Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
File:                     Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft (raw, json)
Hash identifier:          mgEKEsnKND8y3mjNyo2B/P9qqlyriGVlso6YbSsz/WY=
Subject key identifier:   E8:F2:83:E1:52:74:87:D3:98:6E:04:00:C4:B9:3B:A4:5D:65:90:46
Authority key identifier: 5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF
Certificate issuer:       /CN=A9191202/serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
Manifest number:          063B
Signing time:             Fri 04 Apr 2025 22:47:52 +0000
Manifest this update:     Fri 04 Apr 2025 22:47:52 +0000
Manifest next update:     Fri 11 Apr 2025 22:47:52 +0000
Files and hashes:         1: Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl (hash: 3oNeQfv4nD7K7hfd9E1H5GvWKmrwLYZTE0tmG6tvbKg=)
                          2: 79395C821C4B11EC9D9F684FC4F9AE02.roa (hash: 5ED4qLbgW3ziI+9Du3f/y3T8zw3So567Zq8ZjhLDskw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl
                          rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191202
        Validity
            Not Before: Apr  4 22:47:52 2025 GMT
            Not After : Apr 11 22:47:52 2025 GMT
        Subject: CN=67f06198-83dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:d1:f0:ef:2a:8b:91:48:55:0d:c7:25:c9:
                    ec:9e:6e:a6:47:e5:c2:cb:b3:09:13:2b:7b:49:d9:
                    f7:53:6e:e1:3a:7e:fc:48:3b:51:00:6d:fe:92:69:
                    9a:35:0b:e3:7b:4c:7a:07:8b:6e:0c:d0:02:c8:f9:
                    4d:33:bd:0e:57:a2:3b:0b:61:a8:8d:2d:62:37:f1:
                    98:e1:ca:5e:a3:d8:5b:39:37:86:48:80:e1:a6:2e:
                    42:bd:37:4b:41:0a:26:c3:b1:2a:d6:4a:a5:7d:26:
                    89:7c:cd:3b:aa:5f:ee:e0:85:26:14:d5:bc:fd:5c:
                    ea:3c:5c:55:15:3c:f3:dc:1f:b8:89:61:da:d3:ea:
                    ac:ef:4b:1e:44:b3:2b:b4:0c:e9:41:10:5d:d6:9c:
                    f9:0c:dd:27:cd:bb:f1:08:8f:b0:01:d5:f4:9d:68:
                    a0:f3:6e:de:d4:f4:46:16:b4:fb:7c:0f:89:48:08:
                    fd:9c:27:6f:f8:14:ec:19:e5:73:16:e9:d9:0e:4b:
                    e8:2f:f6:36:8a:95:04:70:1f:54:a8:f3:0c:cd:b9:
                    41:6f:e0:41:37:c6:7d:d3:76:d0:31:1a:64:f5:53:
                    ea:5e:87:ff:d3:d0:55:b4:a3:2e:16:f8:b7:dd:a3:
                    71:4e:e5:54:37:35:92:29:cd:77:66:4f:77:c8:b0:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:83:E1:52:74:87:D3:98:6E:04:00:C4:B9:3B:A4:5D:65:90:46
            X509v3 Authority Key Identifier:
                keyid:5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:b5:58:37:ec:9c:2c:bb:1f:3f:69:0e:22:d7:a8:54:a1:
         19:6a:34:a6:22:7c:c0:ec:27:fa:f3:f7:bb:b7:cc:f0:56:55:
         48:42:5f:02:17:e5:34:aa:b0:e8:d2:a3:1f:db:7c:fe:d4:a3:
         c9:81:a0:9a:3b:19:26:62:9a:58:73:bf:6f:4d:3c:e2:73:f2:
         e0:b6:a8:bb:c9:27:16:89:96:ba:58:43:71:54:61:18:41:ea:
         69:f3:89:34:c3:39:f1:87:87:85:92:f0:eb:79:83:9f:22:4c:
         29:b9:68:0d:22:3a:03:c6:72:da:dd:95:99:e2:40:8c:44:4d:
         d9:88:a3:87:b8:70:19:a9:35:5d:78:9d:f1:a1:71:c0:fb:12:
         f2:e9:27:e7:0d:17:79:da:5e:b7:8c:b6:c4:25:16:42:5e:2f:
         28:76:93:f7:20:4f:da:f4:16:ce:a8:bb:8c:22:ef:87:e9:f9:
         e0:45:c7:33:67:f6:8f:5e:1d:ff:72:1e:f5:83:55:55:eb:bb:
         f6:32:f4:76:52:b6:b2:ea:aa:6c:54:39:79:92:e3:c6:aa:2a:
         ef:6e:00:71:2d:83:38:35:ec:a3:84:93:c3:46:98:f4:96:7e:
         ca:b0:cd:ba:ee:63:aa:bd:14:1b:43:b9:83:41:b5:ff:e3:38:
         0b:99:cd:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEyMDIxMTAvBgNVBAUTKDVBNkZCMkEzQTMzODMyRTIxNjY1NzRCRDkwQ0RFMDMw
QkUxRkNFQ0YwHhcNMjUwNDA0MjI0NzUyWhcNMjUwNDExMjI0NzUyWjAYMRYwFAYD
VQQDEw02N2YwNjE5OC04M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMrR8O8qi5FIVQ3HJcnsnm6mR+XCy7MJEyt7Sdn3U27hOn78SDtRAG3+kmma
NQvje0x6B4tuDNACyPlNM70OV6I7C2GojS1iN/GY4cpeo9hbOTeGSIDhpi5CvTdL
QQomw7Eq1kqlfSaJfM07ql/u4IUmFNW8/VzqPFxVFTzz3B+4iWHa0+qs70seRLMr
tAzpQRBd1pz5DN0nzbvxCI+wAdX0nWig827e1PRGFrT7fA+JSAj9nCdv+BTsGeVz
FunZDkvoL/Y2ipUEcB9UqPMMzblBb+BBN8Z903bQMRpk9VPqXof/09BVtKMuFvi3
3aNxTuVUNzWSKc13Zk93yLDAGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjyg+FS
dIfTmG4EAMS5O6RdZZBGMB8GA1UdIwQYMBaAFFpvsqOjODLiFmV0vZDN4DC+H87P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIwMi9EQkFGMkRFRThE
NDcxMUVCQkExQTkwMkRDNEY5QUUwMi9XbS15bzZNNE11SVdaWFM5a00zZ01MNGZ6
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dtLXlvNk00TXVJV1pYUzlrTTNnTUw0ZnpzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTIwMi9EQkFGMkRFRThENDcxMUVCQkExQTkwMkRDNEY5QUUwMi9XbS15bzZNNE11
SVdaWFM5a00zZ01MNGZ6czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1bbVYN+ycLLsfP2kOIteoVKEZajSmInzA7Cf68/e7t8zwVlVIQl8C
F+U0qrDo0qMf23z+1KPJgaCaOxkmYppYc79vTTzic/Lgtqi7yScWiZa6WENxVGEY
Qepp84k0wznxh4eFkvDreYOfIkwpuWgNIjoDxnLa3ZWZ4kCMRE3ZiKOHuHAZqTVd
eJ3xoXHA+xLy6SfnDRd52l63jLbEJRZCXi8odpP3IE/a9BbOqLuMIu+H6fngRccz
Z/aPXh3/ch71g1VV67v2MvR2Uray6qpsVDl5kuPGqirvbgBxLYM4NeyjhJPDRpj0
ln7KsM267mOqvRQbQ7mDQbX/4zgLmc22
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:18 2025 by rpki-client