Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
File:                     Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json)
Hash identifier:          hkIxZ+tNCCb29/dy/hYB3dP6V9wXkqfgvodqbsDeYlY=
Subject key identifier:   B6:E8:B3:D4:6A:00:68:AC:B6:D3:7A:8D:A4:EC:45:BE:2C:42:30:ED
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Certificate issuer:       /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
Manifest number:          0330
Signing time:             Sat 31 May 2025 01:16:27 +0000
Manifest this update:     Sat 31 May 2025 01:16:26 +0000
Manifest next update:     Sat 07 Jun 2025 01:16:26 +0000
Files and hashes:         1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: /baO61sX7iCL7qvJD6qnlgnCPNeM14QEqRGnxS5PhGI=)
                          2: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=)
                          3: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
                          rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
        Validity
            Not Before: May 31 01:16:26 2025 GMT
            Not After : Jun  7 01:16:26 2025 GMT
        Subject: CN=683a586a-5211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:8e:7c:e4:b1:f4:7f:a2:f9:ea:04:e1:eb:
                    ac:22:ad:e8:2d:be:aa:73:f1:91:46:ad:a9:d8:f8:
                    22:84:bb:7d:40:aa:83:6d:82:1b:71:4e:22:98:c0:
                    4a:45:79:81:01:de:8b:f0:ec:83:6b:89:fc:fe:cd:
                    34:67:db:bc:61:32:6b:9d:79:61:58:67:5a:d4:fe:
                    db:24:44:c4:97:14:27:7c:6a:e0:b4:9c:34:9f:c1:
                    19:0f:54:75:b8:03:01:cb:d5:f2:69:9c:65:b2:6c:
                    e6:be:ce:ed:b0:15:f7:b4:07:26:2c:59:c4:6b:15:
                    dd:c2:fa:3f:ef:60:3b:9e:fb:2b:47:55:9a:e5:95:
                    59:a0:36:dc:6d:2c:d2:58:b2:94:ec:30:14:d4:56:
                    9d:62:74:d8:28:35:9a:1a:73:82:40:cb:20:2e:17:
                    d2:1a:4f:f5:f5:46:ce:ca:29:51:9f:61:1d:7c:c3:
                    f7:ed:89:5f:d4:27:87:a6:b1:8e:d2:b1:75:16:c5:
                    88:ae:cd:9e:57:5c:3f:07:73:97:a3:88:1b:2b:00:
                    99:fc:c7:a5:0d:31:78:0c:ec:a4:3f:d7:a6:8a:ac:
                    85:49:67:26:39:d3:bc:e6:9e:58:85:4a:71:43:fa:
                    24:c2:e6:29:53:99:3c:03:81:29:81:57:82:30:79:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:B3:D4:6A:00:68:AC:B6:D3:7A:8D:A4:EC:45:BE:2C:42:30:ED
            X509v3 Authority Key Identifier:
                keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:60:3b:ad:21:2d:52:53:1b:9f:a4:e5:ff:c9:a5:75:c0:
         a8:60:4d:68:aa:cc:44:36:ba:5d:f4:1e:f9:ef:55:99:e7:03:
         9c:83:c8:a2:90:47:5d:12:1a:28:df:a1:e7:f9:ed:40:72:7c:
         83:8c:5d:47:62:d1:15:76:11:06:69:c3:64:9c:04:5c:7e:a4:
         ff:9b:62:69:71:b2:f6:04:0d:fa:45:3a:06:9c:50:b3:f0:f0:
         a9:e3:4f:de:90:dc:4c:a0:87:17:b3:ae:38:55:4b:72:2e:5e:
         fe:1d:7f:52:f8:c3:0f:e3:c2:4c:41:7b:38:92:f2:fc:cf:97:
         01:17:a0:38:30:32:00:2d:ad:53:28:ae:79:b8:aa:9b:83:f0:
         62:78:9a:9e:c0:0c:4e:e6:ca:e0:29:f8:18:5e:da:55:73:70:
         f1:e8:6c:a2:05:97:18:c7:ad:26:cd:b2:f1:55:e7:3c:cb:43:
         e5:b0:d5:29:65:53:df:56:6d:44:6c:f6:8a:31:32:85:5b:82:
         9d:88:fa:29:2b:1e:cb:a6:79:52:51:67:39:7d:a0:d8:76:d1:
         55:99:33:2c:14:e4:d9:c3:47:cd:1e:7f:c7:e5:7b:89:97:cf:
         e2:fd:49:00:45:b6:87:3d:e9:38:cf:77:43:23:e4:59:f1:c6:
         8e:b8:9d:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA2QzIxMTAvBgNVBAUTKDVCMEJCQzg0QjVDQkQxNUMzMEQ5MDE0MjcwNjUyOENG
MTkwMTA1NjgwHhcNMjUwNTMxMDExNjI2WhcNMjUwNjA3MDExNjI2WjAYMRYwFAYD
VQQDEw02ODNhNTg2YS01MjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1P2OfOSx9H+i+eoE4eusIq3oLb6qc/GRRq2p2PgihLt9QKqDbYIbcU4imMBK
RXmBAd6L8OyDa4n8/s00Z9u8YTJrnXlhWGda1P7bJETElxQnfGrgtJw0n8EZD1R1
uAMBy9XyaZxlsmzmvs7tsBX3tAcmLFnEaxXdwvo/72A7nvsrR1Wa5ZVZoDbcbSzS
WLKU7DAU1FadYnTYKDWaGnOCQMsgLhfSGk/19UbOyilRn2EdfMP37Ylf1CeHprGO
0rF1FsWIrs2eV1w/B3OXo4gbKwCZ/MelDTF4DOykP9emiqyFSWcmOdO85p5YhUpx
Q/okwuYpU5k8A4EpgVeCMHnc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbos9Rq
AGisttN6jaTsRb4sQjDtMB8GA1UdIwQYMBaAFFsLvIS1y9FcMNkBQnBlKM8ZAQVo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDZDMi8xNjI0RDFEOEM0
OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBWd3cyUUZDY0dVb3p4a0JC
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d3dThoTFhMMFZ3dzJRRkNjR1VvenhrQkJXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDZDMi8xNjI0RDFEOEM0OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBW
d3cyUUZDY0dVb3p4a0JCV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjT2A7rSEtUlMbn6Tl/8mldcCoYE1oqsxENrpd9B7571WZ5wOcg8ii
kEddEhoo36Hn+e1AcnyDjF1HYtEVdhEGacNknARcfqT/m2JpcbL2BA36RToGnFCz
8PCp40/ekNxMoIcXs644VUtyLl7+HX9S+MMP48JMQXs4kvL8z5cBF6A4MDIALa1T
KK55uKqbg/BieJqewAxO5srgKfgYXtpVc3Dx6GyiBZcYx60mzbLxVec8y0PlsNUp
ZVPfVm1EbPaKMTKFW4KdiPopKx7LpnlSUWc5faDYdtFVmTMsFOTZw0fNHn/H5XuJ
l8/i/UkARbaHPek4z3dDI+RZ8caOuJ2e
-----END CERTIFICATE-----
Generated at Sat May 31 14:44:55 2025 by rpki-client