Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
File:                     wVU6bzeV4xXosEZIGTV6VZhShds.mft (raw, json)
Hash identifier:          pYzDSgtZMi6J3PlYmnHVcKmMFlj1Li4SoQC+DELcnHo=
Subject key identifier:   40:D4:DB:A0:B5:E9:79:81:5F:AD:82:5A:41:7A:B6:42:55:89:D7:51
Authority key identifier: C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB
Certificate issuer:       /CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB
Certificate serial:       3486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
Manifest number:          3486
Signing time:             Sat 31 May 2025 14:35:48 +0000
Manifest this update:     Sat 31 May 2025 14:35:48 +0000
Manifest next update:     Sat 07 Jun 2025 14:35:48 +0000
Files and hashes:         1: wVU6bzeV4xXosEZIGTV6VZhShds.crl (hash: e1bqmJNOK9nL/sPOjZjrtQali7mAQQdoeCql+LIGZJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl
                          rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13446 (0x3486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164C0B, serialNumber=C1553A6F3795E315E8B0464819357A55985285DB
        Validity
            Not Before: May 31 14:35:48 2025 GMT
            Not After : Jun  7 14:35:48 2025 GMT
        Subject: CN=683b13c4-249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:ec:da:3d:96:47:21:1c:74:88:ce:55:81:
                    4f:ae:de:a2:49:94:a1:e8:4e:a0:10:f2:91:1a:06:
                    a9:2b:bf:0a:32:c2:ee:d6:e8:d3:88:4e:6e:71:3a:
                    33:df:b2:9e:cb:ea:9b:91:22:4f:89:77:b4:da:24:
                    1d:f7:42:83:21:d2:a5:e6:37:b0:ac:e4:7a:f3:39:
                    6a:92:90:95:a6:71:b8:b3:4f:4b:1d:bc:2a:85:ed:
                    61:c5:46:dd:9e:6e:42:a6:55:d6:66:0e:cd:cb:d5:
                    4d:2e:db:0b:36:01:3d:5c:4f:9f:f6:ec:a7:75:c5:
                    a7:b3:8e:43:ed:4b:df:46:e1:18:56:dc:5a:fc:83:
                    42:a3:09:d6:3d:ed:a4:5d:24:62:57:28:04:4d:16:
                    d1:7a:9e:0d:59:1b:48:64:0d:7a:bd:e9:76:dc:27:
                    12:22:a4:c5:bb:22:e1:05:08:12:da:1e:ea:1e:0b:
                    a5:36:eb:d1:0c:c9:29:ea:23:2e:3b:c6:0c:fb:27:
                    ed:a9:85:09:2e:31:96:9d:94:f9:2d:12:c7:b8:23:
                    0b:ec:a3:eb:c1:93:c6:4f:c7:08:fe:f0:2a:67:df:
                    5c:b5:2b:63:7b:b9:a0:41:db:98:00:c2:cd:27:ed:
                    80:16:85:16:ec:c3:0b:60:f1:01:6c:b8:3e:98:75:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:DB:A0:B5:E9:79:81:5F:AD:82:5A:41:7A:B6:42:55:89:D7:51
            X509v3 Authority Key Identifier:
                keyid:C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:be:52:1e:9b:40:3b:56:27:14:09:8a:df:de:84:d7:b9:
         1c:6f:97:72:c0:cf:82:da:b1:06:ca:1d:db:73:b6:92:20:5a:
         88:f9:5e:46:88:4e:46:fa:38:09:c7:51:af:48:a6:c9:0f:b3:
         09:3c:21:c0:b8:61:0e:39:46:c0:59:3c:f2:c7:84:8f:6c:2c:
         71:19:5c:f7:1b:2b:d2:68:98:ad:a2:83:82:59:ea:d6:1e:ac:
         4f:8a:51:14:18:a8:e6:a6:43:b3:ec:16:e2:38:53:b2:2d:16:
         bc:3f:c1:f6:94:44:93:ed:3f:f9:43:cb:66:5e:31:89:37:78:
         9a:a1:9d:fc:85:76:76:29:23:dd:2c:99:d3:fb:30:45:04:d6:
         1d:34:b2:30:3f:1a:27:bf:88:bb:90:13:6a:05:27:9f:50:c8:
         88:27:37:2c:fe:83:ba:dc:35:43:bd:f1:48:da:94:f1:dc:47:
         eb:52:d0:54:20:97:51:c0:47:35:73:71:29:21:99:9d:25:2f:
         3b:1f:71:d9:f3:d0:85:82:08:22:f3:b5:69:db:6c:fd:d0:7e:
         eb:a2:9f:a2:1f:9c:24:a9:60:5d:e6:6e:21:ba:5c:03:42:eb:
         c8:d9:ef:b1:0f:55:64:a8:39:1e:62:64:6a:15:c6:af:05:f5:
         30:a2:2c:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRDMEIxMTAvBgNVBAUTKEMxNTUzQTZGMzc5NUUzMTVFOEIwNDY0ODE5MzU3QTU1
OTg1Mjg1REIwHhcNMjUwNTMxMTQzNTQ4WhcNMjUwNjA3MTQzNTQ4WjAYMRYwFAYD
VQQDEw02ODNiMTNjNC0yNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvC/s2j2WRyEcdIjOVYFPrt6iSZSh6E6gEPKRGgapK78KMsLu1ujTiE5ucToz
37Key+qbkSJPiXe02iQd90KDIdKl5jewrOR68zlqkpCVpnG4s09LHbwqhe1hxUbd
nm5CplXWZg7Ny9VNLtsLNgE9XE+f9uyndcWns45D7UvfRuEYVtxa/INCownWPe2k
XSRiVygETRbRep4NWRtIZA16vel23CcSIqTFuyLhBQgS2h7qHgulNuvRDMkp6iMu
O8YM+yftqYUJLjGWnZT5LRLHuCML7KPrwZPGT8cI/vAqZ99ctStje7mgQduYAMLN
J+2AFoUW7MMLYPEBbLg+mHVDFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDU26C1
6XmBX62CWkF6tkJViddRMB8GA1UdIwQYMBaAFMFVOm83leMV6LBGSBk1elWYUoXb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEMwQi84MkQ4MzdDNjFE
OEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4WG9zRVpJR1RWNlZaaFNo
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dWVTZiemVWNHhYb3NFWklHVFY2VlpoU2hkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEMwQi84MkQ4MzdDNjFEOEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4
WG9zRVpJR1RWNlZaaFNoZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbpL5SHptAO1YnFAmK396E17kcb5dywM+C2rEGyh3bc7aSIFqI+V5G
iE5G+jgJx1GvSKbJD7MJPCHAuGEOOUbAWTzyx4SPbCxxGVz3GyvSaJitooOCWerW
HqxPilEUGKjmpkOz7BbiOFOyLRa8P8H2lEST7T/5Q8tmXjGJN3iaoZ38hXZ2KSPd
LJnT+zBFBNYdNLIwPxonv4i7kBNqBSefUMiIJzcs/oO63DVDvfFI2pTx3EfrUtBU
IJdRwEc1c3EpIZmdJS87H3HZ89CFgggi87Vp22z90H7rop+iH5wkqWBd5m4hulwD
QuvI2e+xD1VkqDkeYmRqFcavBfUwoixN
-----END CERTIFICATE-----
Generated at Sat May 31 16:52:13 2025 by rpki-client