Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          /oPqs1XJUDky4U9cQn7zY6JhUJkQziZZ9ak0IGNP/vs=
Subject key identifier:   F7:8C:4A:EA:15:8E:36:63:18:E4:41:AC:64:5F:7C:A0:54:16:1A:67
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          0174
Signing time:             Sat 31 May 2025 03:45:20 +0000
Manifest this update:     Sat 31 May 2025 03:45:19 +0000
Manifest next update:     Sat 07 Jun 2025 03:45:19 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: 12glH2LMIFJkVWE6St9wklP0BwQpd7qUYZ7zp+8g6ow=)
                          2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=)
                          3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: 2y8wJ1PVjmvj/h6RNUPibqQJhsY3FKf+7tKEQmy95j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: May 31 03:45:19 2025 GMT
            Not After : Jun  7 03:45:19 2025 GMT
        Subject: CN=683a7b4f-b3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:76:cd:eb:34:d6:a7:29:a8:59:64:23:98:
                    86:05:3b:5a:1d:8c:20:ea:e0:6c:de:72:31:cd:0d:
                    66:79:3c:54:09:ac:6a:66:98:9d:2f:65:57:5f:4f:
                    fa:bd:7c:be:6a:96:6c:e5:6c:8f:25:81:07:cb:21:
                    51:26:45:16:a4:13:79:b5:ef:db:d0:c7:f8:87:6d:
                    78:84:51:d1:17:a4:e1:22:34:ed:dd:b5:50:1c:9f:
                    e9:2e:48:0b:ae:bd:85:87:31:a2:de:10:34:3c:bc:
                    3c:f4:0d:7e:b0:a8:e1:48:e2:72:7d:3f:1b:6d:67:
                    af:5b:05:cf:e0:ce:a4:56:89:d4:95:ef:fe:3c:38:
                    ab:d7:94:c0:87:2c:fa:be:53:e6:02:34:87:59:16:
                    aa:de:3e:45:47:af:bf:b5:54:5f:c8:0d:07:fd:b2:
                    d4:b6:19:81:91:43:70:9c:76:0e:a9:52:80:68:d0:
                    62:38:aa:4b:2f:d1:3a:1f:bb:67:91:28:1b:a5:24:
                    1d:64:2e:4e:13:ee:fb:1c:ed:a2:98:7a:9e:02:11:
                    3c:e4:27:63:85:41:8a:b9:8c:76:bc:1c:a3:1e:ed:
                    a4:b5:cc:d9:92:af:b6:e0:07:69:8b:a7:ad:d8:c5:
                    90:14:95:43:03:a8:a8:cb:a1:20:f8:32:57:15:ee:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:4A:EA:15:8E:36:63:18:E4:41:AC:64:5F:7C:A0:54:16:1A:67
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:83:e7:c5:98:33:38:71:2f:b8:31:0e:6c:6d:62:94:1f:82:
         76:eb:a2:80:80:29:65:ea:aa:53:73:32:8c:c9:45:d8:79:1d:
         ea:0e:7c:0f:c7:a5:07:fe:18:9e:b7:61:11:fd:e7:57:2d:17:
         54:bd:0d:d3:e5:fb:5a:b5:c9:6f:04:c7:55:a4:3c:05:3c:08:
         ff:36:9f:7d:b6:97:2b:02:32:4c:8a:1f:b9:40:69:40:2d:92:
         66:1c:45:7e:9a:39:c6:04:95:a8:eb:77:4a:75:fa:66:4c:b2:
         ed:93:40:a6:04:b4:2a:19:b5:b2:1c:c7:c1:9b:71:66:f3:17:
         4b:63:d4:2d:3c:c4:48:9d:f1:62:06:d1:dd:c7:ef:0a:e4:d2:
         3d:17:b9:c7:4c:f6:bb:25:3f:56:97:0e:3a:1e:88:61:60:eb:
         32:58:6b:02:64:5b:84:73:41:9c:2b:c4:f3:d9:cb:6b:2c:c3:
         b5:28:13:98:d4:9a:0f:e8:56:2d:4b:f8:7b:b5:d2:81:7d:b8:
         8c:fd:3b:aa:82:25:e0:84:2d:66:b5:b8:6a:41:d0:95:f7:ec:
         ad:09:f8:ff:6e:67:66:14:11:a3:5e:e2:c3:0f:35:6b:06:a9:
         ce:6c:e6:53:0c:bb:2b:5d:0c:ac:6f:76:19:bc:cc:4e:a0:c1:
         14:34:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:06:21 2025 by rpki-client