Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          P91xleIWBdp+rhnCG/FQwTjZDcJ1tTQhWssaaYqsTFI=
Subject key identifier:   CC:5B:2A:69:DF:27:D4:A2:A0:E3:65:9B:82:4C:DE:4B:E4:1B:EA:C6
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       0563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          055E
Signing time:             Sun 08 Jun 2025 22:58:53 +0000
Manifest this update:     Sun 08 Jun 2025 22:58:52 +0000
Manifest next update:     Sun 15 Jun 2025 22:58:52 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: 1GksOdd4Vlp/BNS10hQwNdUQj8Lj1LG3y4rsNk022CY=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Jun  8 22:58:52 2025 GMT
            Not After : Jun 15 22:58:52 2025 GMT
        Subject: CN=684615ac-d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:af:d3:79:d8:8d:80:15:25:11:b0:89:5b:
                    d2:20:ae:e3:ad:ca:64:72:af:10:4d:df:e4:97:51:
                    00:1b:a8:86:db:d6:5e:b8:c2:c7:47:a9:ce:34:10:
                    46:19:79:8f:52:e2:c2:af:89:48:c0:02:d6:9f:7e:
                    4f:ec:86:de:96:18:91:93:51:ed:0b:4d:8f:b7:39:
                    7d:49:3b:bd:5e:c6:1d:12:e6:8e:50:1e:43:3e:7f:
                    8a:30:03:04:a1:dd:8c:09:07:6e:ef:a1:9a:3e:b5:
                    b2:04:04:f0:85:cc:7b:72:b4:81:2f:01:9b:39:20:
                    14:40:fd:56:2d:7c:2d:be:88:46:08:11:7d:a3:6d:
                    25:9c:c0:9c:c2:71:f7:b0:5d:25:ea:d9:91:f6:d0:
                    f7:0f:92:9b:f5:01:7b:3a:cf:94:7c:cb:3e:84:7d:
                    54:fd:df:69:45:0d:06:e8:37:47:ee:f2:a1:6c:e2:
                    7e:82:b9:62:74:df:8f:f8:2a:1a:f8:7d:90:37:68:
                    31:05:2c:38:1a:5c:a9:fe:0a:17:e3:50:a9:1e:fd:
                    02:a3:83:4d:e7:57:f4:4e:47:bf:e2:21:74:9e:23:
                    06:bc:08:ca:71:15:7c:c4:e7:2c:3d:90:60:07:83:
                    a3:60:63:69:4a:00:2c:22:cd:fd:40:21:db:ec:b2:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:2A:69:DF:27:D4:A2:A0:E3:65:9B:82:4C:DE:4B:E4:1B:EA:C6
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:c3:2c:c9:17:63:84:8d:04:b3:ea:07:0e:dc:63:9d:48:
         78:0d:fb:c2:c4:08:eb:81:01:b5:11:6d:b1:52:ac:c0:81:a8:
         c5:ce:63:4f:9e:0c:31:cf:6c:80:60:f2:6d:bd:b5:26:4b:6b:
         f4:c5:33:a2:57:e1:1f:2c:94:8c:7a:21:d4:92:25:0d:37:08:
         9f:a1:44:32:24:88:54:ef:2f:b9:41:53:be:be:c0:30:af:e2:
         ed:e4:8a:f5:a3:26:6f:46:46:d9:e7:8a:ce:d2:96:16:3e:c9:
         f3:bf:f6:aa:3b:17:82:75:07:f7:c2:78:78:f9:ab:1b:a1:80:
         ce:d7:fa:f0:b8:ba:a7:c6:6e:c7:d9:58:07:e5:db:96:ac:5a:
         c5:95:b3:08:33:a1:a7:bc:e7:a7:bf:42:1e:09:5a:ab:73:a4:
         54:44:c5:43:6f:8d:aa:60:33:ea:45:3f:7d:41:f3:e4:dd:9f:
         4b:23:b6:42:87:0f:68:de:96:d7:ff:e1:c7:bf:99:9b:14:d9:
         4e:f9:c3:e4:f2:53:2d:6d:4b:fc:e0:06:bf:db:90:ad:70:72:
         89:67:a2:cb:0d:a6:f4:0b:b5:02:6c:b8:34:e4:1e:0a:49:00:
         16:cc:08:b5:76:08:bf:4a:66:4f:06:f3:1b:d2:1b:71:1f:87:
         ca:4e:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:51:25 2025 by rpki-client