Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          fTVVMEvq43cz4aZPKwz1+1Wzp0WFYit3Mlo8V3Qfut0=
Subject key identifier:   BB:1E:89:75:D2:D4:09:50:AD:03:27:3E:0D:DF:86:F5:A9:F0:CD:50
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          44
Signing time:             Thu 03 Apr 2025 06:40:36 +0000
Manifest this update:     Thu 03 Apr 2025 06:40:35 +0000
Manifest next update:     Thu 10 Apr 2025 06:40:35 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: 1AodvKU5+rrM44/sdIaT9LBdQwG7Gh+lekcyF3nWcYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5
        Validity
            Not Before: Apr  3 06:40:35 2025 GMT
            Not After : Apr 10 06:40:35 2025 GMT
        Subject: CN=67ee2d63-623c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:f7:e8:78:2b:ae:94:29:1a:8d:d4:9c:45:
                    f3:e0:33:32:76:3f:e3:65:35:d4:48:dc:a8:f0:1e:
                    bd:62:b6:05:20:79:25:6b:ef:79:e5:88:d2:da:cd:
                    40:1a:97:03:19:46:1f:2c:a1:7a:76:ee:4c:d4:47:
                    dd:35:92:2a:cd:b4:8f:6c:9c:59:9d:dd:17:9e:11:
                    c5:da:12:ea:7a:41:01:cb:fa:63:6b:32:0c:22:e9:
                    ff:81:90:11:14:c2:e2:b5:8d:00:c3:cd:d9:19:98:
                    1f:a2:c1:3e:c1:94:10:02:84:2c:1a:56:b8:1f:6b:
                    7c:29:f1:63:75:e1:94:fa:bd:b0:e7:bb:5b:97:6d:
                    bb:6e:5c:36:b5:53:c1:51:6e:9d:f7:f1:9a:04:27:
                    53:87:b8:95:3f:ea:e2:4b:88:f9:a3:cf:8f:b7:ba:
                    38:46:64:92:7a:02:6f:a5:96:0a:06:83:67:f1:03:
                    e1:a3:ef:a0:c3:ba:d0:37:de:22:b4:d6:10:31:60:
                    e7:85:95:12:c8:50:71:5e:5b:e7:51:f9:51:f7:fa:
                    46:3f:32:61:39:34:94:c6:5e:eb:8b:5f:de:4a:0b:
                    d2:f3:51:1f:92:8d:ff:93:d5:99:39:f7:a3:3c:fb:
                    f6:27:47:65:76:ac:41:f9:7c:92:fa:e2:41:16:c5:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:89:75:D2:D4:09:50:AD:03:27:3E:0D:DF:86:F5:A9:F0:CD:50
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:5f:92:69:ea:9b:fc:3e:68:52:08:2f:42:76:93:5c:55:
         61:3a:5f:d2:7f:89:6c:36:51:8a:43:28:1e:80:3c:14:98:bf:
         33:14:50:17:7b:3a:29:90:b2:24:ea:9e:a0:ba:6a:ab:2a:46:
         2f:4e:00:8b:db:0a:83:12:1e:ac:9b:b3:71:07:7a:27:39:ad:
         1a:03:30:84:a8:d0:a8:d8:68:6a:95:96:ef:18:e7:cc:3c:bb:
         09:5f:6f:6f:41:eb:56:0e:0a:a2:2d:bb:f8:2c:3c:ab:c5:c8:
         f0:ba:ee:bf:00:6d:ab:2a:11:81:af:e4:2c:4c:01:06:85:5e:
         c9:a5:7c:15:61:8a:58:2a:93:32:78:cb:80:91:af:84:76:d8:
         97:38:81:08:fe:87:2c:87:3d:50:a9:02:a5:3b:8f:3a:c6:6f:
         5a:ed:55:c4:07:40:a1:01:84:0e:0d:40:29:c2:42:a7:80:e9:
         a1:27:66:25:b6:e1:14:fa:8b:18:1a:43:61:33:61:29:7d:b0:
         b2:c7:7a:e7:cb:66:c5:00:fd:ec:d2:49:a2:1d:c3:38:63:e9:
         80:54:d9:48:4e:ea:00:3d:f1:ec:15:3f:2a:d1:38:36:24:33:
         b6:95:2a:82:3a:fd:8a:b3:b6:35:28:81:0a:6e:77:9c:6d:30:
         18:9e:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:44 2025 by rpki-client