Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
File:                     Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json)
Hash identifier:          CWQFxHbSODmtm6GALHIjYQsDrJLqTFlgwm/s98USwK0=
Subject key identifier:   EA:A6:D4:3B:18:AA:F0:2B:B3:3A:B8:BB:75:04:88:11:35:DA:19:64
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
Manifest number:          074C
Signing time:             Fri 30 May 2025 23:01:24 +0000
Manifest this update:     Fri 30 May 2025 23:01:24 +0000
Manifest next update:     Fri 06 Jun 2025 23:01:24 +0000
Files and hashes:         1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: iFtSiuNvpgIMfzxAFZ8cJdoJFB9kY9gbydHXmVuSN14=)
                          2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: aQsHMdafTipMWqWSV46rK02/G7PlIH4QrZ4xAvLOfVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: May 30 23:01:24 2025 GMT
            Not After : Jun  6 23:01:24 2025 GMT
        Subject: CN=683a38c4-d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:dd:44:b5:ce:1e:ec:59:1e:52:78:bb:d4:
                    f7:5d:6e:fb:d6:2c:38:a6:93:69:1b:f3:ed:b4:22:
                    f2:cb:8f:88:91:97:79:6a:4a:14:31:c6:4e:c6:15:
                    2b:b9:a8:c3:86:43:76:fe:09:c1:f4:8f:65:30:0c:
                    7b:56:92:b6:fe:d0:5f:ab:46:7b:09:43:ff:c8:58:
                    1a:44:4e:aa:17:18:e8:35:c6:39:f0:57:c0:c5:fb:
                    fc:e7:58:8a:bd:f6:0a:79:b1:56:76:85:71:41:49:
                    3a:e0:b4:c3:58:1f:a5:7b:44:5c:72:65:8f:2b:85:
                    86:c7:11:ac:fb:a6:49:9a:ac:54:3c:0b:30:01:76:
                    54:3b:70:58:cf:2a:6e:1f:ce:0d:40:ba:37:a3:ed:
                    d4:b9:56:00:d1:cd:b8:4c:1a:95:1d:e7:7a:be:db:
                    60:d8:7f:fe:9d:8b:bb:bd:72:50:0c:de:e3:7c:e7:
                    a9:31:90:f9:02:eb:5a:cc:82:44:3a:29:2c:e7:96:
                    42:41:f7:64:8d:c7:42:3e:c5:4a:74:65:74:90:0d:
                    31:37:94:9a:98:c7:44:13:7a:77:ae:ae:f0:df:87:
                    4e:e5:10:0b:f3:3a:70:46:5b:de:cf:ce:92:a5:80:
                    6d:fd:54:7a:38:3e:ac:25:ea:54:81:13:ce:f4:a6:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:D4:3B:18:AA:F0:2B:B3:3A:B8:BB:75:04:88:11:35:DA:19:64
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:48:73:31:c2:2d:a7:a6:61:54:71:55:e1:b6:97:2b:b5:
         1d:ff:a1:3f:34:0f:2c:44:9c:87:7a:b8:50:78:dc:1e:52:48:
         6c:1b:cc:e3:92:d0:dc:00:df:09:3d:85:6b:16:e1:35:6e:32:
         98:4f:d7:5a:c6:7c:df:f9:ae:b0:bd:5c:96:3b:28:a2:5e:e0:
         0f:b0:7a:8d:21:0b:c2:7b:ca:95:c1:79:2f:59:30:08:11:b6:
         28:45:39:f3:81:bb:69:34:6f:c2:47:64:06:88:3a:2b:e0:5a:
         1c:d6:cc:8c:07:20:af:6d:f1:1c:2a:f2:04:8a:cb:8b:41:c3:
         45:ce:80:e5:f3:8f:4a:fa:ad:23:65:0c:18:60:49:e6:8f:09:
         92:80:29:b5:04:2d:03:88:4e:75:fb:f9:8a:df:07:37:7b:02:
         2e:f2:06:3e:0f:bb:7d:3c:6c:47:c4:43:31:4e:c5:8c:3b:e3:
         a1:75:d0:10:33:7f:d7:eb:4a:f7:3f:27:04:0f:64:a9:37:91:
         b7:6f:a7:80:2a:99:71:bf:66:53:e4:4f:03:54:90:ef:f6:4a:
         a0:34:84:db:e8:26:05:18:a6:27:ca:0d:d1:1a:44:5f:01:14:
         79:e7:1f:22:a5:38:0b:ce:68:86:28:e0:58:36:84:7b:e7:2a:
         ce:81:a3:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMyMzUxMTAvBgNVBAUTKDVBNTZGODlGNTA4MTJBODEwRkYyREU4NDU0NzBGMTA5
MjcyNEExQUIwHhcNMjUwNTMwMjMwMTI0WhcNMjUwNjA2MjMwMTI0WjAYMRYwFAYD
VQQDEw02ODNhMzhjNC1kNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SDdRLXOHuxZHlJ4u9T3XW771iw4ppNpG/PttCLyy4+IkZd5akoUMcZOxhUr
uajDhkN2/gnB9I9lMAx7VpK2/tBfq0Z7CUP/yFgaRE6qFxjoNcY58FfAxfv851iK
vfYKebFWdoVxQUk64LTDWB+le0RccmWPK4WGxxGs+6ZJmqxUPAswAXZUO3BYzypu
H84NQLo3o+3UuVYA0c24TBqVHed6vttg2H/+nYu7vXJQDN7jfOepMZD5AutazIJE
Oiks55ZCQfdkjcdCPsVKdGV0kA0xN5SamMdEE3p3rq7w34dO5RAL8zpwRlvez86S
pYBt/VR6OD6sJepUgRPO9KZwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqm1DsY
qvArszq4u3UEiBE12hlkMB8GA1UdIwQYMBaAFFpW+J9QgSqBD/LehFRw8QknJKGr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG
QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktvRVA4dDZFVkhEeENTY2tv
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29hcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktv
RVA4dDZFVkhEeENTY2tvYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsHEhzMcItp6ZhVHFV4baXK7Ud/6E/NA8sRJyHerhQeNweUkhsG8zj
ktDcAN8JPYVrFuE1bjKYT9daxnzf+a6wvVyWOyiiXuAPsHqNIQvCe8qVwXkvWTAI
EbYoRTnzgbtpNG/CR2QGiDor4Foc1syMByCvbfEcKvIEisuLQcNFzoDl849K+q0j
ZQwYYEnmjwmSgCm1BC0DiE51+/mK3wc3ewIu8gY+D7t9PGxHxEMxTsWMO+OhddAQ
M3/X60r3PycED2SpN5G3b6eAKplxv2ZT5E8DVJDv9kqgNITb6CYFGKYnyg3RGkRf
ARR55x8ipTgLzmiGKOBYNoR75yrOgaPZ
-----END CERTIFICATE-----
Generated at Sat May 31 16:50:36 2025 by rpki-client