Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File:                     wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier:          T5n2/C2xi1XZlwn3QrZotQ92FcyDWaSpEYQMzoixj1U=
Subject key identifier:   8C:0F:0D:29:37:B6:97:89:25:F3:15:EF:0F:3C:12:68:1F:78:56:5E
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer:       /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number:          0199
Signing time:             Sat 07 Jun 2025 03:01:20 +0000
Manifest this update:     Sat 07 Jun 2025 03:01:20 +0000
Manifest next update:     Sat 14 Jun 2025 03:01:20 +0000
Files and hashes:         1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: aDaxx6dtariUtLL89Cz19PZ18yw8r2icj89hdtls6F0=)
                          2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
        Validity
            Not Before: Jun  7 03:01:20 2025 GMT
            Not After : Jun 14 03:01:20 2025 GMT
        Subject: CN=6843ab80-a564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:30:4e:85:12:de:b4:0a:01:a8:5b:3a:5b:
                    21:1b:f7:19:74:69:55:d7:31:51:16:ea:58:a6:18:
                    1b:ef:e7:5c:94:52:61:16:4d:6d:0e:41:28:f4:2e:
                    ea:72:21:50:9c:8d:a3:ab:41:b0:ae:3c:01:0c:10:
                    f3:66:14:4b:f1:15:16:50:7f:fb:9f:d2:28:52:8d:
                    b6:ca:15:55:2d:9b:51:32:bf:3b:a0:a1:63:1e:f8:
                    a4:df:a7:ad:2e:3b:67:46:10:f3:1a:f7:86:3a:74:
                    7b:d7:65:d3:60:22:ce:be:57:2e:56:4c:13:1a:61:
                    e7:70:23:dd:2d:01:ce:42:bf:e4:84:6e:68:64:84:
                    c3:83:e8:02:67:78:c5:14:31:a2:9c:03:f1:d2:d9:
                    75:c6:53:56:a3:63:2a:eb:71:3c:d1:c1:e9:e5:37:
                    68:a9:da:60:69:76:b8:52:fe:a4:53:3d:15:49:a7:
                    92:54:c4:87:d9:3a:d3:05:31:4d:95:0d:e1:74:88:
                    68:e6:9c:0d:be:17:0a:b6:63:41:56:d5:03:5f:f4:
                    52:92:75:a3:a1:f9:f4:06:41:c1:99:3f:b1:24:90:
                    f4:f5:fb:d4:31:d3:e0:77:87:ee:a2:95:02:28:2d:
                    47:71:d5:ac:d9:9c:7a:ef:db:b2:ce:2f:95:a9:65:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:0D:29:37:B6:97:89:25:F3:15:EF:0F:3C:12:68:1F:78:56:5E
            X509v3 Authority Key Identifier:
                keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:6a:21:1e:45:9e:92:86:20:1c:48:25:00:1e:7f:dc:c4:
         3c:f7:32:bd:27:08:95:76:50:f3:f7:af:3a:86:00:bf:0f:b6:
         74:30:28:ad:4f:25:6b:2d:62:27:90:c6:8e:84:5d:aa:98:87:
         85:ab:b8:cc:fe:d8:12:17:16:e9:43:7f:2a:ea:3b:93:f6:80:
         1d:b1:11:84:fc:8f:53:0b:20:87:ff:ce:3e:b5:84:4e:49:56:
         1f:5b:a7:4e:4a:18:e8:ce:68:84:2b:7a:b0:af:91:f1:64:89:
         da:f2:d2:49:d5:f7:4e:0b:ac:6f:c8:03:f2:ae:3d:03:ee:4f:
         59:35:48:05:2f:b6:a8:ce:6b:45:b4:a5:41:56:3c:2e:ba:bb:
         23:23:63:26:5b:b5:cb:72:11:5f:ad:d9:33:58:5a:b2:1e:7f:
         a5:db:a2:1d:6a:75:de:49:c8:cb:a5:21:10:eb:75:d4:b7:dc:
         69:86:c6:6a:58:ea:32:d8:e4:72:b5:12:34:e5:8e:ad:59:20:
         c4:9e:27:6c:48:49:2d:de:78:6d:da:d0:b8:ee:b2:9e:33:9b:
         5b:d7:ff:a1:f0:95:3a:2b:64:1f:aa:79:da:9b:28:c8:7a:8f:
         cd:14:c3:43:7e:27:c2:6c:08:11:74:9c:19:6a:8e:34:2d:35:
         45:c2:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:48 2025 by rpki-client