Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier:          WUNGlOiWIAryWcMDJvl9UeaLkGwJv4QWVPT7FO1Kk+c=
Subject key identifier:   C1:6C:58:C6:B7:A4:8B:A2:12:E8:8E:FC:68:73:64:96:5F:35:99:61
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer:       /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial:       3464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number:          3464
Signing time:             Fri 04 Apr 2025 15:07:18 +0000
Manifest this update:     Fri 04 Apr 2025 15:07:17 +0000
Manifest next update:     Fri 11 Apr 2025 15:07:17 +0000
Files and hashes:         1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: aUvXbxf+3FZ6BIN0/FMay/2axkTNgYDACtnvNIMwBMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
                          rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13412 (0x3464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F1C6
        Validity
            Not Before: Apr  4 15:07:17 2025 GMT
            Not After : Apr 11 15:07:17 2025 GMT
        Subject: CN=67eff5a5-ac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:59:9d:6d:2b:e3:5b:85:97:b9:48:ab:16:
                    58:f5:66:c9:be:4e:c6:88:d1:4b:85:f3:d2:fc:89:
                    93:ea:76:16:b5:20:76:2b:96:4c:17:cb:9e:cc:c5:
                    1f:c5:ac:93:0e:67:3e:14:69:fd:66:e1:3c:c7:9b:
                    d1:3b:65:e2:e5:78:af:66:e6:e9:fc:fa:4a:64:ae:
                    3b:ee:73:4b:37:0a:03:70:5d:a9:95:ef:70:80:a2:
                    de:f9:4b:43:30:c9:92:34:91:c7:d5:eb:70:57:0f:
                    83:f7:29:3b:0d:45:4c:77:a7:fc:76:ca:0d:fe:8d:
                    2b:ce:f0:d0:88:41:2f:50:da:d3:49:9e:ac:8c:a8:
                    0e:79:30:4d:77:d7:88:07:d8:8a:79:f5:47:57:d4:
                    7c:65:b1:7c:bd:86:5c:24:26:cb:33:e8:8e:cb:a4:
                    2e:ec:a9:57:8a:08:fb:a9:c1:c4:3c:19:66:ad:a3:
                    01:bb:1f:af:32:68:bf:5c:97:ae:c9:cc:fd:e1:a9:
                    14:a4:05:1d:4f:e6:cd:ca:70:a7:65:7c:76:83:5f:
                    9d:e8:de:c0:db:3e:cc:06:a5:37:ab:0b:9d:e1:62:
                    db:30:ca:e1:d4:75:05:09:8e:07:01:55:4e:77:a0:
                    88:83:6b:c2:19:2e:22:63:15:b3:a8:e6:b1:a6:7f:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:58:C6:B7:A4:8B:A2:12:E8:8E:FC:68:73:64:96:5F:35:99:61
            X509v3 Authority Key Identifier:
                keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:de:36:66:4d:a1:94:06:04:35:92:43:1b:e8:23:8b:ce:
         62:a0:76:99:02:d8:f4:e2:f6:cb:b9:d0:90:93:41:3e:e2:6f:
         75:e3:77:d5:5b:9b:60:51:82:a7:7f:08:0c:7d:00:95:68:51:
         e6:c1:6e:f8:bc:42:70:11:8b:4e:34:f5:87:5c:42:96:eb:2d:
         9b:0d:94:13:97:a6:9d:43:af:73:9b:87:96:44:15:14:b3:c7:
         d2:da:cc:7a:c0:7a:bf:06:b2:52:32:ff:ea:ef:23:26:c1:73:
         98:27:bd:33:c8:91:02:18:23:d5:2f:11:36:91:9c:2a:e6:0c:
         cf:c1:46:e7:e8:22:33:7b:b5:15:5e:69:f0:c0:ac:97:69:0b:
         ee:1a:c6:e5:d1:ff:06:9c:51:38:32:83:08:2f:4b:73:ab:b0:
         08:2a:50:9d:8a:56:df:b3:aa:18:2b:6d:fb:ba:94:a6:db:76:
         18:2f:e6:2e:f2:d8:ab:ec:cd:90:33:af:66:c4:53:4d:d7:5d:
         5a:df:d2:dd:be:a4:2d:c1:4a:4f:f6:49:2c:a2:e3:db:f2:7b:
         bb:c4:d4:75:d2:a8:dd:e9:38:1c:b0:15:44:3f:cb:13:f6:3f:
         50:88:f5:e0:34:2d:da:f1:ce:4b:33:2b:7d:0f:d8:2a:4a:32:
         c7:18:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:47 2025 by rpki-client