Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          xWDgv5YEfiPbIHhNdrIuAKW6d1iGbGH55J5QrkWR080=
Subject key identifier:   C7:DB:6A:1C:76:38:DB:48:FE:27:9D:48:4B:1E:97:14:5A:75:C4:1C
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       34E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          34BC
Signing time:             Sat 31 May 2025 14:37:01 +0000
Manifest this update:     Sat 31 May 2025 14:37:00 +0000
Manifest next update:     Sat 07 Jun 2025 14:37:00 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: xZp/cxJsbVOsC3yNcGeSke0tjsb+yM7CP9D4Zj9kiTc=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=)
                          4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: May 31 14:37:00 2025 GMT
            Not After : Jun  7 14:37:00 2025 GMT
        Subject: CN=683b140d-061d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:a6:52:5b:4c:f5:d0:3f:db:b9:99:5d:8f:
                    79:e8:66:2c:c6:44:cf:ad:c1:f0:ed:7e:12:69:6e:
                    89:24:d4:94:84:d0:22:49:3b:23:46:bc:55:91:21:
                    67:d8:d1:9c:d4:af:2c:73:aa:18:66:e8:49:67:5e:
                    d9:bb:6d:f4:c2:fd:1f:23:8a:19:fe:4b:22:8b:d5:
                    ed:35:b3:7d:0a:d4:72:ed:e4:ad:1e:60:85:2d:41:
                    b8:66:60:f4:88:34:0f:88:b0:b0:ce:22:77:a5:84:
                    b0:64:a8:37:2f:6b:e6:1b:6c:1c:19:d9:82:83:f0:
                    2b:e8:b1:f3:ce:d7:de:1d:91:63:94:da:f5:1c:9a:
                    81:73:c5:cc:1a:1d:5e:a1:c0:b0:4a:6b:f3:0a:cc:
                    72:93:21:33:b9:b6:45:ad:84:2f:c0:6d:52:cd:eb:
                    cc:aa:a0:af:6b:2e:b9:3b:c4:1b:3c:b0:03:d2:38:
                    b9:74:c0:68:a2:ee:8e:b9:cb:2c:4c:46:a5:25:8a:
                    52:ea:2e:62:06:9a:ea:3d:8b:58:84:1e:19:0d:12:
                    13:d2:90:19:b3:0c:de:75:8d:a0:64:c1:b9:b4:de:
                    0a:a9:75:d4:43:e1:b4:7c:5f:24:34:0b:cc:4b:e1:
                    9b:60:e0:2c:63:77:20:5a:1b:62:c0:8e:01:e9:60:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:6A:1C:76:38:DB:48:FE:27:9D:48:4B:1E:97:14:5A:75:C4:1C
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:ef:0e:cb:e0:d3:68:54:f1:b0:89:30:d8:86:48:b5:c8:
         b4:74:75:96:0b:46:24:bd:36:48:55:a1:ff:9c:96:07:d2:cc:
         21:63:32:bd:71:1e:51:c7:f1:29:5b:b6:97:a0:6d:4e:f3:88:
         f7:72:dd:2f:ef:50:d9:f4:39:38:9a:87:cf:4d:aa:f7:22:ac:
         49:e0:37:86:62:a5:3e:64:58:a9:dd:40:be:04:12:15:28:0d:
         7f:58:e3:d2:b8:18:94:bc:83:09:d5:79:f3:99:58:88:84:8a:
         5d:0d:85:20:06:ca:ea:24:26:44:df:55:9e:a1:0d:cc:b8:0d:
         c3:9e:a2:d5:b4:62:4a:5e:6e:f8:b1:91:b7:8e:3f:47:7d:4f:
         f3:a7:04:a8:c7:c4:13:1f:10:d9:4d:0f:f6:bd:d7:ab:77:77:
         70:f2:c0:7e:bb:f4:43:6c:0c:1a:cf:d4:99:fc:b6:40:91:6c:
         6c:a6:cf:25:3e:ac:76:9e:27:02:db:10:36:28:50:78:e0:8a:
         93:58:92:97:e6:da:71:f1:3b:e1:74:c4:97:61:53:6f:79:47:
         00:47:2a:84:9b:41:2d:92:8d:d9:85:0c:f3:9f:51:5f:f8:56:
         23:e3:9f:44:61:b8:e3:e2:30:12:c8:d1:cc:7e:41:91:b8:29:
         54:4c:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:35:56 2025 by rpki-client