Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          /xvSUohA0Duq2LU8HJE1dHcE/3BJlRpJLI033K561O0=
Subject key identifier:   79:B6:B9:7A:94:75:9F:73:5C:7E:71:96:48:1F:ED:A5:7B:34:7B:29
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          61
Signing time:             Tue 03 Jun 2025 06:54:36 +0000
Manifest this update:     Tue 03 Jun 2025 06:54:36 +0000
Manifest next update:     Tue 10 Jun 2025 06:54:36 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: pZfT31CdQVMxH+Z0/OVYRB8+DpReHpAwn2R3+VkjdpE=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Jun  3 06:54:36 2025 GMT
            Not After : Jun 10 06:54:36 2025 GMT
        Subject: CN=683e9c2c-6bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:48:c5:19:6f:5d:fa:fa:3f:27:a6:50:04:
                    60:c7:52:72:a1:38:61:13:67:d6:df:5e:eb:bf:eb:
                    e0:24:ed:6d:f9:bc:c2:01:df:54:f3:12:75:7b:00:
                    7e:55:65:a4:6b:7f:82:fe:a6:1e:eb:67:d8:bd:7f:
                    95:d3:d2:5f:e8:af:76:84:4c:4b:91:3c:75:ab:3e:
                    75:55:c3:90:6c:cf:e9:db:7f:13:9e:8a:3e:c1:b1:
                    73:92:d8:c0:45:2a:13:1f:75:0d:ab:cd:9c:c6:b0:
                    87:c3:bd:35:76:0e:b6:e1:b9:cc:17:2e:91:cd:36:
                    f9:5c:14:d4:07:38:31:d0:34:49:dd:09:22:45:7b:
                    77:f8:e4:75:a6:a2:0e:8e:ba:60:0e:0a:4b:c8:f9:
                    24:50:37:e7:1e:5d:43:c6:68:47:2b:2b:76:86:ff:
                    89:49:b1:1b:36:4e:30:3e:1c:97:0d:c4:78:6f:8c:
                    0d:d8:a1:f0:78:7f:3b:2d:22:39:31:ed:6d:d3:c3:
                    a0:ee:da:cd:18:09:82:b8:de:d8:35:3f:fd:38:a0:
                    95:74:f2:23:87:c0:c5:61:36:73:fd:15:97:b6:8b:
                    6e:5e:12:5f:a0:81:b7:be:4f:93:11:96:b1:d4:43:
                    5e:3e:6c:99:06:3b:e1:22:7d:c9:b2:80:e2:a5:10:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:B9:7A:94:75:9F:73:5C:7E:71:96:48:1F:ED:A5:7B:34:7B:29
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:66:cc:57:03:c0:0a:b8:5c:9d:a0:e0:28:00:a8:ee:ad:
         34:1e:6d:9d:fe:39:c2:f5:8e:43:0d:5a:af:95:96:43:a3:17:
         c7:0b:ab:f5:74:1a:ed:a8:9b:31:53:f1:31:fb:a2:83:c1:d6:
         fa:0c:83:9c:37:1c:b3:13:5c:ba:b3:37:17:2d:c4:15:8d:33:
         b5:b2:50:a3:df:f3:7b:2c:8b:43:3b:e6:06:84:c5:1e:46:c5:
         99:76:16:9f:d7:49:8c:a8:ef:f0:81:22:6a:7b:e4:5b:2a:44:
         aa:17:81:38:6d:30:26:9f:da:2c:6a:7d:02:c3:84:30:2f:1e:
         e8:65:f6:84:5e:86:05:79:9f:bc:43:0b:be:a3:17:b8:fd:50:
         a4:3c:79:fa:41:3f:c2:d1:db:8e:1c:33:6d:85:9c:ea:be:2a:
         08:6b:6d:49:d9:0c:28:8e:bc:18:4c:0f:e6:bf:12:e4:3d:8a:
         59:f3:29:14:53:d7:31:b2:a8:46:98:0b:c0:a9:65:cb:a5:5b:
         3e:64:28:77:d9:c3:e5:5a:cb:63:93:6a:6b:49:ec:aa:f3:b2:
         db:49:bf:df:e1:d8:98:4c:9b:81:b5:a6:37:a1:c0:f4:20:2b:
         06:7e:e8:cf:c0:77:c4:16:5e:ca:97:49:c4:dc:bb:a7:4f:8d:
         f1:c0:6a:89
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RjNBMjExMC8GA1UEBRMoQzIzREZDMjY5NzM5NDE4RkE1NzkyMUY4RDI5MDVCQTE2
NzQyRkM0RDAeFw0yNTA2MDMwNjU0MzZaFw0yNTA2MTAwNjU0MzZaMBgxFjAUBgNV
BAMTDTY4M2U5YzJjLTZiY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIIUjFGW9d+vo/J6ZQBGDHUnKhOGETZ9bfXuu/6+Ak7W35vMIB31TzEnV7AH5V
ZaRrf4L+ph7rZ9i9f5XT0l/or3aETEuRPHWrPnVVw5Bsz+nbfxOeij7BsXOS2MBF
KhMfdQ2rzZzGsIfDvTV2DrbhucwXLpHNNvlcFNQHODHQNEndCSJFe3f45HWmog6O
umAOCkvI+SRQN+ceXUPGaEcrK3aG/4lJsRs2TjA+HJcNxHhvjA3YofB4fzstIjkx
7W3Tw6Du2s0YCYK43tg1P/04oJV08iOHwMVhNnP9FZe2i25eEl+ggbe+T5MRlrHU
Q14+bJkGO+EifcmygOKlEAKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeba5epR1
n3NcfnGWSB/tpXs0eykwHwYDVR0jBBgwFoAUwj38Jpc5QY+leSH40pBboWdC/E0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzVGODQ1Q0VBQUU0
OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19F
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd2ozOEpwYzVRWS1sZVNINDBwQmJvV2RDX0UwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
M0EyLzVGODQ1Q0VBQUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVkt
bGVTSDQwcEJib1dkQ19FMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKCoZsxXA8AKuFydoOAoAKjurTQebZ3+OcL1jkMNWq+VlkOjF8cLq/V0
Gu2omzFT8TH7ooPB1voMg5w3HLMTXLqzNxctxBWNM7WyUKPf83ssi0M75gaExR5G
xZl2Fp/XSYyo7/CBImp75FsqRKoXgThtMCaf2ixqfQLDhDAvHuhl9oRehgV5n7xD
C76jF7j9UKQ8efpBP8LR244cM22FnOq+KghrbUnZDCiOvBhMD+a/EuQ9ilnzKRRT
1zGyqEaYC8CpZculWz5kKHfZw+Vay2OTamtJ7KrzsttJv9/h2JhMm4G1pjehwPQg
KwZ+6M/Ad8QWXsqXScTcu6dPjfHAaok=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:03:32 2025 by rpki-client