Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
File:                     WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json)
Hash identifier:          fImYJsoUqABSHtI3xx9w8+jhp2eJMUIyQ3B4FCn4Wwk=
Subject key identifier:   CC:3F:99:CB:B0:57:C4:7B:B0:21:7D:60:DD:0D:0A:3E:62:E3:9D:72
Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
Certificate issuer:       /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
Manifest number:          7B
Signing time:             Mon 07 Apr 2025 05:29:44 +0000
Manifest this update:     Mon 07 Apr 2025 05:29:44 +0000
Manifest next update:     Mon 14 Apr 2025 05:29:44 +0000
Files and hashes:         1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: X8nxd68gt6R98WcQd2VO2mQioR+nVStI/WCwwxbG7S4=)
                          2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: U3ZnJBxT1IeYR8+mYBl3G+PAu8VK9/dUHIyNaklFW4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
                          rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A53A
        Validity
            Not Before: Apr  7 05:29:44 2025 GMT
            Not After : Apr 14 05:29:44 2025 GMT
        Subject: CN=67f362c8-356f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:a6:6b:a8:61:40:88:bd:2b:d4:a9:1d:84:
                    36:23:eb:17:b0:16:cb:55:bd:98:67:f4:07:95:d2:
                    73:79:eb:60:b8:3f:11:db:1c:4f:f5:b3:27:0f:6d:
                    6d:ba:62:09:b8:57:42:78:06:83:9f:c6:e1:e9:42:
                    3e:79:a5:0c:23:8a:aa:a3:99:0f:2c:b7:ac:3e:32:
                    43:89:eb:b4:bd:98:d4:b6:51:5a:b8:fd:20:40:58:
                    4e:56:11:58:91:e5:3c:23:c6:6f:8a:31:20:04:15:
                    8e:31:d7:a7:5f:b1:16:b0:5c:06:6c:07:f1:05:c0:
                    cf:0a:ad:91:de:92:57:82:70:67:67:b6:1e:87:84:
                    ba:c1:90:f0:b8:4c:f2:b3:ba:1b:44:86:dc:c8:41:
                    e8:55:8d:39:73:62:3c:5e:c6:8e:80:fe:66:a7:80:
                    5d:ea:bd:2f:f8:ab:2a:2b:58:de:1b:f2:6e:2b:61:
                    61:04:39:76:d1:b4:3e:6e:0d:25:50:2b:72:dc:b7:
                    21:57:c9:92:20:ba:37:a4:f4:33:35:ca:b7:88:c6:
                    3b:01:89:d6:0b:ea:35:11:25:d4:76:de:56:b2:b2:
                    5d:20:6f:40:52:5f:de:87:7e:c1:d8:ee:2a:f5:72:
                    6e:b6:82:19:cf:88:38:fb:53:b7:ee:e7:dd:24:20:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:99:CB:B0:57:C4:7B:B0:21:7D:60:DD:0D:0A:3E:62:E3:9D:72
            X509v3 Authority Key Identifier:
                keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:fb:f1:79:bd:7b:4d:bf:80:e4:2e:bb:28:2b:1e:be:0b:
         61:50:9b:ce:b0:c4:d1:6e:51:4c:4b:e6:85:7b:37:4d:82:f4:
         26:7a:34:1f:51:47:f3:13:6b:13:69:a4:30:68:54:9c:81:3d:
         ba:d7:58:f5:2d:11:bc:3d:e6:d3:2c:a3:1a:33:11:a6:ed:95:
         a5:0c:87:e3:b4:41:77:4e:7e:55:6f:2f:58:42:dd:98:bc:1f:
         83:ed:5f:d1:c3:d8:af:1a:70:f9:c6:b9:72:3d:c0:2c:f0:b1:
         b5:83:b7:d6:06:01:78:be:cf:71:8e:6f:43:26:1b:4b:e9:8d:
         8c:d3:1a:ff:d1:77:9e:b9:b6:44:01:01:3d:52:64:86:dc:52:
         72:5c:0f:8e:79:63:a3:14:ae:b3:1a:de:53:1c:34:fc:64:8b:
         50:1c:2d:f3:77:d3:09:00:e5:70:e5:21:18:29:c0:9d:6d:16:
         26:10:0a:62:ba:12:45:54:da:9b:a6:53:23:14:da:2b:a7:24:
         70:57:48:49:7e:da:6f:37:37:87:76:15:38:56:bf:ae:3e:13:
         e6:b0:4e:1b:95:1e:ba:50:fd:be:96:82:40:b4:71:5c:61:4d:
         ef:e3:ed:7d:78:d3:16:82:f5:20:81:fb:66:61:5b:95:b0:de:
         cb:25:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:21:28 2025 by rpki-client