Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          aR0mHiKWWjfpqSngJLGJmRq7Ic1HgMP+95xBs0DAUFg=
Subject key identifier:   D3:BE:EB:13:3C:D3:92:7D:54:C8:A4:4B:A0:4B:F0:2A:6B:27:47:7D
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          75
Signing time:             Thu 03 Apr 2025 06:01:22 +0000
Manifest this update:     Thu 03 Apr 2025 06:01:21 +0000
Manifest next update:     Thu 10 Apr 2025 06:01:21 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: ho9sVVvWDbQQPICspDCrYpR33XeFgiuAklruFzEeY2g=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED
        Validity
            Not Before: Apr  3 06:01:21 2025 GMT
            Not After : Apr 10 06:01:21 2025 GMT
        Subject: CN=67ee2431-e1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:27:43:8b:9e:03:1c:cd:b1:52:12:69:46:
                    af:a3:5d:0e:df:2e:d1:25:bb:ae:5e:6c:e7:df:76:
                    03:25:81:9e:e1:fc:9e:56:42:c5:10:61:28:d0:4f:
                    56:5b:19:a3:a7:68:45:92:27:36:e5:09:92:af:87:
                    9f:f2:1c:ac:25:51:01:27:39:cd:6b:eb:d5:27:f3:
                    9a:37:48:ef:96:d9:f9:55:c0:84:54:90:49:f1:99:
                    12:35:58:68:0b:f1:55:b6:7e:a4:85:a2:82:60:58:
                    75:b0:aa:3f:cf:83:0d:17:25:ad:90:d4:0a:41:45:
                    88:a4:16:df:30:b4:33:34:fc:8b:15:48:ac:11:49:
                    97:a4:b2:31:09:a6:29:21:47:2a:e9:42:8c:5e:06:
                    09:3f:61:b0:1a:94:82:66:8c:d0:1d:a5:d2:e8:8e:
                    7d:43:f4:ad:cc:0f:8c:75:6b:8c:ee:02:5e:b7:ce:
                    76:78:98:15:e3:66:4a:b6:e7:fd:47:64:45:e5:15:
                    2c:3e:01:d6:ba:1a:12:14:09:94:ef:b1:7e:c2:85:
                    82:bc:4e:12:d8:49:60:af:5a:b4:e0:e7:9c:2c:f3:
                    ad:0d:f3:48:71:c9:b9:9b:8b:0e:3a:a0:20:b6:ff:
                    75:45:a7:63:1a:45:15:7d:20:3b:39:64:d0:f4:9e:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:EB:13:3C:D3:92:7D:54:C8:A4:4B:A0:4B:F0:2A:6B:27:47:7D
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:00:41:01:7c:4e:3b:c8:4e:ee:99:2e:b4:e9:2f:e8:ef:
         bf:85:78:a0:5b:3a:92:6e:86:d0:fe:12:54:f2:ad:a8:1c:4a:
         3e:df:ff:0a:f4:55:b3:40:9d:6a:3b:4f:4f:0d:e1:91:6d:28:
         94:a0:0f:61:b2:2d:c8:fd:e9:24:39:fb:df:f2:e3:54:b4:8a:
         c1:5c:d5:2f:5e:23:71:d0:92:0c:3b:9b:5f:10:a1:b5:b0:de:
         80:c6:b1:83:ef:0d:fc:39:46:97:70:1e:08:50:34:e6:a4:be:
         fa:d1:cc:45:de:8c:e0:10:5a:4f:83:c0:74:15:b0:0b:86:b6:
         36:df:33:ab:e1:f9:c8:79:b3:27:ed:ea:69:2d:4f:60:aa:9c:
         ae:2d:2d:bc:db:aa:7a:1b:b8:74:0c:e0:3b:21:9c:87:4f:e3:
         4a:85:eb:8d:25:26:64:dc:b2:8c:4a:85:6a:1a:1c:b1:3a:a3:
         81:ca:58:1b:c6:28:03:d4:e0:83:de:ee:86:f1:ab:44:31:db:
         e1:cf:f3:f0:8d:c9:a3:71:bd:ce:c1:7f:7d:7b:96:a5:46:53:
         b7:13:9f:d7:50:b5:f0:c0:98:f0:c5:74:ba:ab:4b:68:f8:f9:
         0f:7d:07:02:4b:8e:5e:1f:ba:a3:d3:fb:fc:b4:85:ea:c8:7d:
         d5:97:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:12 2025 by rpki-client