Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
File:                     wipR7M5tlu_1Mou8JblTGLTB2i4.mft (raw, json)
Hash identifier:          /ZSgG1z9dq9+A2+oHLYxlig/7eiT8hIAs1HbAzWgiFg=
Subject key identifier:   8A:DD:8B:D0:06:50:37:5A:9E:C8:97:11:BC:D5:96:8A:69:89:F4:21
Authority key identifier: C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
Certificate issuer:       /CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
Manifest number:          4F
Signing time:             Sat 31 May 2025 06:57:00 +0000
Manifest this update:     Sat 31 May 2025 06:56:59 +0000
Manifest next update:     Sat 07 Jun 2025 06:56:59 +0000
Files and hashes:         1: wipR7M5tlu_1Mou8JblTGLTB2i4.crl (hash: ipXImnigIl0iMLLVIqzLoKRYxqZAOgxR0oyD//ONlr4=)
                          2: 048B6F32D19D11EFB536C03DC4F9AE02.roa (hash: KB4EUqrfcsOAzIiEQ7XWVFbrnOWdV6fKnfW3hotUhtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
        Validity
            Not Before: May 31 06:56:59 2025 GMT
            Not After : Jun  7 06:56:59 2025 GMT
        Subject: CN=683aa83b-8fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:00:0e:f4:e0:b2:6a:e9:49:65:6e:9f:2f:
                    3c:07:ef:8a:93:52:29:4c:1b:08:c1:ba:de:c6:f1:
                    aa:46:8c:df:98:eb:ca:3a:f5:9a:19:26:8d:ad:83:
                    43:a7:86:f2:15:46:38:4a:23:61:ab:69:52:67:d8:
                    c6:30:a4:d7:60:be:59:99:2d:c5:bb:52:bc:50:73:
                    8c:27:ea:a5:3a:93:63:c7:b2:c8:4a:a5:7a:26:1b:
                    55:89:ec:e1:c6:36:91:7c:76:68:df:af:8a:cb:ba:
                    1d:04:f1:11:95:46:07:5f:03:7d:db:78:9e:f9:72:
                    49:53:3d:17:2c:ab:ce:f8:16:ea:c1:64:66:ba:2e:
                    26:5e:94:d7:4f:d4:ab:45:56:45:3d:42:5b:0e:f0:
                    3f:33:82:26:fa:1a:07:c7:70:21:71:e9:04:24:b1:
                    54:c5:0a:ff:4e:1a:0b:94:82:81:8f:f5:a4:23:35:
                    e8:c2:a7:45:93:a7:2e:f0:39:c4:cf:5a:c4:20:d7:
                    c1:63:c2:1a:e9:8e:aa:1a:31:41:5d:a4:59:80:b3:
                    6b:a5:33:d5:e8:70:32:c1:2f:ed:d0:0b:e1:7f:20:
                    bd:b9:68:6d:17:12:09:0b:87:07:a7:11:00:6a:64:
                    59:df:b2:5b:df:88:36:c8:08:01:c2:69:b7:b6:be:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:8B:D0:06:50:37:5A:9E:C8:97:11:BC:D5:96:8A:69:89:F4:21
            X509v3 Authority Key Identifier:
                keyid:C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:96:4f:57:4a:2f:01:f9:67:ac:6c:12:e6:4e:db:d9:ad:
         95:04:e0:fb:c4:1f:b2:29:99:bc:b3:0d:45:3e:fb:b9:0d:86:
         96:dd:8a:b3:db:74:d3:98:58:92:5b:28:8f:d5:fc:59:f7:04:
         09:c0:df:4f:65:ec:d7:f9:dc:5b:73:40:21:b9:c6:8d:11:80:
         b1:c8:02:68:ef:70:bd:c8:ae:5b:48:7e:ba:09:b1:21:02:e7:
         cf:28:df:c4:1f:51:c4:f0:5d:c4:e5:7c:b9:bb:b7:79:43:93:
         a0:e7:2a:b0:10:a8:9a:64:25:88:b9:a9:3a:20:1b:52:e7:a6:
         99:42:92:3c:90:68:03:22:94:1a:07:53:7a:8b:05:26:22:c9:
         74:bf:43:13:8c:70:ea:f1:51:15:42:f1:ba:1a:21:0c:da:84:
         a4:ca:59:3b:8f:18:8d:13:5e:a4:54:cd:cb:b6:4a:6d:e7:21:
         d7:d6:f5:dd:68:f9:4b:bc:0a:fe:dc:cb:69:fc:f4:bb:7e:05:
         a6:ff:24:fb:69:b4:f9:e7:03:48:cc:02:1b:6b:62:23:2a:81:
         f6:f1:78:e1:90:d3:f7:24:77:b7:3c:e6:2f:a6:39:ab:d6:7a:
         e8:84:eb:34:1f:1d:95:b7:05:84:a3:6a:6b:69:53:ec:be:ca:
         2b:a3:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:29:30 2025 by rpki-client