Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
File:                     WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json)
Hash identifier:          deEtmi1xe9KZ4QsW9Zb0igxUSTZ0h9FJ6S1aG7wjfaw=
Subject key identifier:   57:FC:C3:C1:50:18:1C:F0:2C:9D:0C:0A:D4:1F:2A:91:28:E7:7A:0C
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Certificate issuer:       /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial:       0B51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
Manifest number:          0B33
Signing time:             Sun 02 Jun 2024 20:09:20 +0000
Manifest this update:     Sun 02 Jun 2024 20:09:19 +0000
Manifest next update:     Sun 09 Jun 2024 20:09:19 +0000
Files and hashes:         1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: YCPg6nWOwTgL2IuGpSPmZ7rNNkxkbqge0wv8GpMjv2s=)
                          2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: FL+VVzcPFPFYFK/eeGMO2XGhtXdZWZTlmhO3w7UvF4k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 20:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
        Validity
            Not Before: Jun  2 20:09:19 2024 GMT
            Not After : Jun  9 20:09:19 2024 GMT
        Subject: CN=665cd170-4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:ae:c2:05:ab:7f:76:2a:68:96:cd:b9:66:
                    f0:2d:45:71:ed:7d:2d:5d:eb:66:af:e9:4f:a5:e6:
                    5f:07:fc:1a:c5:49:2b:97:f7:47:47:41:d2:62:f2:
                    bb:3d:e2:1e:a8:6a:33:ce:ad:79:6d:c5:31:cc:7d:
                    04:52:b7:80:14:71:05:7a:f5:81:92:35:f7:1b:af:
                    58:be:ed:bb:40:6d:8a:f3:06:db:7b:df:e4:9f:9e:
                    8f:64:a6:66:13:72:4d:8f:82:de:15:b1:94:af:12:
                    b1:75:be:ce:52:b9:5a:68:58:4e:98:18:4d:87:73:
                    75:20:88:24:00:93:2e:8f:ad:63:cd:ae:bb:42:ae:
                    3e:f6:ed:b3:13:d7:38:41:36:28:31:05:ec:2c:f4:
                    6e:ab:eb:4d:f9:08:fe:dd:78:26:35:4e:67:a3:4c:
                    8d:4f:35:de:6c:59:b0:02:38:e4:0d:fc:f4:ef:54:
                    ef:e6:0c:85:97:0f:7d:53:51:2c:a3:62:47:fd:bb:
                    2f:d8:bd:10:48:54:04:71:e8:8b:d3:6b:b4:b0:24:
                    a7:d9:57:d6:69:8e:ba:80:5c:ac:ed:92:8d:06:60:
                    de:59:1e:11:47:a7:bf:f3:7a:07:21:e7:d0:46:83:
                    b2:9a:4a:08:51:83:33:ac:0b:31:68:7d:3b:cb:74:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:C3:C1:50:18:1C:F0:2C:9D:0C:0A:D4:1F:2A:91:28:E7:7A:0C
            X509v3 Authority Key Identifier:
                keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:83:ce:ac:da:1c:b4:5a:0c:0c:bc:6b:06:39:59:28:f7:1a:
         c2:1c:6a:2b:72:d0:8a:33:fd:5b:c7:2d:c3:31:8d:e2:83:ab:
         02:86:60:12:57:69:0d:b5:a7:c1:06:bc:68:d4:1a:af:8e:82:
         13:56:61:96:be:fc:55:cf:2c:28:6b:d3:ff:37:24:c1:75:58:
         a5:e1:5d:79:64:79:14:04:13:00:0b:21:2e:aa:83:58:8b:4a:
         0d:ba:d7:29:11:c5:34:7b:d0:01:fb:4a:e1:c4:15:68:f7:08:
         2e:ac:b4:34:5c:27:07:2e:45:d8:a7:47:1b:0f:c7:8d:09:2a:
         a9:c1:ab:7f:5a:7a:c3:6d:82:79:81:11:97:df:75:e7:20:bc:
         51:c3:7e:b7:18:18:eb:93:76:6b:0c:ea:4d:a8:0c:e8:23:ce:
         dd:72:98:ad:9f:c0:c4:fe:ce:5f:1f:e4:72:85:d8:90:27:c8:
         7d:b9:d6:9d:91:b9:9a:c8:14:83:a2:86:4b:9f:fa:fb:7c:59:
         83:43:93:2b:ed:ae:aa:00:8f:d7:d1:e4:a7:29:f7:44:f7:17:
         f0:7b:ae:ba:cc:2c:56:0b:d5:29:e6:15:a1:c9:cb:86:e0:56:
         94:e0:d5:79:95:aa:c0:dd:be:2c:16:92:8f:41:46:0c:ed:5b:
         b4:c6:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:14:34 2024 by rpki-client on console-ams.rpki-client.org