Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
File:                     W6ynah06AONY_-Uxi5AkmIANgmw.mft (raw, json)
Hash identifier:          uuPL5zI0hFRkf93pE1W79zzz2Lh8o8ulXlLqEjilkgA=
Subject key identifier:   C0:85:69:98:59:1E:8D:79:82:31:29:2A:21:0C:8B:72:DA:37:F6:41
Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Certificate issuer:       /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
Manifest number:          1102
Signing time:             Wed 14 May 2025 17:42:26 +0000
Manifest this update:     Wed 14 May 2025 17:42:26 +0000
Manifest next update:     Wed 21 May 2025 17:42:26 +0000
Files and hashes:         1: W6ynah06AONY_-Uxi5AkmIANgmw.crl (hash: fXGPAahnQMw/N/m/drjCyPX8eb3y5IY7N1A/Krj8w0c=)
                          2: F21C48F48AF811ED89B22845C4F9AE02.roa (hash: YpeD3hofiypQ4UKB2agIyDeHN6KsPnhGs6LVUpcDCB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
                          rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BFB0, serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
        Validity
            Not Before: May 14 17:42:26 2025 GMT
            Not After : May 21 17:42:26 2025 GMT
        Subject: CN=6824d602-5c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:fd:7f:52:35:12:09:c3:11:50:e8:1d:04:
                    1f:73:71:a7:be:a6:ce:f0:56:98:82:b3:72:05:5e:
                    c5:d0:3e:1a:ac:92:13:d0:6d:30:d8:5d:4c:2b:74:
                    0d:4f:0d:24:08:99:1b:9f:e6:67:06:45:a3:6f:52:
                    27:d9:c7:53:a2:bb:69:8c:40:cb:55:16:34:ab:d5:
                    31:2d:c9:b3:be:da:5e:c7:d7:f6:9e:43:d8:aa:e4:
                    96:6f:ff:d5:d7:14:67:4f:5e:27:fb:c1:d9:64:e7:
                    1f:2d:d0:b0:34:e3:48:1b:df:c7:5d:b3:18:75:f7:
                    dc:99:02:0e:dd:be:c7:8e:99:78:d5:3f:26:ec:ae:
                    11:bd:e0:6e:ca:59:d3:5a:5f:f2:62:e2:9a:db:0b:
                    3d:ab:58:bb:41:ce:6d:90:31:b0:fe:a8:8e:8e:39:
                    24:b9:5e:aa:90:c4:ac:6c:e9:9c:b2:0d:e6:53:2c:
                    d0:aa:7f:6b:7b:04:c2:97:f7:ce:ff:c2:57:08:29:
                    d5:53:bb:f0:7f:80:c3:2c:34:a3:5f:73:09:7b:8e:
                    6e:3e:67:91:9a:64:57:71:cd:63:e8:6d:32:d6:f1:
                    0f:53:ff:1d:d3:e9:f9:31:ee:fc:33:48:7f:e2:00:
                    bf:3c:f7:43:b6:68:2e:d2:b9:c4:dd:ec:6d:7d:9d:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:69:98:59:1E:8D:79:82:31:29:2A:21:0C:8B:72:DA:37:F6:41
            X509v3 Authority Key Identifier:
                keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:85:93:59:e2:a2:50:e3:02:a5:25:a2:38:91:44:61:93:d8:
         4b:c7:4b:ba:18:a5:bd:11:72:7d:d3:6d:70:d4:74:5f:20:10:
         32:e2:bd:79:2a:cb:20:3e:9f:2c:cf:71:89:fc:de:86:75:bc:
         05:ed:72:82:ea:bf:50:7b:e4:3a:b4:22:d9:99:e6:1a:72:17:
         c0:61:c5:c5:19:56:34:d0:74:a2:25:ef:9e:68:7c:ba:76:56:
         fd:af:b2:d0:8c:01:64:91:d0:e8:b7:bc:bd:06:70:39:18:b9:
         d2:3e:fa:81:75:73:ca:5f:bd:da:f5:b7:be:68:59:34:0e:35:
         d7:2e:b9:e7:38:cb:54:86:44:f4:42:13:f2:d1:08:1d:a0:e6:
         df:1a:5f:65:c3:fa:62:3f:76:b8:af:f3:a6:af:67:f9:a8:f1:
         6c:4c:6d:1c:54:2d:c5:14:6f:91:16:6b:a9:38:65:d3:c9:08:
         37:bd:1f:9b:d8:61:f3:e8:6d:21:22:f3:e5:16:bc:f9:74:e3:
         c7:ba:ab:59:3a:cb:8a:9a:02:3f:97:f3:c5:c2:6e:8f:70:88:
         51:dd:51:f1:d5:6d:ec:80:6c:44:5a:21:d8:df:1d:07:12:9e:
         1a:5d:f3:46:fe:b5:86:4a:29:e6:cf:8d:4a:fd:ac:aa:22:5c:
         d0:40:3d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:28:42 2025 by rpki-client