Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
File:                     WuYzaTnqj177KiHkMGc_gMzVBVo.mft (raw, json)
Hash identifier:          m59xkIRxdDINtS4knuvTMDxGmb3bf6VnUZPnCdDnSeM=
Subject key identifier:   95:72:85:A9:84:43:4B:A1:D8:F0:31:68:32:7F:3A:21:AF:0C:29:9F
Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A
Certificate issuer:       /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
Manifest number:          07C8
Signing time:             Fri 30 May 2025 22:58:50 +0000
Manifest this update:     Fri 30 May 2025 22:58:49 +0000
Manifest next update:     Fri 06 Jun 2025 22:58:49 +0000
Files and hashes:         1: WuYzaTnqj177KiHkMGc_gMzVBVo.crl (hash: RP6oPvmGYidk5zU/fEEcgDxswWnP7o8qMOdh2FUOaL0=)
                          2: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (hash: Jae4zNS7emLW9efU6dooaK3X57ZozB+vUZsfQgGmkgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6DE, serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
        Validity
            Not Before: May 30 22:58:49 2025 GMT
            Not After : Jun  6 22:58:49 2025 GMT
        Subject: CN=683a3829-c72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:d4:c7:0a:90:54:ef:f6:49:d6:ff:ba:89:
                    be:27:09:21:c4:be:bc:f5:ea:c6:95:08:08:07:af:
                    8f:50:a0:d4:a9:c3:f3:34:f6:dd:6b:81:a4:14:72:
                    06:e2:1d:c3:46:1a:de:4b:95:06:02:5f:f9:9c:fe:
                    2f:e6:15:8a:e5:9d:31:19:d9:46:cb:ed:d6:af:d3:
                    84:42:65:f9:be:ae:06:b6:22:bf:d7:96:7b:35:eb:
                    92:ad:2a:40:ba:bf:bf:c0:22:20:73:ef:ac:e2:eb:
                    d2:05:72:56:95:29:8d:c5:8a:75:e9:56:71:ea:49:
                    f3:71:75:75:bb:ab:17:b4:ab:09:a9:20:60:96:35:
                    4c:1d:38:b5:73:fc:eb:b5:82:a3:54:c5:30:a8:f4:
                    f8:05:7f:2d:bf:69:31:ce:8a:c6:8c:ae:16:7c:b0:
                    1d:4f:5e:ee:2c:42:76:15:b0:f0:5d:d8:0b:a2:24:
                    a7:c9:5d:b7:55:df:22:cc:ae:11:20:bb:67:f3:ed:
                    7f:71:51:17:9d:c1:b7:fc:82:ee:8c:b8:ff:b2:4d:
                    29:12:b6:5a:81:6d:a5:cc:0a:a1:0b:b5:0e:2f:4e:
                    05:26:66:a3:97:83:df:8f:5d:d1:e5:88:4b:03:b4:
                    7b:09:74:34:27:7c:bc:22:b8:de:e0:aa:9f:aa:55:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:85:A9:84:43:4B:A1:D8:F0:31:68:32:7F:3A:21:AF:0C:29:9F
            X509v3 Authority Key Identifier:
                keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:86:05:c8:15:f7:cf:73:6c:c5:fb:6c:50:69:59:01:1c:
         52:70:97:9c:a7:95:59:c3:bb:60:4f:49:d5:94:b9:c8:be:67:
         12:c4:8b:3e:a3:ef:10:87:7c:35:81:57:86:e7:4d:2c:f2:a1:
         a5:ae:ce:96:e6:2d:4d:02:fe:e2:ab:ca:9c:2a:76:be:97:c8:
         43:ca:0d:96:65:ad:1f:c1:9f:c2:d6:89:94:19:e1:0b:81:1c:
         43:2c:86:31:0f:82:0e:98:a7:91:e5:41:ef:df:bb:ca:19:30:
         65:82:9e:c4:ff:80:04:4a:e5:4a:8c:2b:f6:16:2e:7f:12:f0:
         fd:f1:0c:13:1f:a9:84:2d:25:fe:d3:01:d0:97:00:de:f0:09:
         12:d9:1b:9a:59:00:64:9f:b7:7f:98:03:75:e6:2f:0e:cf:93:
         0e:76:ee:9d:02:92:7c:ce:97:0a:23:94:3b:6f:3f:c3:3d:d5:
         b5:d1:88:3d:98:4c:5e:e2:08:3a:c1:ba:59:34:e7:85:a9:94:
         b7:7e:8a:7a:20:54:e1:f0:3f:9a:44:38:15:6f:61:f1:f2:df:
         a9:68:f5:d0:7c:4b:9c:18:16:1a:8c:8f:a9:25:34:ec:70:71:
         d8:fb:b7:f6:98:f8:b3:3a:3e:cf:9f:14:c5:ce:1a:8f:2a:eb:
         9e:02:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:07:53 2025 by rpki-client