Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
File:                     wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json)
Hash identifier:          XC2/TbxteKn2ZCMaPkJaa7ANCq5yf4qvVFh9advfRJo=
Subject key identifier:   8E:AD:4B:77:A0:63:47:54:83:52:A8:D5:06:A1:98:88:2C:48:29:34
Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
Certificate issuer:       /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
Certificate serial:       0D77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
Manifest number:          0D6F
Signing time:             Fri 04 Apr 2025 18:05:09 +0000
Manifest this update:     Fri 04 Apr 2025 18:05:08 +0000
Manifest next update:     Fri 11 Apr 2025 18:05:08 +0000
Files and hashes:         1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: WTr6If2j5gx3sbTLMKWS2aGQgtNQj3OyUBi+VvexPR4=)
                          2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl
                          rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E9B
        Validity
            Not Before: Apr  4 18:05:08 2025 GMT
            Not After : Apr 11 18:05:08 2025 GMT
        Subject: CN=67f01f54-d796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:83:f0:26:61:9a:c8:a7:ed:31:41:34:77:
                    6f:12:50:7a:94:f6:8d:d3:79:6a:ad:ef:b8:bc:d2:
                    26:76:6b:bc:8e:b3:73:97:be:0c:a7:3f:60:ac:a2:
                    59:85:4f:f8:96:8f:c6:e4:cb:1d:56:3a:f3:fe:9e:
                    ed:b7:00:88:d0:d0:c1:54:57:3f:fe:9e:8b:44:5b:
                    d7:35:ba:66:8c:92:23:d9:1b:b1:d1:d3:31:f9:7b:
                    b6:2a:14:10:fa:de:ad:94:53:af:54:fb:9f:4b:09:
                    2d:3d:02:2b:3f:9b:1f:82:65:b8:c7:3e:47:aa:40:
                    e2:5c:4a:b8:fd:47:2f:3d:80:0d:9c:13:0a:9a:07:
                    f3:94:02:3a:cf:d4:a8:84:48:f8:5a:fb:e2:05:a1:
                    7d:77:e2:f1:65:5e:c7:b1:81:81:4e:13:8e:fc:14:
                    7f:d6:f3:7e:f5:93:8c:70:dc:e0:a9:5b:d9:d7:7f:
                    d4:58:5e:51:c7:58:28:9b:f0:a0:c7:99:b6:b7:1f:
                    69:0d:c2:4b:15:63:ad:1d:1c:ea:87:08:6c:80:c9:
                    63:34:d0:5d:27:49:d3:05:82:f2:e8:c7:7f:a2:11:
                    c5:75:28:89:4c:51:f9:cd:d3:ce:8c:66:a8:b8:87:
                    72:75:9c:b7:49:4c:19:fe:91:e1:94:a8:2f:17:e7:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:4B:77:A0:63:47:54:83:52:A8:D5:06:A1:98:88:2C:48:29:34
            X509v3 Authority Key Identifier:
                keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:03:45:f7:c9:00:78:06:b5:06:d5:85:cf:d0:48:8e:b2:
         5c:d0:ba:08:75:70:eb:b2:7a:50:c3:98:fe:1f:58:2f:ed:16:
         1a:5f:6d:86:1d:8d:af:bd:88:5a:37:8e:8f:b9:47:2d:b0:e8:
         90:7d:af:ce:67:15:5e:8e:ec:93:7f:84:ab:e1:27:51:60:a3:
         3b:de:cd:00:9e:15:39:a7:f8:b4:bc:8a:fa:64:24:59:b6:25:
         6d:03:72:89:3f:97:24:9c:0a:1e:4d:a3:b4:f0:b9:0c:22:a9:
         76:83:0b:a2:6b:07:9c:a5:e4:8c:c1:dd:ed:bd:52:a3:b6:dd:
         8f:29:ee:23:05:ce:27:73:99:15:2d:88:3f:c8:1d:6e:22:ad:
         c6:58:12:7a:66:00:a2:f1:05:79:5c:db:b9:ce:4a:dc:dc:28:
         a5:13:7d:b2:e9:b1:dd:73:c9:f0:4f:24:ed:c4:65:58:45:ec:
         ee:f7:2a:3f:81:1e:13:62:ea:4c:12:b9:32:a7:95:f2:a6:a3:
         cc:79:f7:a5:ca:00:19:1a:05:84:3c:fe:00:b5:48:45:d3:9e:
         f2:0c:fe:b7:23:02:8e:c3:a7:ca:66:14:91:97:9c:1b:92:0e:
         96:28:38:34:75:ec:24:4e:a3:90:71:71:d2:39:1b:1f:7b:3a:
         af:11:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:05 2025 by rpki-client