Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File:                     WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier:          SeO8YmulTOHCAkWTpAmExnyMgPZgRyFsDI1pz1GsT8A=
Subject key identifier:   09:76:0B:0E:73:F7:8C:CC:9A:B4:15:B1:18:76:31:01:22:57:64:22
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer:       /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial:       06BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number:          2C9C
Signing time:             Wed 04 Jun 2025 15:45:18 +0000
Manifest this update:     Wed 04 Jun 2025 15:45:18 +0000
Manifest next update:     Wed 11 Jun 2025 15:45:18 +0000
Files and hashes:         1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: i4eumMB2vhImuEf+GG/as1BpX3yO5rmeo4Hq5PD/KX4=)
                          2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: cju0VYTCW5l5cCttT6iUNk+nPOjz7EuL15pDsjAAXc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 15:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
        Validity
            Not Before: Jun  4 15:45:18 2025 GMT
            Not After : Jun 11 15:45:18 2025 GMT
        Subject: CN=68406a0e-c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:db:93:c9:2f:04:b3:32:66:42:55:7a:03:
                    e9:68:a9:ad:ee:d2:20:83:25:4e:36:16:df:f8:58:
                    ca:e7:7a:0b:67:5f:92:64:c6:ce:da:be:aa:a2:a9:
                    b0:e6:8d:67:79:1a:a3:ef:b1:da:14:f7:a5:06:b1:
                    fc:e9:bf:65:27:23:b4:5f:13:36:46:fc:c5:bf:da:
                    5d:30:16:5b:f7:85:41:1a:7b:ee:63:99:5c:1c:6b:
                    b4:32:eb:b3:b3:a4:a5:d9:b7:d2:e7:3f:4f:b9:9f:
                    ab:f3:9c:04:a3:34:1d:07:89:fd:cf:97:14:03:12:
                    33:1d:86:4b:99:b2:65:90:53:5a:a1:dd:43:9e:8b:
                    00:36:ef:6e:0f:a9:24:8d:b2:f3:4c:a8:3e:f2:6b:
                    cf:8a:1d:5a:f3:a7:cb:71:8a:a1:db:f9:aa:77:7b:
                    28:5d:ce:0f:17:00:c9:79:08:de:20:ac:7c:71:cf:
                    c2:57:99:4d:5a:59:73:16:0a:74:13:2e:44:3f:c5:
                    a6:08:3e:07:49:14:5d:3f:c0:c3:1c:9e:72:62:0f:
                    1b:15:f3:96:fd:92:22:ad:12:54:5f:a0:04:dc:a7:
                    34:c9:d6:7d:4b:7a:ef:20:06:88:ea:09:aa:36:90:
                    26:61:77:58:4e:4b:73:f5:dc:63:88:1f:8a:c1:ad:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:0B:0E:73:F7:8C:CC:9A:B4:15:B1:18:76:31:01:22:57:64:22
            X509v3 Authority Key Identifier:
                keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:18:30:54:26:91:7c:ea:a8:b8:3e:7b:7f:8f:b3:2c:11:28:
         6e:32:45:a7:6a:c3:ea:d0:9b:12:21:f4:64:01:f4:cf:34:a6:
         1a:57:2c:45:df:a4:8d:7a:0f:48:d4:a5:ae:e5:f6:01:6e:b1:
         f5:e5:c5:5a:6e:18:12:57:9c:67:09:10:8c:f1:cd:fa:d0:42:
         ff:bd:cd:ec:df:cc:ef:23:cf:c8:64:53:ff:1f:45:9f:ce:bc:
         97:aa:6a:bd:43:8b:66:a0:a3:1b:16:55:41:35:e2:54:b3:de:
         81:94:79:66:e1:b0:0e:62:82:0c:03:83:0b:ad:17:ed:66:70:
         eb:9a:53:cb:bf:21:b9:8f:ac:26:0c:b5:1c:da:b3:6d:da:10:
         c1:b6:29:6e:a4:15:f2:75:28:7d:78:92:eb:86:3e:ea:a6:83:
         68:c0:d9:fe:9a:2b:f7:cc:ca:5a:70:d5:3c:76:14:f7:d9:3b:
         60:00:f4:ae:43:a8:cd:fa:2c:1b:f4:06:22:76:ae:fa:02:99:
         ae:7f:17:6a:1c:24:7c:12:09:4c:7d:0b:5a:de:3a:b7:48:1f:
         98:2f:49:b2:5a:05:bc:1b:2e:00:dc:6a:b3:ec:e7:65:a1:b8:
         90:a7:7b:cb:54:d6:31:c8:a6:20:bb:2d:16:4f:3e:15:5f:79:
         ae:3f:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:08:06 2025 by rpki-client