Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
File:                     -W0Mybs5WKCpxugXNpm4JO7o8uc.mft (raw, json)
Hash identifier:          jEoHy3SxPXaYl8pN7sYeR0m7GWX8kPZC2B/waEo5BmU=
Subject key identifier:   B7:4B:D9:A6:90:DD:DB:23:0F:42:76:5D:10:F3:75:E0:51:33:64:21
Authority key identifier: F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7
Certificate issuer:       /CN=A919278E/serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
Manifest number:          CD
Signing time:             Sat 31 May 2025 05:17:44 +0000
Manifest this update:     Sat 31 May 2025 05:17:43 +0000
Manifest next update:     Sat 07 Jun 2025 05:17:43 +0000
Files and hashes:         1: -W0Mybs5WKCpxugXNpm4JO7o8uc.crl (hash: b7RfXT6/8Yxl9kB0hAX+BYwtmY35UjEy2iojViZWVcU=)
                          2: 0374374A032711EFB14B6574C4F9AE02.roa (hash: 3TgUi0GmLtHiOckmKucwTFJfbV7bxO71FYN5P3l6ahM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl
                          rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919278E, serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7
        Validity
            Not Before: May 31 05:17:43 2025 GMT
            Not After : Jun  7 05:17:43 2025 GMT
        Subject: CN=683a90f8-eb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:7d:43:25:71:90:66:d2:39:98:44:28:65:
                    e5:21:6e:84:b1:40:de:d8:1d:59:96:bb:bb:da:26:
                    48:8f:17:3a:80:75:43:0b:69:0d:89:66:43:f2:2d:
                    ce:73:48:69:39:89:6a:ce:c2:34:e2:2a:07:f8:0f:
                    db:ea:40:c5:87:90:b5:e3:f2:a8:2e:ca:b1:d8:1b:
                    00:cd:00:d9:34:53:f1:00:2c:ab:08:9f:c7:fb:89:
                    50:e5:b0:98:0c:d1:db:91:0e:34:2d:9f:f8:ae:db:
                    87:42:c7:20:b2:3a:a3:f9:f1:85:e0:0b:3e:9c:b9:
                    83:c4:a2:27:96:fa:dc:50:86:3c:71:d3:19:e0:ce:
                    58:d8:68:07:66:76:2e:7c:a2:f6:c3:22:a6:45:16:
                    7b:64:cd:c0:e1:33:7d:ac:20:f0:3a:29:75:e1:53:
                    00:da:07:8c:22:d6:4f:0c:08:f3:69:6b:41:05:8f:
                    e5:81:50:cc:5a:7b:99:34:2d:70:f4:1d:bf:e8:84:
                    20:c9:bf:d4:8f:0c:a6:99:3f:f0:7b:98:b2:9b:cb:
                    07:16:ba:83:09:e0:ed:14:80:ad:15:4c:eb:e8:85:
                    3d:16:c9:11:25:a6:ac:3d:23:12:8f:a7:9a:b7:a5:
                    96:75:11:44:dc:2b:32:14:db:84:d8:87:61:e8:df:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4B:D9:A6:90:DD:DB:23:0F:42:76:5D:10:F3:75:E0:51:33:64:21
            X509v3 Authority Key Identifier:
                keyid:F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0b:6a:1c:50:fa:cf:c2:ce:c7:f7:9d:01:9e:13:81:4c:9e:
         d9:fa:79:8b:4e:6f:ba:73:88:13:bf:16:2b:e3:68:7b:41:e7:
         0d:3b:a8:e2:46:ef:25:d9:96:33:9f:a2:ff:ee:09:72:39:d4:
         ce:cc:5b:61:cc:f7:8b:98:85:be:73:e6:67:df:0f:79:48:99:
         d0:30:aa:2e:ab:c8:c0:10:e4:be:f2:24:1b:7a:b7:28:f6:30:
         25:a0:a8:a7:25:b8:5b:bf:09:32:a1:27:a5:f4:64:c9:2f:a5:
         37:ee:09:b8:e1:ea:09:68:39:16:d4:55:e1:6e:75:20:9f:6e:
         a1:3d:64:b3:0f:34:ce:93:72:e5:c0:19:00:0c:cf:ed:16:dd:
         19:e8:9d:fd:82:98:fb:57:9d:65:b4:52:29:95:92:39:be:55:
         0f:58:a1:a5:2d:1e:c1:6a:df:7a:93:18:1c:1b:1c:5e:c5:8c:
         f6:fb:6c:ea:ba:a6:a3:4b:6d:4f:77:7a:fc:13:cf:3a:ed:fd:
         a2:4c:a2:d6:b2:95:a0:93:09:cb:7d:e6:8d:b2:6e:1e:ab:21:
         d0:8c:21:33:0c:29:89:07:b0:86:4a:fc:e0:14:54:84:49:9c:
         5c:da:8e:3f:49:5f:e6:ad:b6:b7:2b:fb:82:f2:1e:d7:9d:e0:
         8e:9d:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:42:44 2025 by rpki-client