Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
File:                     wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json)
Hash identifier:          0g8gq0pTd+zD8L2ta3A234fx8r9kP934TFFSRH97S1I=
Subject key identifier:   C0:5A:C6:72:99:FF:3F:9F:3E:9F:39:C5:4B:63:76:A1:53:6B:10:B7
Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
Certificate issuer:       /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
Manifest number:          6F
Signing time:             Thu 03 Apr 2025 06:06:44 +0000
Manifest this update:     Thu 03 Apr 2025 06:06:43 +0000
Manifest next update:     Thu 10 Apr 2025 06:06:43 +0000
Files and hashes:         1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: IZUgNtHg8LeAaCsDfzZzgnjy1woL1vX5wRu6nQRdV9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
                          rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D44BE
        Validity
            Not Before: Apr  3 06:06:43 2025 GMT
            Not After : Apr 10 06:06:43 2025 GMT
        Subject: CN=67ee2574-9b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:e3:57:a9:60:6a:b4:7e:17:82:71:5c:ac:
                    20:db:b6:96:33:2f:4e:0f:d8:cf:e1:80:f1:d6:a6:
                    e9:25:9e:26:01:60:b9:50:42:5c:c0:e9:63:c1:15:
                    3a:96:0a:87:e1:98:cd:54:3d:d5:de:44:1d:5e:55:
                    df:c7:1a:e6:f1:1f:60:67:c1:8d:f1:14:09:31:4c:
                    05:58:8a:08:69:0e:d1:9c:50:84:a6:d6:c7:cb:29:
                    47:f4:e2:4c:e2:e2:0a:b1:a3:4c:f6:af:d6:dd:d6:
                    7a:bb:64:f8:e2:fa:40:99:fe:cf:27:7b:fb:1c:a1:
                    88:0a:27:71:6f:9e:7b:b0:cd:92:20:1d:0e:38:bb:
                    7b:1f:01:78:ad:8e:5f:ea:10:1c:b1:d5:93:29:9d:
                    d4:33:2c:82:b6:76:59:82:da:a4:0b:1b:13:e1:e7:
                    8f:50:b6:f6:01:cf:f8:a0:f6:cd:7f:8a:b6:5f:74:
                    b4:e6:a8:56:7c:0f:42:94:7e:a3:16:db:c7:4c:e2:
                    f1:b3:c2:fb:09:0c:04:9b:cc:f5:71:61:0e:a8:cf:
                    38:6f:1e:8e:0b:7d:17:56:63:40:24:0b:dd:7e:57:
                    a2:44:03:78:6b:4c:4c:dc:91:d0:82:4d:d9:f5:cc:
                    65:75:9d:4a:c4:70:d2:99:23:38:51:c1:df:c7:e2:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:C6:72:99:FF:3F:9F:3E:9F:39:C5:4B:63:76:A1:53:6B:10:B7
            X509v3 Authority Key Identifier:
                keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:22:73:78:2e:b2:cb:fb:55:d6:c1:4c:f8:a3:3a:a0:4d:00:
         a8:58:eb:de:3b:03:83:71:09:5d:23:d7:2e:34:f0:58:74:b9:
         55:b9:c0:86:41:fb:f8:c8:ac:b6:d3:b1:e5:fa:c4:57:2c:30:
         89:cc:5d:e4:e5:6c:39:4c:8b:fa:4e:fe:c8:0c:ca:10:99:36:
         5f:a6:fb:b2:b9:2c:23:9d:d3:54:37:94:c5:3b:e0:f2:3b:7d:
         6f:71:6f:ee:a2:7c:15:67:a9:2e:21:ed:fe:33:ac:b2:13:c8:
         1a:26:2f:40:3f:68:f5:52:2d:3f:2c:f2:df:ff:52:70:53:08:
         8d:18:0f:56:05:44:f8:9c:e7:0f:28:d9:ba:ee:1e:99:ea:d2:
         1d:d4:4d:1f:50:e5:e5:bf:e7:6c:26:d1:df:64:13:e5:25:49:
         12:ca:2c:ce:04:0f:e3:20:3d:ac:6d:93:3d:8f:5f:0f:c3:9e:
         5b:bf:c7:07:ec:1c:28:bc:2e:5d:2c:b9:59:e1:2f:39:2a:7e:
         9c:ec:da:2d:b5:11:11:58:40:98:95:42:77:39:e1:ac:8e:e6:
         fa:76:45:0c:d0:1e:61:ef:c7:46:10:26:96:1a:c9:24:e4:2c:
         21:d0:be:84:29:99:c5:8e:6a:21:89:96:a8:a6:dc:2a:79:fb:
         71:03:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:01 2025 by rpki-client