May 2024 16:56:09 +0000
Manifest this update:     Sat 18 May 2024 16:56:09 +0000
Manifest next update:     Sat 25 May 2024 16:56:09 +0000
Files and hashes:         1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: RZM3XPzHc9Rbi1M8X84hjHnp5305ltntywLc6pMAR18=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6291 (0x1893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
        Validity
            Not Before: May 18 16:56:09 2024 GMT
            Not After : May 25 16:56:09 2024 GMT
        Subject: CN=6648dda9-75d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:3c:31:67:6c:0f:b1:f6:0a:22:aa:31:42:
                    6f:7a:ff:1e:af:30:94:d8:b8:b7:dc:5d:af:da:f6:
                    13:c7:98:06:56:73:63:e2:30:91:4b:bf:74:4c:59:
                    eb:fe:e1:06:64:2b:37:68:31:91:49:ea:a3:24:a2:
                    95:b0:e0:78:11:e6:4d:44:fe:4b:3e:39:5a:1d:b7:
                    a0:7d:68:af:4f:a4:43:8a:4d:17:8b:03:30:ba:c8:
                    92:d5:1d:ff:6f:a2:56:ad:6b:e2:85:0a:76:23:95:
                    16:0f:10:46:22:ce:78:c7:5e:0f:48:e6:67:2e:73:
                    69:f0:32:6e:b8:e7:9e:28:1a:0f:4b:2e:f1:a6:19:
                    5b:ec:76:e6:84:fc:1f:43:a7:82:67:5c:06:43:2f:
                    a8:1f:1d:17:3f:93:03:6b:a3:85:3a:50:ed:b7:c6:
                    ce:dd:d0:e5:6d:45:fe:f3:7b:ef:34:1c:0d:f8:a4:
                    82:9f:8b:3a:ac:df:81:19:ee:45:97:55:a7:7e:2f:
                    bd:f3:98:25:2f:b0:13:8d:ad:55:3d:73:66:be:da:
                    c0:fb:72:dc:32:e4:2c:51:72:10:fe:9c:4c:36:28:
                    85:bd:35:44:6f:57:12:43:e0:6f:bf:3c:a6:de:37:
                    ec:be:85:92:b7:dc:ea:ff:3c:91:26:af:94:d1:ed:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:C4:7A:48:56:2A:39:5A:AB:9F:3B:26:02:5C:34:35:2A:36:FA
            X509v3 Authority Key Identifier:
                keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:b0:e7:38:90:f7:9e:31:0d:4d:57:f5:16:0e:a4:87:ed:
         4d:bd:92:a5:26:18:e3:21:81:95:9d:bf:63:14:64:7c:58:66:
         74:4b:3a:17:cd:fc:d8:3a:e5:d9:07:d0:e6:d6:e8:36:fa:9b:
         19:31:f7:a1:bf:bb:a2:ed:7a:15:c9:cb:b2:3d:c9:66:2c:57:
         a1:55:ea:aa:eb:1d:fa:65:41:df:84:60:1a:17:0a:76:bb:ed:
         5c:be:df:26:50:4f:a2:fb:b2:ab:de:98:3d:db:44:f8:3f:76:
         ff:84:95:d2:8e:96:64:02:7d:43:7c:a5:00:97:ad:eb:6a:f6:
         f5:58:f8:89:0f:9d:35:ff:bb:e3:a8:98:53:82:3a:46:4f:5a:
         df:78:76:15:75:d0:dc:8f:9a:c0:6b:fc:02:4c:c8:41:b3:0f:
         94:35:c2:bf:17:8a:33:9b:17:f2:75:4b:6e:e1:14:3f:0d:95:
         90:f2:6d:d4:4b:b9:d7:81:5a:28:d5:0a:d0:5d:34:69:5c:18:
         1c:79:90:00:0a:6d:c8:54:5f:1f:e5:8c:c4:84:f6:cf:f8:ed:
         80:62:62:15:68:13:c1:3c:bf:5c:2e:7a:f5:78:08:2f:16:24:
         75:49:da:2b:dc:47:fb:1f:ac:f7:85:db:c9:f8:7a:e8:67:a9:
         4f:a7:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org