Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File:                     WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier:          jOe0KZTWSI/Yh2oKvSYoyQ+p9OsG5PetRAkZADTvVJI=
Subject key identifier:   FB:A0:32:97:66:B2:B5:CA:5F:68:41:CF:9E:B9:8D:B8:6D:DC:0F:BE
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number:          05B7
Signing time:             Wed 16 Apr 2025 22:50:08 +0000
Manifest this update:     Wed 16 Apr 2025 22:50:08 +0000
Manifest next update:     Wed 23 Apr 2025 22:50:08 +0000
Files and hashes:         1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: vQN6U3U9kEk5HmjlFPPU8ebP+2Yb5cd/d0WNq0gy16A=)
                          2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=)
                          3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=)
                          4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=)
                          5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 22:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: Apr 16 22:50:08 2025 GMT
            Not After : Apr 23 22:50:08 2025 GMT
        Subject: CN=68003420-7999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:b0:38:5b:d2:b0:e3:3c:a8:4d:6a:33:b0:
                    7a:6c:8a:e1:9f:a2:36:4d:eb:b6:d3:98:40:9e:8c:
                    a0:f8:42:9d:a5:11:fe:11:eb:5e:40:11:80:c0:ec:
                    bb:b0:cc:f4:72:e0:ff:76:18:00:2d:46:6f:b6:9d:
                    90:31:7f:e5:9a:56:68:df:d9:62:7c:8c:15:fc:f3:
                    b9:ff:d3:6e:08:b4:96:6f:65:5c:bd:9b:8b:7d:a8:
                    d5:01:e3:92:aa:01:94:0d:40:a3:cf:c2:98:0f:2d:
                    73:db:f8:14:5d:c7:58:3e:19:cf:21:cd:88:10:e5:
                    38:ac:5a:cb:06:ff:f5:f9:a1:a4:b5:39:6a:84:a1:
                    48:0f:4a:0c:3a:6d:c4:98:a7:1e:f0:4f:6c:a8:4c:
                    bf:44:aa:ef:67:e9:aa:65:e5:af:9a:7b:41:e1:20:
                    fc:b6:a4:c9:ff:ca:60:94:af:3a:88:2b:48:06:44:
                    93:b7:48:25:07:98:c8:57:1c:3a:af:59:90:c9:03:
                    34:61:75:72:b3:2a:87:96:0f:ea:d3:2c:68:77:85:
                    da:ce:ea:56:cd:d6:93:79:85:63:2f:ec:42:79:4c:
                    c2:10:01:41:2b:b7:b3:33:c9:3f:7f:db:0b:a2:87:
                    2c:7b:4a:eb:31:f4:43:fe:ed:f2:51:0a:7b:73:b0:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A0:32:97:66:B2:B5:CA:5F:68:41:CF:9E:B9:8D:B8:6D:DC:0F:BE
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:24:60:01:56:38:be:2e:0f:0b:8b:b2:ac:dc:4f:dd:52:49:
         65:e7:85:8e:f1:6a:d0:94:08:e3:5f:8b:98:cb:69:1b:b8:47:
         4c:16:66:99:b1:73:81:85:98:40:5a:b8:3d:2c:4a:d3:08:78:
         03:4f:c0:73:34:1e:15:a6:84:fd:56:81:fd:92:24:41:88:d8:
         da:6d:4d:fa:43:bc:dc:19:1b:07:6d:03:38:91:0b:02:41:88:
         2a:26:68:34:9f:29:7e:3b:9f:75:1e:a8:0b:58:8b:3b:48:c2:
         46:20:1f:86:17:79:73:d4:7c:66:8c:51:73:09:93:b2:03:68:
         55:38:ed:e4:45:e8:46:15:f8:de:40:27:47:63:bb:68:45:dc:
         0d:17:54:58:39:bc:fa:3a:9b:0d:8b:4c:c1:d5:6d:0c:ee:26:
         0f:02:03:dc:ea:7d:cd:87:b6:36:c2:c7:13:41:00:b6:ca:f5:
         c9:45:e0:1a:e7:d1:42:a4:26:96:b6:6a:ac:2c:dd:a2:fc:67:
         69:60:6f:84:11:6f:1f:d6:6d:f5:8d:d8:93:de:ee:d7:56:9f:
         43:e5:be:a7:ba:53:12:26:bf:91:69:1c:94:30:7d:3e:3f:eb:
         cb:03:e8:0f:ea:41:21:e6:7e:04:79:f6:a4:12:4b:a0:43:51:
         d1:20:c2:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF
MjE0NERDNUIwHhcNMjUwNDE2MjI1MDA4WhcNMjUwNDIzMjI1MDA4WjAYMRYwFAYD
VQQDEw02ODAwMzQyMC03OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2b2wOFvSsOM8qE1qM7B6bIrhn6I2Teu205hAnoyg+EKdpRH+EeteQBGAwOy7
sMz0cuD/dhgALUZvtp2QMX/lmlZo39lifIwV/PO5/9NuCLSWb2VcvZuLfajVAeOS
qgGUDUCjz8KYDy1z2/gUXcdYPhnPIc2IEOU4rFrLBv/1+aGktTlqhKFID0oMOm3E
mKce8E9sqEy/RKrvZ+mqZeWvmntB4SD8tqTJ/8pglK86iCtIBkSTt0glB5jIVxw6
r1mQyQM0YXVysyqHlg/q0yxod4XazupWzdaTeYVjL+xCeUzCEAFBK7ezM8k/f9sL
oocse0rrMfRD/u3yUQp7c7DVOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPugMpdm
srXKX2hBz565jbht3A++MB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz
QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzcyQy84RUM2MTQwRUMzQUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2
M2xSaTlLR3Zod19pRkUzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsJGABVji+Lg8Li7Ks3E/dUkll54WO8WrQlAjjX4uYy2kbuEdMFmaZ
sXOBhZhAWrg9LErTCHgDT8BzNB4VpoT9VoH9kiRBiNjabU36Q7zcGRsHbQM4kQsC
QYgqJmg0nyl+O591HqgLWIs7SMJGIB+GF3lz1HxmjFFzCZOyA2hVOO3kRehGFfje
QCdHY7toRdwNF1RYObz6OpsNi0zB1W0M7iYPAgPc6n3Nh7Y2wscTQQC2yvXJReAa
59FCpCaWtmqsLN2i/GdpYG+EEW8f1m31jdiT3u7XVp9D5b6nulMSJr+RaRyUMH0+
P+vLA+gP6kEh5n4EefakEkugQ1HRIMLn
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:45:10 2025 by rpki-client