Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
File:                     wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json)
Hash identifier:          oTiW8G4TzF8xcKPYL234hqw4UBFlpVAC+brVi+zgm3U=
Subject key identifier:   B4:D9:B1:AE:33:55:8E:BD:A0:0E:62:3E:F7:57:F6:EB:F9:72:94:75
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Certificate issuer:       /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial:       13A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
Manifest number:          1382
Signing time:             Thu 12 Jun 2025 16:56:08 +0000
Manifest this update:     Thu 12 Jun 2025 16:56:08 +0000
Manifest next update:     Thu 19 Jun 2025 16:56:08 +0000
Files and hashes:         1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: Ik3D7PB5kV4SdsXwdRsLRIJeB2xgKpxsnKYpwqa1JbE=)
                          2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5027 (0x13a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
        Validity
            Not Before: Jun 12 16:56:08 2025 GMT
            Not After : Jun 19 16:56:08 2025 GMT
        Subject: CN=684b06a8-1481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:3c:19:29:a4:11:46:6f:6f:ab:c3:95:35:
                    ae:42:78:22:59:c3:88:15:a2:1d:16:72:18:e2:2d:
                    36:f2:63:e5:83:d8:77:70:a4:d2:f7:47:f8:66:5a:
                    95:ad:b3:28:35:10:96:de:1a:82:d5:ec:b1:b4:33:
                    0d:7e:d2:99:d2:cc:af:5d:c3:de:ca:f4:aa:9a:1b:
                    52:a6:a1:7b:d9:22:96:f7:a6:1d:43:44:b3:cf:28:
                    0b:4a:02:ef:51:59:25:32:93:76:e1:8b:40:90:a0:
                    3b:84:95:c0:f2:12:a4:aa:96:d4:dc:1a:d4:4d:dd:
                    5f:e6:28:3a:88:13:a0:b4:8c:ff:31:fa:9e:4c:13:
                    d1:1c:48:29:a7:96:05:35:d5:52:14:80:a8:09:6a:
                    81:15:ba:27:4b:01:c6:34:0b:83:38:b9:ed:2f:85:
                    11:85:e9:68:0a:af:e5:90:55:fb:41:6f:bf:6b:11:
                    8d:f6:a2:f7:04:b1:26:92:2d:72:a1:d7:f3:55:ee:
                    69:f4:fd:58:30:2a:2a:5f:61:49:4a:66:2d:12:e4:
                    83:2d:36:7a:a2:c0:f5:25:52:16:cc:fc:2a:d4:c2:
                    b0:6b:03:78:9e:b1:70:6e:d1:4f:e4:39:6c:fb:26:
                    ad:8b:00:1e:42:54:55:a4:ee:3e:22:80:5b:a4:93:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:B1:AE:33:55:8E:BD:A0:0E:62:3E:F7:57:F6:EB:F9:72:94:75
            X509v3 Authority Key Identifier:
                keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:91:40:fc:b2:9d:d6:28:5c:d1:2e:97:1b:8a:d1:b6:f5:
         d7:a6:91:b3:01:1e:df:40:2c:2b:63:a6:30:00:22:f5:df:c1:
         a4:e9:ba:63:a5:ca:f9:83:8a:fd:31:71:cf:1f:30:a7:95:5f:
         8c:c7:85:c2:a0:33:4a:68:22:8c:d2:c5:b3:2e:99:d8:7d:29:
         00:1d:20:90:82:62:c8:2b:7d:d8:da:34:8f:c6:f3:ca:5a:a9:
         c3:15:95:c1:40:31:38:75:c0:8b:6d:e2:49:69:ce:cd:53:57:
         5c:66:a6:9e:e2:b5:fe:05:30:2d:f8:28:3a:17:d9:61:ca:d1:
         0a:01:5c:21:f8:d5:3c:8f:a3:e2:be:6d:96:47:ef:a9:87:e6:
         b0:e2:d6:52:03:f2:02:6f:35:3d:e7:31:78:a6:34:52:4c:1f:
         97:53:97:e8:22:ef:37:bc:dc:b3:24:ed:c2:9e:ff:ed:de:cd:
         14:37:5b:f5:a8:11:10:b1:e1:16:ac:0f:b9:74:2c:cc:d2:f1:
         3f:c8:4a:7c:ed:46:fc:ad:bc:d5:72:e7:f7:96:f6:1c:f7:1b:
         08:c2:04:59:f0:26:a7:d9:03:8a:17:4b:62:85:7e:8c:1c:35:
         59:da:71:32:1c:28:99:4f:9d:34:65:65:60:f9:43:fb:72:3d:
         66:bf:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:21:41 2025 by rpki-client