Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          VW1IWI2pmDjhMNZo9qUvvnJA6mCpF2Yg9mnIKkAoU10=
Subject key identifier:   FF:0C:B9:B1:28:C7:53:E4:17:36:92:2E:2C:E1:7B:E2:C6:E2:DB:E0
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          60
Signing time:             Sat 31 May 2025 06:39:01 +0000
Manifest this update:     Sat 31 May 2025 06:39:01 +0000
Manifest next update:     Sat 07 Jun 2025 06:39:01 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: Mx3f71q9Fzjs5UVLk0/UPjV29kMPuMEGTVU4UdEyZls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: May 31 06:39:01 2025 GMT
            Not After : Jun  7 06:39:01 2025 GMT
        Subject: CN=683aa405-a673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:24:11:8e:58:c7:25:af:af:a6:5b:2c:26:
                    a9:eb:40:2c:c7:d0:57:79:1e:88:ba:20:ac:8e:0a:
                    9f:c0:1d:2b:30:b6:ea:31:af:dd:62:a0:ed:78:6c:
                    de:12:7e:ad:a6:5f:17:47:c6:09:fa:9a:04:01:a6:
                    00:fd:73:5e:48:ca:97:65:71:35:37:4d:fe:e5:15:
                    f5:bd:82:be:6f:74:a1:75:98:be:33:11:93:c0:81:
                    4d:80:9c:a4:4c:df:c9:b7:26:14:1b:a0:94:9c:36:
                    2e:cf:10:2b:a0:e7:1f:de:de:d2:51:84:27:0b:a7:
                    27:59:50:e7:53:c8:00:22:b3:80:e2:08:bd:1a:80:
                    35:3e:73:07:04:9a:13:c9:9d:92:18:c6:29:b8:b1:
                    bd:32:04:1c:38:cb:f8:44:95:2a:ee:7b:73:f2:b7:
                    95:f5:06:df:5e:66:55:a4:62:66:85:4c:9a:0b:19:
                    ad:0e:f9:20:58:bc:eb:19:2b:ea:96:69:c4:12:f6:
                    36:e3:17:3d:d5:5e:79:6d:24:63:e4:b9:5b:57:15:
                    35:d1:84:b7:0e:ce:6d:ee:09:14:be:4e:a4:30:7a:
                    bf:5b:af:56:50:54:db:43:c5:27:af:2d:64:55:9f:
                    fa:23:11:5e:47:dd:dd:05:b4:9e:1f:10:a0:02:7f:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0C:B9:B1:28:C7:53:E4:17:36:92:2E:2C:E1:7B:E2:C6:E2:DB:E0
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:d2:e1:d4:6b:50:a9:db:9b:4b:17:96:64:95:8f:5b:1e:
         12:a2:2d:ae:3b:bd:c7:e4:66:fb:0f:c8:75:1a:f1:9e:21:9c:
         80:f8:3d:33:50:9b:94:63:14:42:e1:86:7d:2d:7f:4a:19:b4:
         16:c7:28:04:41:e4:9a:b7:3a:a1:de:8f:30:13:c1:a9:d6:9d:
         fe:5c:35:74:db:f2:9b:af:25:cf:4f:28:27:2a:c6:23:99:69:
         11:6b:bb:a1:45:8e:8d:ef:48:2d:3f:93:04:a0:d2:69:af:30:
         b2:72:5f:4c:c6:6a:79:6d:44:f3:ec:15:ed:e0:50:33:0a:db:
         8b:fe:b1:dd:71:d8:2a:e5:0c:97:eb:ad:d8:ce:f8:be:0b:44:
         a2:81:00:5b:16:33:e2:82:5f:b5:97:0c:f3:5b:83:d0:61:82:
         67:08:7a:97:f3:67:76:8e:11:de:b9:01:be:e2:f5:7f:63:04:
         78:03:4e:04:75:c6:ff:48:c3:d4:e3:dd:22:e4:21:ff:8b:8f:
         76:4b:d1:8c:3c:9f:d2:65:67:02:8b:e2:06:07:ec:cb:7a:e5:
         7d:08:b1:b4:a5:9c:aa:05:2d:a0:12:68:9c:fa:4b:c5:fe:d6:
         8c:2e:3d:02:93:9d:02:5d:06:5e:c6:a3:32:39:20:6e:cb:d5:
         c4:88:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:49:44 2025 by rpki-client