Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
File:                     Wooi55jo9JLh-FhQOV63mFXso-U.mft (raw, json)
Hash identifier:          NIOR1/CHcJR2lxS7AqcLZR/SKt1KLVC9pS+BHvrhEcI=
Subject key identifier:   3F:70:79:DB:4F:20:18:64:BE:E4:83:AB:51:8A:59:4A:CA:5C:1D:87
Authority key identifier: 5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Certificate issuer:       /CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
Manifest number:          062D
Signing time:             Sat 31 May 2025 22:46:29 +0000
Manifest this update:     Sat 31 May 2025 22:46:29 +0000
Manifest next update:     Sat 07 Jun 2025 22:46:29 +0000
Files and hashes:         1: Wooi55jo9JLh-FhQOV63mFXso-U.crl (hash: aAZ+ipwRUwoDYNE2WZI2BQEUkiP+ZW46Xci/3SkXvU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 22:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
        Validity
            Not Before: May 31 22:46:29 2025 GMT
            Not After : Jun  7 22:46:29 2025 GMT
        Subject: CN=683b86c5-cc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:39:f3:c1:ed:26:8a:3e:62:99:97:17:5f:b9:
                    73:c0:dd:6e:0d:35:be:fd:c0:d6:39:8c:39:6b:4b:
                    39:82:a9:2a:b4:1e:81:c3:f1:2b:82:1f:b7:2e:1c:
                    4f:74:39:d1:c1:7f:49:3e:69:ba:dd:9e:6a:f6:b2:
                    97:08:0c:f7:36:8e:51:68:4c:ac:c7:15:53:25:47:
                    ed:75:ff:2a:fb:fd:69:f5:ca:ef:6a:97:ec:a2:4f:
                    11:63:78:05:b9:1f:62:01:9e:d6:c1:ca:b8:3c:cd:
                    6c:11:b3:f9:2a:f4:90:a7:d7:8f:18:b1:d5:51:89:
                    91:21:64:7f:00:f3:3c:0f:bc:2f:0c:d7:b4:49:38:
                    6b:0c:29:46:05:a4:59:7a:d0:77:bc:77:b6:09:69:
                    19:88:23:83:76:0e:a6:82:cc:7f:16:2e:20:5e:44:
                    63:57:46:04:76:7b:5f:88:1b:bd:b9:50:0e:00:d8:
                    e8:9a:d0:6d:a7:05:d3:31:d0:ae:fe:3c:86:d5:da:
                    5b:db:e6:05:ad:aa:30:7c:83:ed:2d:12:18:f7:3c:
                    a5:09:b8:ef:66:4e:5c:2b:61:fe:ec:fc:69:86:db:
                    8e:d5:10:8b:db:8d:76:4c:ad:2a:a5:54:ca:16:c0:
                    71:7a:5f:2d:58:cc:77:b7:d2:30:51:b5:55:98:88:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:79:DB:4F:20:18:64:BE:E4:83:AB:51:8A:59:4A:CA:5C:1D:87
            X509v3 Authority Key Identifier:
                keyid:5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:c7:70:38:85:18:e1:0b:02:61:5f:68:65:41:7e:d2:d8:
         f4:06:b5:f9:bf:d7:f7:98:20:a0:5a:8a:32:20:93:49:cd:07:
         61:65:f0:8c:93:10:1f:dd:a7:78:39:af:b7:52:11:67:10:cb:
         76:1b:d6:02:ce:a9:9f:28:5a:32:0c:a6:9a:df:51:1f:27:5f:
         ac:a6:14:d6:e7:10:8a:38:7f:42:c1:d2:9f:5b:dd:36:18:06:
         85:d4:12:45:48:49:16:a8:e2:d5:be:dc:e7:73:f7:74:f5:c7:
         82:e1:fd:ac:07:d1:32:48:ed:a0:0a:73:f8:3a:cd:3d:6c:55:
         b5:59:03:2f:8e:7e:f1:89:06:9b:f9:3b:85:73:6d:d3:4c:cd:
         58:5b:ca:1b:3b:bc:86:91:c0:1b:49:ea:59:e5:66:b5:36:c3:
         6f:47:9b:78:58:66:85:87:f5:d2:a2:49:1f:5d:f3:ca:1e:13:
         46:09:63:8d:6b:10:bd:f5:03:87:c2:1b:19:18:a8:74:eb:bf:
         5a:f2:1f:4c:43:88:1e:82:45:20:ce:d1:f9:0e:4f:fa:9b:8d:
         7a:be:47:06:dd:aa:91:19:9f:0b:15:f5:10:b9:4c:be:cc:91:
         8a:62:f2:8f:9b:42:04:89:8a:57:ac:0a:92:34:09:5a:89:62:
         b5:f7:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 22:02:12 2025 by rpki-client