Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          JG7TYufWFNvhKl6L7emQJCudXB2BONhnwc/Q+3S5YJw=
Subject key identifier:   DD:A6:7B:59:DE:DF:7A:32:91:9B:30:60:71:C1:41:05:AB:9A:6F:68
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       34FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          34D6
Signing time:             Tue 22 Jul 2025 14:37:47 +0000
Manifest this update:     Tue 22 Jul 2025 14:37:47 +0000
Manifest next update:     Tue 29 Jul 2025 14:37:47 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: Ep+138Xb6prCC3nTbu0fzv9j2q8HUGykmAEDupTObCU=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=)
                          4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13565 (0x34fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: Jul 22 14:37:47 2025 GMT
            Not After : Jul 29 14:37:47 2025 GMT
        Subject: CN=687fa23b-b8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:b1:53:ac:a0:3d:3a:ed:23:ff:40:f0:19:
                    3e:34:82:4a:69:f2:f3:21:0f:68:5b:fd:40:0b:e5:
                    89:74:ac:b2:39:70:ec:55:f5:44:3b:30:3b:78:08:
                    15:5b:ac:01:a4:db:f5:7a:2c:0a:c1:58:d4:12:df:
                    e8:a2:a1:e7:c3:51:d2:5f:5c:4e:ac:5b:3e:1c:19:
                    41:f1:40:0a:fd:43:ef:ed:ac:ce:37:81:10:40:8f:
                    12:f0:cd:00:cd:d7:65:b8:9e:fc:b8:58:19:08:6e:
                    e2:27:5c:ae:7d:77:84:f7:8a:f0:f1:18:4a:9a:e3:
                    7e:6c:09:6f:ff:9b:51:0a:f1:37:4e:56:9f:5a:6e:
                    62:83:ef:fd:f3:42:fb:cd:48:84:59:fd:a8:b4:df:
                    45:21:c3:02:15:ea:55:b5:38:20:22:ed:8c:97:0d:
                    fa:42:07:0d:da:29:9a:86:85:cc:cc:c7:bf:79:b3:
                    84:a1:dc:f1:58:52:56:8d:7a:e8:6d:af:b7:63:f7:
                    7a:f6:fc:a9:97:d9:e5:db:7a:a6:34:d8:bc:f2:b8:
                    5b:7e:d2:10:4a:82:0d:e6:9f:90:2c:23:52:5b:d7:
                    81:d6:7a:f0:f5:d6:48:0d:20:d7:49:73:80:b2:3d:
                    e2:ff:db:25:b6:73:da:46:a8:c1:d0:35:b9:bf:42:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:7B:59:DE:DF:7A:32:91:9B:30:60:71:C1:41:05:AB:9A:6F:68
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:9c:4d:67:22:7f:ea:0b:08:f5:b8:8b:82:a3:4d:0d:8f:
         7a:b8:a4:8f:ca:e9:40:ff:1f:e1:73:65:38:6f:b6:8e:2c:d2:
         e9:61:3e:b7:57:2c:d8:24:4f:94:66:f0:54:b6:58:99:6b:93:
         69:09:b7:57:1d:50:a7:2f:24:b4:9a:c7:b0:b4:a5:9b:d7:4e:
         9d:5e:85:db:93:24:e7:cc:60:d0:3c:de:99:64:d0:f8:6d:e4:
         ea:56:8a:28:0c:0e:c6:65:72:53:00:4f:29:2a:32:02:23:52:
         50:23:e3:fe:2d:69:58:75:d6:b7:d5:03:97:b0:66:32:49:9b:
         64:48:b9:80:c9:f4:01:1c:24:8e:5f:ae:9d:ef:9b:55:42:65:
         b2:5d:30:e1:7e:67:d0:fc:77:6b:05:96:b2:29:24:bb:fc:2d:
         04:59:58:ac:84:75:ed:87:b8:bb:9d:2c:df:df:f5:11:83:57:
         2d:8e:a8:ad:08:11:a0:e2:ed:ae:07:51:58:fc:ad:fa:62:c6:
         1a:c3:42:61:3c:5d:00:bd:09:a3:95:d1:19:ce:1f:0e:f8:dc:
         c9:17:10:df:b4:32:08:ef:db:3b:ce:11:0c:c2:c3:11:f3:87:
         16:c2:ed:21:83:07:c6:28:dd:36:5f:69:10:1e:5e:ad:68:72:
         55:27:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:38 2025 by rpki-client