Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
File:                     WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json)
Hash identifier:          TE+aJHVxZPiKzITx5bN5hBoninVnP5zCa3oO+n9+GTk=
Subject key identifier:   68:BD:6B:ED:46:79:83:D2:E3:77:42:77:43:05:DC:1D:A4:AD:93:3F
Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA
Certificate issuer:       /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
Manifest number:          01AD
Signing time:             Sat 05 Apr 2025 02:45:56 +0000
Manifest this update:     Sat 05 Apr 2025 02:45:56 +0000
Manifest next update:     Sat 12 Apr 2025 02:45:56 +0000
Files and hashes:         1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: RO3MI0zsZZH07tNHYUPdy8pWdV77vlzOJmDcD5R0wGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8
        Validity
            Not Before: Apr  5 02:45:56 2025 GMT
            Not After : Apr 12 02:45:56 2025 GMT
        Subject: CN=67f09964-7438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:50:6c:af:eb:2f:ed:c9:a4:23:80:f4:48:
                    0c:7e:2a:b0:6b:80:d7:f5:f2:18:a1:e7:13:5a:c5:
                    0c:39:13:8e:df:39:35:ba:ef:53:68:23:36:79:c5:
                    d4:8a:d9:5c:fa:5f:22:61:fb:1c:10:4f:91:fe:af:
                    74:1d:4d:b8:58:e8:f7:cb:c0:4e:bd:ce:15:ed:97:
                    0a:44:10:8c:1f:39:1a:a9:cb:a6:5b:53:74:37:25:
                    49:ef:35:dd:f0:22:6c:0a:84:c1:fc:7a:e8:58:ad:
                    c6:27:a9:54:6c:8d:4d:65:c5:b2:06:7b:b7:d6:0a:
                    a8:93:a1:66:75:16:a3:07:63:7a:c3:c8:23:84:f3:
                    fd:ff:5e:8a:fc:86:41:16:05:90:8b:7f:52:2d:65:
                    ee:95:a6:87:a1:3e:90:d8:c1:19:cc:a2:4f:d4:95:
                    ef:a0:1f:d3:a4:20:fa:9d:bb:b8:d9:80:87:34:10:
                    52:7b:02:9f:a1:07:8f:34:f6:64:15:5b:f3:e0:d8:
                    cc:e1:0f:63:8a:8f:95:8f:8c:d9:ab:36:af:b5:90:
                    cd:09:1f:af:fe:b6:a1:bb:7a:c3:fd:85:16:ff:ee:
                    cc:01:8a:c1:fa:40:ed:d6:78:d0:fd:da:9c:8b:45:
                    a6:06:0b:79:65:00:83:e4:8d:b9:c5:fc:fb:fe:7b:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:6B:ED:46:79:83:D2:E3:77:42:77:43:05:DC:1D:A4:AD:93:3F
            X509v3 Authority Key Identifier:
                keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:41:9c:90:3d:d1:73:1f:5d:81:4f:ff:7c:e0:b8:74:19:
         f1:7f:99:89:be:70:db:f6:a9:99:2d:d1:5a:4f:74:b7:39:d9:
         4d:4c:3e:bc:81:e0:eb:e9:d2:d1:5f:28:a3:09:c4:22:8a:9b:
         5f:1b:9e:5f:d2:e1:2f:8e:c0:81:f9:88:54:73:fd:76:d8:67:
         fc:27:29:ab:f7:05:b0:26:73:35:4b:07:e0:37:19:f2:49:41:
         88:33:c5:d7:6f:ca:a1:4c:14:b4:d7:96:1f:ca:86:75:9a:f9:
         1e:b6:ce:0a:16:cc:f2:ce:5f:4a:9d:d2:0f:0e:a1:0a:58:02:
         33:30:f4:b8:04:18:a6:25:cf:44:8d:e6:c8:a2:33:7a:d3:f7:
         b4:f9:f9:45:54:4c:42:9a:63:f1:08:46:54:5f:e6:89:fb:13:
         eb:d0:d5:27:3f:1e:41:d5:b2:9a:43:11:af:53:a7:03:9e:ed:
         55:93:35:33:57:7c:72:83:98:6a:1c:11:24:b4:00:9f:67:5a:
         21:20:cd:d1:c9:d1:2b:b0:75:51:93:53:82:57:40:98:25:8b:
         53:15:9d:86:a4:89:32:d0:81:e8:31:6d:7a:c2:bb:b8:8c:f1:
         1f:8b:77:d2:9e:b9:e9:1f:4c:90:9f:86:65:d9:8c:12:b2:6b:
         2c:ac:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:36 2025 by rpki-client