Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File:                     wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier:          k4vwQspITqf+abuDFKtowyeVrl6NobNjucBaYbvZeg4=
Subject key identifier:   03:B1:B0:94:8B:AC:1F:97:C7:C6:46:85:48:D6:E7:82:5C:F8:2C:4C
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer:       /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial:       110E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number:          10FA
Signing time:             Sun 06 Apr 2025 17:13:09 +0000
Manifest this update:     Sun 06 Apr 2025 17:13:08 +0000
Manifest next update:     Sun 13 Apr 2025 17:13:08 +0000
Files and hashes:         1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: J4aKscOzu7ZzfGP30FJocPuXiajTpeMFrH36+vRYasE=)
                          2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 17:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4366 (0x110e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B65
        Validity
            Not Before: Apr  6 17:13:08 2025 GMT
            Not After : Apr 13 17:13:08 2025 GMT
        Subject: CN=67f2b624-ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:07:e6:f0:e7:a8:01:3a:95:29:7b:99:5b:
                    e7:20:36:76:84:a0:1d:ca:59:a4:6a:5f:e1:84:cb:
                    0d:30:17:bb:3d:29:55:6c:5f:23:c3:68:ca:24:e1:
                    92:69:c8:3d:90:99:fd:d4:fc:ff:41:b2:3d:63:eb:
                    81:30:a5:fb:c9:fc:e2:9a:15:0b:f7:3e:b5:51:0f:
                    36:f5:5a:97:7f:de:31:c6:69:65:e8:1e:88:5c:10:
                    88:a1:ff:08:88:76:f8:fd:d6:2d:83:a4:94:1d:36:
                    d3:b3:65:3c:96:26:d7:66:7f:7a:1f:4e:ca:d4:5d:
                    61:87:39:b3:1c:8d:6d:01:b5:18:51:cf:d0:44:25:
                    e6:09:3c:9c:e7:d0:ab:4f:65:01:21:59:ca:ea:ad:
                    b3:fb:e9:b9:73:b7:d7:61:e4:f0:a8:df:fd:6f:6f:
                    50:19:40:07:3f:cf:fb:0c:99:61:a8:33:02:2c:a8:
                    df:71:a3:19:2a:79:51:a5:09:a5:d4:e5:82:9f:e9:
                    ba:55:a7:27:b5:20:57:f5:72:9c:c7:a1:1e:69:73:
                    51:7c:03:2b:0d:5c:ca:1f:c0:f2:de:86:43:7e:54:
                    2a:ba:e9:22:fb:8b:31:70:85:2e:e3:ef:35:bd:f0:
                    ee:bb:04:2d:71:f8:ea:0a:2e:5f:25:8f:60:4b:3c:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:B0:94:8B:AC:1F:97:C7:C6:46:85:48:D6:E7:82:5C:F8:2C:4C
            X509v3 Authority Key Identifier:
                keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:e9:12:56:ad:0b:63:88:83:ad:22:b4:7b:f4:54:7a:cd:
         f2:fa:6e:8d:38:c0:47:a5:c2:9b:8e:d9:94:3e:99:2e:c5:a6:
         cc:03:5d:0d:37:fc:1e:3e:94:c5:a3:36:1d:ad:d5:94:33:27:
         50:66:59:9a:a9:72:3f:a1:1b:03:8f:c0:ba:6f:8f:5f:7c:dc:
         55:42:5e:f9:15:05:a9:e6:3e:b0:a5:5c:d0:da:f0:97:b9:21:
         0f:95:51:7a:fd:fc:85:eb:1f:b6:11:6b:23:80:ab:52:32:08:
         fd:ef:d1:f8:35:64:1d:42:1e:a7:d1:68:b5:eb:90:82:a3:09:
         7b:60:c2:43:6d:79:84:04:cd:8a:ce:1e:92:54:cc:d8:b0:5a:
         d3:6c:f1:00:c9:70:f8:d0:34:bc:01:af:e5:11:57:a4:13:27:
         29:f7:cd:49:91:ba:60:aa:53:45:90:e7:65:d2:93:95:b7:59:
         e3:73:e3:f0:3c:74:73:a4:28:c8:3a:40:00:ab:fd:ac:6c:68:
         43:8f:4c:fb:e2:93:52:a0:fe:70:4a:64:0c:e5:a1:a6:87:8a:
         fe:dc:02:79:25:48:be:43:4a:10:d0:8c:34:02:d5:02:1f:a1:
         85:1a:89:ac:5e:1b:d1:3d:3e:f0:fc:4f:9d:4d:92:b0:b1:3f:
         c6:b0:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:10 2025 by rpki-client