Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
File:                     Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json)
Hash identifier:          BtFcKhrGMX7hivjTbJVi+0tYKJbGKdA2xe2r3A0F0tY=
Subject key identifier:   32:96:36:BC:17:74:D0:6A:B7:64:99:64:BF:2F:A2:C6:BB:82:64:E9
Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF
Certificate issuer:       /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
Manifest number:          022F
Signing time:             Sat 31 May 2025 02:06:50 +0000
Manifest this update:     Sat 31 May 2025 02:06:50 +0000
Manifest next update:     Sat 07 Jun 2025 02:06:50 +0000
Files and hashes:         1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: WMtI/ShcMVNlLiBplebSPV6oS9OXOQ2CXxa+ogJ/WSo=)
                          2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl
                          rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF
        Validity
            Not Before: May 31 02:06:50 2025 GMT
            Not After : Jun  7 02:06:50 2025 GMT
        Subject: CN=683a643a-3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:cb:83:45:71:e1:83:0d:0a:0b:6d:f9:80:
                    fe:14:d2:16:57:95:73:e2:11:46:e7:0a:b7:86:16:
                    d8:21:0b:32:79:c6:e4:f7:de:63:9a:40:15:ff:ef:
                    f3:25:c8:39:bf:5c:7b:f0:29:83:4d:18:84:a8:9e:
                    e9:bb:af:3e:03:d1:05:d4:a3:31:91:8d:2e:a4:63:
                    e7:1b:f4:e1:9a:1c:04:a0:a7:6f:8c:62:eb:9f:8f:
                    db:4f:2b:34:8f:14:98:8b:d6:e6:40:07:fd:b2:a4:
                    b3:1d:c9:8f:5d:51:28:18:be:0f:c9:3b:2a:bf:45:
                    c1:3c:7f:99:c0:ec:01:e7:59:97:27:52:04:1e:c1:
                    2a:b1:38:8e:6a:90:06:39:6f:2b:7c:d1:d0:ef:a7:
                    dd:e4:65:7b:af:75:4c:ba:52:7c:b5:a2:9a:28:bc:
                    02:35:df:20:7c:6a:de:65:40:9a:60:c0:4f:9e:e1:
                    fb:b9:17:8b:b3:12:8a:68:58:5a:51:48:c6:02:91:
                    32:67:a3:35:b5:44:7d:2f:0d:a6:03:92:4e:c9:b6:
                    f7:82:4b:1e:7a:bb:21:ad:36:2e:b8:dc:2c:b3:84:
                    7e:ac:4d:b1:a6:ad:12:0e:d9:bb:41:01:31:2c:5b:
                    49:09:97:be:74:0d:a3:47:87:89:21:c7:f5:f9:57:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:36:BC:17:74:D0:6A:B7:64:99:64:BF:2F:A2:C6:BB:82:64:E9
            X509v3 Authority Key Identifier:
                keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:e1:3e:2a:81:70:32:74:60:e3:0d:a1:6c:1a:5e:71:30:
         96:cf:d3:ca:bb:e5:1b:20:7d:50:f2:6c:cd:15:d2:48:14:69:
         42:e4:70:41:45:44:f5:c1:87:a9:19:ce:40:6b:d9:cf:18:05:
         e5:25:01:9a:50:63:44:a4:46:c4:3a:ef:6b:99:a7:2b:8b:5a:
         83:e3:ff:d7:a5:0f:17:23:32:1e:82:5e:c1:15:d9:d6:41:86:
         26:7a:57:2e:6e:b6:11:1e:76:69:b8:cd:f5:eb:9f:19:4e:70:
         63:01:96:87:4a:b7:38:57:d7:2d:77:bb:97:35:aa:72:43:bf:
         39:f6:56:85:57:44:fd:f6:b6:98:cb:fa:ee:42:ff:03:23:1a:
         07:1f:ab:b4:28:ad:2f:c8:02:58:13:93:61:79:05:e4:16:df:
         31:d3:e9:c0:2c:67:96:74:bc:30:fb:bc:96:b5:ec:a4:4f:31:
         e2:07:a5:25:d7:22:79:76:10:0d:7a:99:68:ef:ad:74:97:49:
         0d:94:64:bb:44:8f:ed:b5:c6:ce:a1:c6:d3:b9:ee:41:f8:fa:
         b5:90:2f:20:b1:0a:44:87:92:f1:8c:3a:fd:a4:25:6f:63:29:
         0b:51:4b:86:43:67:59:0c:ad:2e:39:cc:35:88:bd:fa:c6:6c:
         09:ff:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:42:41 2025 by rpki-client