Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
File:                     WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json)
Hash identifier:          dwkhq33D27RxEgickGOgGN07n/D6MICXAtPZ88nmS9w=
Subject key identifier:   56:7A:BB:75:BC:0D:47:E6:1F:AF:35:34:B8:6F:DE:85:9E:05:C0:03
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
Manifest number:          E5
Signing time:             Sat 31 May 2025 05:01:44 +0000
Manifest this update:     Sat 31 May 2025 05:01:43 +0000
Manifest next update:     Sat 07 Jun 2025 05:01:43 +0000
Files and hashes:         1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: 40md6DsvtTUuYTivADZ96+nLBleCOWU3XkGtzT7LXWQ=)
                          2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: 9yKuVeku78GalBmu1IDdWmb+Ncr/r5STqW93UMJtxuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: May 31 05:01:43 2025 GMT
            Not After : Jun  7 05:01:43 2025 GMT
        Subject: CN=683a8d38-2644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:dc:a6:e6:12:1e:8e:b8:e0:de:4b:f6:cb:
                    de:60:42:0c:fe:f2:03:29:6d:a4:cd:68:50:57:ca:
                    de:88:de:45:39:88:8e:d9:de:cf:9c:eb:c0:16:87:
                    05:29:36:2d:7a:f1:49:96:d5:ee:49:23:31:4c:19:
                    73:f4:3f:2e:f1:d2:42:58:a0:b8:88:84:4a:db:5d:
                    d1:c4:f4:0c:ca:75:25:84:69:ee:98:d0:26:b7:7b:
                    c2:34:94:4e:b8:33:e6:0e:85:a2:2c:40:dd:1d:85:
                    ff:7a:9c:f0:b8:7d:35:1a:6a:1b:7d:50:3b:76:9e:
                    b5:80:ca:39:8c:c7:52:4f:4f:4d:35:7d:1a:6b:4f:
                    b0:29:67:d7:2c:cf:57:db:db:db:fd:67:2e:e9:6f:
                    83:34:8f:2d:e1:08:58:4a:15:27:b1:5c:c8:47:21:
                    e9:d1:f5:52:6b:bf:84:df:fe:01:0c:7d:56:c2:3b:
                    77:09:cb:11:d7:48:43:34:ee:4b:93:64:77:11:2c:
                    de:32:29:c8:4a:71:29:ed:13:0f:70:c7:9a:28:bb:
                    bf:ac:8b:89:e1:dc:9d:29:75:27:96:0b:31:a2:3d:
                    47:49:7a:40:22:75:6d:41:89:5f:b8:58:8e:c9:13:
                    00:d6:cd:5a:9c:30:a2:13:6e:10:a1:40:49:91:78:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7A:BB:75:BC:0D:47:E6:1F:AF:35:34:B8:6F:DE:85:9E:05:C0:03
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:d7:88:c8:b2:62:e4:2f:b3:7f:ae:e8:0f:df:84:bc:42:
         7a:2e:07:ef:53:70:e5:c4:69:e6:02:a4:b7:db:36:66:ab:41:
         19:6f:55:de:83:e2:9e:0d:03:57:bf:18:cb:be:1d:78:8d:5a:
         71:9d:91:fc:69:ea:9c:66:b1:fe:71:31:52:95:77:2d:ca:6f:
         65:96:0c:d1:eb:2e:b5:d9:40:db:f0:43:00:31:10:30:16:d4:
         3d:41:33:e2:af:07:b9:b8:8a:03:67:a0:69:51:b9:7a:5c:dc:
         10:3d:c6:81:7f:ff:22:d8:12:83:5f:04:91:6e:69:ca:80:ad:
         66:72:52:80:ec:12:93:6d:21:dc:f6:69:af:7e:e5:f3:25:7c:
         68:84:26:48:a8:38:bf:1a:5f:a7:b1:20:67:36:ed:f9:82:5b:
         34:80:66:de:4c:f6:0d:88:9f:8a:85:bb:d7:1a:87:75:56:ab:
         84:77:6d:00:6e:a6:9a:a9:5c:cd:7b:2e:dc:bc:1e:be:68:f4:
         c6:3f:56:1a:5b:1c:b5:ba:63:0e:da:0c:ae:51:d7:a1:4f:c3:
         68:13:f9:db:f0:cd:66:ff:72:f9:f4:1e:9b:6f:22:44:7f:0e:
         4e:58:46:3a:20:ae:93:00:1a:1f:3f:9a:d6:8b:9d:07:0b:c6:
         10:b4:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:27:01 2025 by rpki-client