Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File:                     WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier:          348FffRWmz9pDITYzIM0hUnpjYXIp/R45FkLzKFtG3k=
Subject key identifier:   26:FA:A1:2E:68:F2:01:3F:F7:E3:7C:B3:28:A0:5D:39:21:96:96:6F
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer:       /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial:       0467
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number:          0463
Signing time:             Sat 05 Apr 2025 00:14:45 +0000
Manifest this update:     Sat 05 Apr 2025 00:14:44 +0000
Manifest next update:     Sat 12 Apr 2025 00:14:44 +0000
Files and hashes:         1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: 7CToUqtY3SMNRtg9f8GVt9UztXhKo7O4MDp9i7A6nCk=)
                          2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
                          rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D17C
        Validity
            Not Before: Apr  5 00:14:44 2025 GMT
            Not After : Apr 12 00:14:44 2025 GMT
        Subject: CN=67f075f4-b02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:45:0b:c5:91:68:2f:3b:3a:e4:fc:f9:c1:
                    8f:d8:bd:84:61:93:0c:ab:2d:39:83:06:4c:af:da:
                    e8:05:a3:d1:37:83:9c:b3:ab:ee:63:5c:06:8e:84:
                    8a:0c:25:61:d5:ba:96:37:9d:88:c9:01:0a:e6:2a:
                    7c:2d:d3:3a:8f:3a:75:3d:41:61:37:d8:7d:72:0e:
                    99:e7:76:21:55:c6:58:f7:5f:72:1a:f9:d7:65:8b:
                    58:90:00:6c:e5:90:c0:c4:56:a5:79:83:ca:24:74:
                    56:30:12:c1:44:86:e4:b7:12:20:5d:46:3e:de:99:
                    c3:26:e4:86:54:f9:5e:12:3b:5f:8a:ef:97:46:9b:
                    41:df:5e:9f:e4:c4:10:18:a3:28:d9:57:ae:0b:a4:
                    17:b5:ff:71:55:eb:d1:16:71:21:c4:56:cb:48:db:
                    8f:15:d9:67:9c:40:a7:da:70:a0:44:57:f5:17:2e:
                    66:ff:1a:2c:fb:b0:95:3b:15:71:50:26:0d:ab:0c:
                    87:6e:6e:d2:46:4e:89:a9:00:a4:7c:68:9c:c8:32:
                    e0:21:ca:41:f1:60:75:e8:2b:22:6c:10:ba:16:0c:
                    e4:fa:82:32:95:3a:7e:21:fc:3b:5a:ee:19:db:7a:
                    70:6b:9e:fa:97:00:e6:33:03:be:e2:b5:f1:43:6c:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:A1:2E:68:F2:01:3F:F7:E3:7C:B3:28:A0:5D:39:21:96:96:6F
            X509v3 Authority Key Identifier:
                keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:4c:b0:a6:c7:be:1a:21:c0:f0:28:c4:99:6e:6a:a2:12:
         25:7e:78:5b:1b:45:5c:2f:c2:a4:80:06:bc:97:1d:16:b7:40:
         f6:1b:79:52:cb:58:bd:ce:58:8e:dd:16:9b:3d:b6:06:47:90:
         c6:42:c4:7f:28:7f:35:e4:36:65:1e:57:ec:7b:c8:fd:03:2e:
         73:24:1e:79:65:98:71:17:97:3d:cf:7c:e9:25:95:99:7e:e4:
         3e:fd:d9:c8:b3:ae:46:1c:7d:00:02:66:28:17:47:3a:39:4f:
         5e:79:61:f2:9d:15:b9:ec:97:30:1e:20:ae:55:c1:28:08:07:
         f4:d0:a4:6c:09:f5:83:39:9d:6f:d4:86:e5:b6:66:54:64:bb:
         c7:d9:06:9e:57:75:a8:b0:06:42:cb:51:79:b7:1a:5d:f7:90:
         5d:b5:58:93:8a:2e:d1:6f:18:a1:0a:cb:b7:70:f5:c3:35:c6:
         e3:07:95:95:47:db:70:e3:29:eb:16:1c:ff:19:94:33:79:b0:
         ca:ad:12:d1:30:bb:a0:e7:ec:4b:77:54:6a:e0:d4:73:23:87:
         a0:0b:2b:f5:23:17:4a:2a:89:26:fb:39:ea:67:ea:e8:b6:4a:
         73:31:a8:99:dc:6f:8a:e7:4b:bf:7d:80:b4:04:e0:65:68:6f:
         5f:b2:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:23 2025 by rpki-client