Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File:                     wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier:          HsWV4qFpwZ4EJmqdDXqTYMNsHR0vA2oawgIjcY+nV+k=
Subject key identifier:   66:1F:74:E0:F5:8A:B1:1E:E3:20:0D:90:F1:9B:6A:79:AB:0F:16:45
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer:       /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number:          AB
Signing time:             Wed 09 Jul 2025 07:01:00 +0000
Manifest this update:     Wed 09 Jul 2025 07:01:00 +0000
Manifest next update:     Wed 16 Jul 2025 07:01:00 +0000
Files and hashes:         1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: C/py+gSRxa9gMrCB6fBoMAKw9nafc9gGH+/HzIh7GVQ=)
                          2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Jul 2025 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
        Validity
            Not Before: Jul  9 07:01:00 2025 GMT
            Not After : Jul 16 07:01:00 2025 GMT
        Subject: CN=686e13ac-b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:60:27:fa:e8:7e:29:fb:0f:83:fc:4d:7c:
                    f7:4c:ea:75:d1:e6:c6:0a:03:c6:b2:dd:3f:77:13:
                    5b:46:83:c3:80:9f:83:5c:cc:74:7e:16:91:3b:65:
                    d3:cb:d0:4c:dc:d4:92:f5:12:fc:ab:29:89:a3:56:
                    c8:5c:41:8c:58:8b:e2:42:e3:22:90:71:18:05:b1:
                    c0:88:b0:f4:21:5b:48:be:f4:d9:04:67:97:89:a7:
                    b9:1b:80:c0:b0:a0:a8:fb:42:3a:8c:27:0e:57:21:
                    1c:47:1a:4f:15:b7:30:c4:48:62:c2:d8:d8:67:fb:
                    ae:1e:34:52:a7:e7:ef:74:34:c8:15:4e:8c:67:a4:
                    9d:cf:39:d7:15:01:56:69:39:0b:89:6d:57:a5:20:
                    ab:db:d1:6e:c3:9c:1a:62:fe:0a:35:3e:61:ee:7f:
                    48:d9:c4:8e:bd:05:13:98:4a:0e:47:fb:e9:4a:e6:
                    c4:c5:8a:12:f6:98:8d:db:ac:73:7d:96:03:97:bb:
                    ff:ac:e1:fe:e7:84:62:27:c9:8f:84:b7:0d:ca:f5:
                    6f:4a:3b:a3:17:ff:be:59:8b:4f:f3:e5:14:43:6c:
                    85:4b:01:50:37:18:ff:b8:e6:e6:78:69:7f:60:96:
                    86:2d:6c:70:17:ae:24:12:76:1c:ce:4d:79:32:7c:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:74:E0:F5:8A:B1:1E:E3:20:0D:90:F1:9B:6A:79:AB:0F:16:45
            X509v3 Authority Key Identifier:
                keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e1:03:21:82:df:34:06:01:ac:88:12:22:d1:70:b6:c5:45:
         1f:90:f7:3c:6e:ae:ee:18:fb:aa:f9:fc:dc:1d:58:2d:07:ae:
         45:83:1f:11:46:72:e5:a2:da:0b:60:97:b1:1b:6d:9c:b5:85:
         bc:9e:81:f2:d5:4a:33:1c:ee:91:22:f3:69:77:f8:cf:d8:37:
         5d:d8:e0:c2:7f:bc:7b:ec:7c:ea:f9:7c:04:5b:2b:6e:cf:c0:
         7c:54:01:af:e0:0f:7d:23:ba:82:4c:d4:a2:c3:64:f3:7b:b0:
         ed:5b:ae:f1:cc:39:25:7b:33:b2:56:93:16:b3:ff:10:59:f8:
         e7:71:bd:e3:63:cd:e2:fc:eb:a1:af:51:02:04:9d:15:b1:39:
         f5:80:17:0a:e4:72:79:66:9f:42:b0:7d:25:29:8d:0b:17:06:
         17:19:93:0a:e6:59:1a:8e:de:82:a9:4b:d7:51:e5:e1:8f:f3:
         b2:de:6b:86:0d:73:c3:83:a0:b3:46:8f:21:56:a4:14:3b:12:
         9c:9f:11:72:46:62:da:08:33:b7:45:a1:a5:d3:5d:cb:bf:a3:
         aa:74:bd:8d:8b:99:cc:2d:b0:48:aa:68:69:07:0c:ea:9d:a5:
         a6:9a:3f:58:5a:ae:ac:73:f5:5e:47:a0:6b:5f:e5:42:82:10:
         9e:88:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 09:05:38 2025 by rpki-client