Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
File:                     wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json)
Hash identifier:          XqsO6KBkPa5D9hZDhQek9OTmYoPAbPNkeHT76rk2x0k=
Subject key identifier:   92:87:52:CC:1A:AB:07:FA:77:50:F2:FD:8E:29:5E:8D:EE:D3:22:BE
Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Certificate issuer:       /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
Manifest number:          011E
Signing time:             Sat 05 Apr 2025 04:04:22 +0000
Manifest this update:     Sat 05 Apr 2025 04:04:22 +0000
Manifest next update:     Sat 12 Apr 2025 04:04:21 +0000
Files and hashes:         1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: zPv6+mUZHOFXG1OZ9UYHmrTFr0o2ChM/AIrEkqVjGnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937
        Validity
            Not Before: Apr  5 04:04:22 2025 GMT
            Not After : Apr 12 04:04:21 2025 GMT
        Subject: CN=67f0abc6-1117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:ff:5f:ab:e1:7c:48:81:60:cb:f3:3d:84:
                    50:69:11:09:10:39:51:41:5b:ec:8d:0c:3e:5b:69:
                    52:a1:e9:3e:b5:8b:79:3c:89:f3:5e:1a:b2:38:94:
                    6d:cd:ca:c6:09:15:1f:f4:02:85:f4:4c:6a:22:96:
                    10:39:39:24:e6:dc:45:4b:29:97:f6:03:58:93:fc:
                    8c:d6:5b:01:43:ad:90:b0:bc:53:3b:a1:c4:4d:d7:
                    a5:48:91:ad:bf:fb:27:1a:e6:b7:42:3e:13:f3:26:
                    c7:b6:83:9e:74:f5:5b:b1:d2:20:3f:01:b6:9d:9e:
                    e5:bf:2d:75:a4:4d:88:5c:29:84:fb:44:4f:45:e0:
                    85:d4:1b:b2:f7:9d:89:04:19:f3:5b:d3:5a:0e:b7:
                    2f:d3:42:41:4a:47:38:6f:67:41:80:dc:52:ce:bf:
                    90:bf:47:a7:05:44:33:55:e2:e7:41:5c:2a:4b:ee:
                    3e:eb:1f:60:e6:ce:fc:56:4f:66:08:f7:b5:c6:60:
                    ee:8d:e6:28:b5:c1:ac:06:9f:f3:3a:52:98:f9:41:
                    a0:8f:8d:7a:ea:84:fe:dd:8c:0b:16:b6:56:c8:e5:
                    1c:70:73:d9:b9:49:35:9f:06:11:fd:d2:68:bb:2c:
                    2a:3b:44:2b:bb:1c:8f:17:88:57:8b:29:1d:85:72:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:87:52:CC:1A:AB:07:FA:77:50:F2:FD:8E:29:5E:8D:EE:D3:22:BE
            X509v3 Authority Key Identifier:
                keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:aa:c1:b0:86:39:bc:f9:bf:86:57:fd:6a:92:f6:fc:49:9b:
         4e:f3:00:98:fa:40:a8:8d:06:9a:76:c3:c0:ca:ef:f4:44:e4:
         b4:61:ba:fc:55:d8:4d:b8:35:dd:ee:59:3d:4c:77:20:4e:92:
         14:9d:7e:93:6d:69:31:41:76:dc:37:26:9e:7b:9c:d6:41:84:
         25:2b:5f:f0:5d:61:4a:ca:34:37:9c:5a:d9:20:fc:cf:94:d2:
         6e:1a:4d:08:52:ef:3f:07:79:3d:06:a1:2f:6e:38:a8:40:2c:
         3e:20:06:a8:78:90:87:4d:46:3c:8c:20:a8:0e:c3:cb:e8:20:
         00:46:21:b1:8b:b2:b8:5e:73:ac:52:3b:03:26:b3:36:49:6d:
         d0:1b:dd:42:49:88:05:f6:bd:b8:f1:ab:70:ca:2f:0d:b1:93:
         8c:ef:e5:d4:da:d1:15:19:66:b8:c0:1a:7b:9d:10:78:c0:fa:
         2a:a9:7d:d7:4a:06:b8:a2:51:20:2e:61:ae:30:bd:dc:7a:3f:
         a8:27:65:b3:2e:e1:34:ea:1d:ce:4d:00:69:09:e8:ab:d5:3e:
         42:13:67:5d:d7:35:dc:9f:b3:f6:4f:a3:a8:24:9a:fc:32:53:
         aa:90:6b:22:2f:bc:25:87:e5:76:70:d1:15:f7:7f:c0:39:e9:
         c1:06:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:12:29 2025 by rpki-client