Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
File:                     WH54lgJQA6zQwpt_PymgcI9rKGo.mft (raw, json)
Hash identifier:          q0V3naD2UrNRF5NF5PzPZfiADzMdDI/IfTq4PPtI1ZI=
Subject key identifier:   36:5F:F0:08:DC:77:CA:AC:51:FE:4A:5E:B1:74:DD:28:DA:77:14:78
Authority key identifier: 58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A
Certificate issuer:       /CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
Manifest number:          07E7
Signing time:             Tue 10 Jun 2025 20:54:14 +0000
Manifest this update:     Tue 10 Jun 2025 20:54:14 +0000
Manifest next update:     Tue 17 Jun 2025 20:54:14 +0000
Files and hashes:         1: WH54lgJQA6zQwpt_PymgcI9rKGo.crl (hash: nQGJ7Zudi63ZBwqda1L/Vx3RVN6tD8OIKDAa14yu7SA=)
                          2: 909B1B4AF08211EA87323C3AC4F9AE02.roa (hash: jqonIYPAIQthnkCgLl2o39RfU+ULMVx6aAHFKaXLR6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl
                          rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 20:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CC16, serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A
        Validity
            Not Before: Jun 10 20:54:14 2025 GMT
            Not After : Jun 17 20:54:14 2025 GMT
        Subject: CN=68489b76-6de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:eb:7f:70:49:1d:73:d3:37:d2:82:3f:6f:cd:
                    8b:99:0f:53:61:fb:63:10:fe:c9:87:46:d4:66:b0:
                    38:e2:36:a9:22:9c:bf:6c:04:65:34:f1:f5:19:b7:
                    5b:19:45:87:3f:27:2d:64:2d:92:7b:78:94:1c:ab:
                    ee:09:24:b6:7c:b1:3e:d4:9a:df:c6:05:ba:52:dc:
                    e2:7f:df:f1:c5:ab:09:91:de:26:eb:05:eb:d6:16:
                    0d:13:ee:e5:8b:c8:ba:7b:b2:c0:42:18:5a:59:05:
                    ba:5a:b7:93:61:5d:55:bb:eb:1c:a8:cf:b0:34:2a:
                    74:be:f0:b3:cd:a1:28:36:bc:66:d4:cb:cc:fb:0c:
                    10:03:dc:76:4f:a9:a4:dc:04:7c:e6:10:3f:bc:7d:
                    93:af:3e:f7:34:22:7f:2c:ce:36:bc:0f:0a:9e:43:
                    c2:11:77:98:84:36:6b:b5:f4:54:08:ce:29:88:64:
                    aa:c1:ff:c7:ff:31:f4:d2:17:1c:af:97:1d:a9:c8:
                    a3:5c:b9:1d:e3:10:05:52:a0:24:aa:a1:5f:3c:3b:
                    79:72:ef:75:be:f7:3e:3b:a8:fb:76:3f:45:84:de:
                    3c:2b:6e:94:ce:50:80:79:77:01:36:a9:fb:66:94:
                    9f:66:9a:e3:4c:44:35:2a:7d:ff:0c:9e:82:25:44:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:F0:08:DC:77:CA:AC:51:FE:4A:5E:B1:74:DD:28:DA:77:14:78
            X509v3 Authority Key Identifier:
                keyid:58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:64:0b:0a:57:a6:65:82:2d:5e:1a:2a:0f:fc:74:d1:ad:
         0d:96:01:97:e8:10:1d:48:96:92:00:51:62:3b:30:36:9d:ee:
         4c:00:ec:f2:0b:26:c7:69:07:bb:8c:25:e0:74:b2:47:01:91:
         24:38:7e:51:a8:fc:d5:84:b2:ee:c9:3c:35:84:ae:09:c9:db:
         f8:04:77:bc:47:78:c4:be:3e:f5:3d:b6:6b:e8:2f:9f:e9:52:
         86:17:3f:1d:25:17:63:b3:bb:68:3a:72:89:27:bd:d0:d6:d9:
         07:18:f1:6e:43:2b:7c:e9:7d:11:4f:43:c2:4d:80:97:55:43:
         50:a5:b6:7c:63:53:2c:e7:df:84:a1:b2:b4:64:63:55:97:55:
         ed:cf:48:e9:2e:53:13:14:5c:2b:3f:81:42:89:82:74:a1:0e:
         69:79:27:c6:2f:f0:d2:34:17:96:07:d1:c6:be:ac:84:81:e5:
         56:74:cd:14:97:b6:be:f9:32:26:6a:8d:b6:d6:65:04:8a:c5:
         b4:58:ca:f7:39:fe:62:83:12:b9:4b:18:ea:76:0f:f4:66:78:
         1a:82:17:14:8f:3d:28:99:c4:2b:0e:18:5a:77:08:4c:7c:71:
         28:ca:1c:55:e0:8b:8c:30:16:70:52:79:10:2e:07:1c:ba:64:
         66:46:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:42:08 2025 by rpki-client