Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
File:                     wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json)
Hash identifier:          y28lzXgO4mw3vpzSGFjtKahTP9tY+sibNbGH4yaMI/4=
Subject key identifier:   84:E9:63:51:DB:05:74:84:9A:CD:B6:08:26:6A:60:22:C8:6E:8F:4D
Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
Certificate issuer:       /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
Manifest number:          BB
Signing time:             Thu 05 Jun 2025 05:16:21 +0000
Manifest this update:     Thu 05 Jun 2025 05:16:21 +0000
Manifest next update:     Thu 12 Jun 2025 05:16:21 +0000
Files and hashes:         1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: eAf6/z4th163xoTmJH0PFfnju8nbEKGS608pgThNwms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
                          rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 05:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
        Validity
            Not Before: Jun  5 05:16:21 2025 GMT
            Not After : Jun 12 05:16:21 2025 GMT
        Subject: CN=68412825-c3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:7e:20:2c:df:8a:64:af:fc:8e:45:35:f4:
                    a5:da:4d:67:20:58:fd:51:d8:b4:9b:8c:da:85:6c:
                    29:a6:60:d6:67:f4:84:2e:1c:83:9d:5e:1f:63:03:
                    3e:31:6e:43:2d:2a:c5:ca:e9:d5:66:ce:6d:a7:61:
                    50:b8:d0:24:95:77:8b:96:c0:94:4d:50:26:75:37:
                    e2:68:66:e7:5c:7a:c9:08:c3:58:0d:f7:ec:3a:bd:
                    b0:eb:d3:4c:a4:19:a1:e8:7a:f0:0a:41:f2:15:74:
                    0a:83:15:ad:c4:e2:89:e3:88:c7:59:26:5d:7e:e3:
                    ff:ca:8e:ae:c0:14:1d:af:35:8d:6a:5f:82:bc:d6:
                    9f:70:d0:b7:3d:7e:c9:b4:cc:67:a4:35:88:d0:c8:
                    8f:53:78:b5:1f:f0:59:f6:3b:4b:85:22:26:4e:73:
                    38:e5:35:a9:e7:46:0e:2e:7f:c1:58:5b:8f:a0:ca:
                    ff:42:e0:88:5c:7a:69:da:13:b1:61:1b:5e:cb:61:
                    13:c5:ff:e7:e8:b0:90:9f:21:f4:53:32:93:af:66:
                    b8:80:b2:d7:72:68:16:a4:1a:d8:f5:97:ac:e3:29:
                    a7:a3:23:89:f9:b8:37:a4:d6:1b:de:dc:8e:9e:6d:
                    73:e6:54:72:bb:7e:24:43:3f:ea:07:78:a9:e7:66:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:63:51:DB:05:74:84:9A:CD:B6:08:26:6A:60:22:C8:6E:8F:4D
            X509v3 Authority Key Identifier:
                keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:34:cd:a8:c2:f9:50:6c:0a:88:0a:3d:9b:69:22:30:55:e1:
         e2:37:24:1b:73:7b:1f:4c:1c:4c:8e:1e:50:68:b6:90:a1:3c:
         1c:a2:cb:92:2a:2d:88:06:21:32:33:9d:ee:03:48:77:4b:61:
         84:e5:31:52:61:ca:d4:02:32:db:96:e5:55:5b:5d:e1:5c:02:
         83:b3:ae:c7:62:6e:86:ec:4d:e0:32:6b:de:2c:8e:88:b4:e4:
         16:51:7e:2d:81:7a:de:c9:78:6f:ad:9e:5a:ef:d3:88:bb:38:
         0b:93:ce:49:94:5e:9d:4d:c2:90:db:3a:16:80:d6:b4:69:e0:
         d5:5d:8c:e8:0b:bc:45:bd:f8:ef:c2:c1:a9:43:63:0f:16:b5:
         5b:45:b4:20:3d:f1:b6:ad:e3:e2:65:83:36:3d:5c:e8:03:df:
         e5:7f:f1:c6:c3:94:09:11:b1:e5:12:1e:6f:50:69:64:8a:34:
         11:44:df:d4:df:b6:64:f1:24:f1:0b:8c:eb:7d:ae:67:68:5d:
         28:af:f1:d7:43:0c:4d:45:ba:d4:21:e9:88:62:5a:e1:2f:e6:
         91:03:ce:32:dc:2c:20:5c:2e:9f:ff:61:0a:06:ab:b5:54:58:
         48:32:57:e4:f4:93:c1:09:9b:5c:3f:ac:9d:51:cf:5a:49:83:
         ba:1f:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:37:30 2025 by rpki-client