Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          z+MfePOakogAkcMheCR8sI2ejwpyhu8dnQ9N3cmJ/x4=
Subject key identifier:   99:34:80:CE:9A:80:95:CF:40:5D:16:B5:B8:3B:11:55:85:3C:59:7A
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          67
Signing time:             Sun 01 Jun 2025 06:42:53 +0000
Manifest this update:     Sun 01 Jun 2025 06:42:53 +0000
Manifest next update:     Sun 08 Jun 2025 06:42:53 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: pcGPmpm8X1YuvE2Fv+OD8Pcns8MQ0omI2JTZKiTqL2A=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 06:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Jun  1 06:42:53 2025 GMT
            Not After : Jun  8 06:42:53 2025 GMT
        Subject: CN=683bf66d-7223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:3e:9f:8a:a5:b2:31:7f:a6:e1:92:d6:fa:
                    82:81:e0:ba:73:b6:60:c7:17:5b:e7:ae:dc:d5:da:
                    be:32:77:7b:f7:25:fe:6f:4a:07:81:df:bc:ad:60:
                    b0:3c:73:50:9f:c6:07:e1:af:6d:a4:8a:55:66:f4:
                    1e:1e:8b:92:07:f5:8c:02:af:35:bf:75:81:a1:68:
                    65:2e:01:02:36:71:11:88:6c:48:03:e2:bd:f4:6d:
                    61:2d:b8:e6:a7:47:5b:5d:d0:08:22:99:eb:1c:0e:
                    d1:6a:9a:1c:e6:a6:65:5a:be:51:2e:ec:de:fc:2e:
                    fd:3f:d4:cd:a1:81:8c:d2:88:1d:6c:4f:b5:c8:14:
                    11:d2:a1:28:83:f7:21:48:1d:87:b4:a9:07:35:68:
                    3c:70:e1:1e:ba:90:cc:8a:ab:d2:26:cc:68:c3:8d:
                    72:de:bd:6d:9c:76:3f:9f:c9:72:4e:db:bf:7b:65:
                    06:ea:46:16:6c:74:d6:42:38:e7:e0:b6:03:d6:2a:
                    e4:cd:98:b0:cf:0b:ef:ef:6d:aa:b1:73:90:4d:f0:
                    2b:e5:a6:5d:69:dd:23:a4:45:fb:ea:cd:c0:2a:bc:
                    a1:dc:98:64:29:a1:75:51:8d:3e:e8:eb:b8:4c:19:
                    0c:fd:2d:c3:d0:5d:dd:ae:d7:ca:7e:51:62:df:c0:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:80:CE:9A:80:95:CF:40:5D:16:B5:B8:3B:11:55:85:3C:59:7A
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:a0:1b:86:0a:c8:5b:64:ac:b4:72:2e:17:15:ce:14:18:
         38:aa:35:ba:f1:83:db:cd:5d:87:a8:ce:b5:f3:52:0b:8e:ee:
         5e:d2:63:7a:0d:4f:42:5c:3d:ec:bf:bc:4b:9c:36:9b:70:d9:
         d4:25:64:af:0f:93:be:76:15:24:22:e6:7a:0c:5f:bf:c9:ab:
         71:b4:54:c0:bd:40:31:26:9d:55:48:38:8c:68:4b:d7:b2:3f:
         22:c6:6b:54:62:04:c4:7a:81:d2:f9:e6:53:f4:0b:5e:4c:93:
         68:41:1e:4c:f7:5b:85:26:51:96:a7:85:10:f8:ab:a1:2f:51:
         bb:ef:a0:f2:76:08:4b:3d:8a:7e:d1:c5:22:81:73:cb:64:b1:
         99:0e:ef:fe:57:88:db:6d:8a:77:18:39:8e:f3:61:31:65:ff:
         4d:f9:a2:de:1e:eb:27:6a:4d:df:7a:c7:54:e3:f4:d9:a2:ea:
         a1:6c:2f:9e:a7:c4:3a:ce:c1:31:9b:7f:59:11:44:0c:34:5a:
         b9:ba:64:65:ad:f4:9a:2d:33:c5:c5:fa:ff:2f:9a:bf:84:0d:
         b6:81:61:ad:df:1e:7a:49:05:23:06:c8:89:9c:b8:12:20:e2:
         fd:c8:6f:de:88:78:04:e7:d2:23:07:31:4b:bb:4a:c5:0d:50:
         90:18:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 21:12:43 2025 by rpki-client