Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
File:                     WLauhcbhBzDPdWfXIqNGxJtSKqk.mft (raw, json)
Hash identifier:          HqkmhGEdyIWboTz+BWeAFrs91KdoRZ1zKb8K5NZ+Gl0=
Subject key identifier:   63:25:73:FB:CD:87:57:90:3A:E8:36:D0:31:15:A2:DF:B4:C0:B3:A4
Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
Certificate issuer:       /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
Manifest number:          07A4
Signing time:             Mon 12 May 2025 21:02:17 +0000
Manifest this update:     Mon 12 May 2025 21:02:16 +0000
Manifest next update:     Mon 19 May 2025 21:02:16 +0000
Files and hashes:         1: WLauhcbhBzDPdWfXIqNGxJtSKqk.crl (hash: pNcspD0wcb66DT5VM90O1J1rmcG+tbyCLMwvH4jr4Uw=)
                          2: 0136F4540FE611EC8DD2020EC4F9AE02.roa (hash: WY35or/UWPFnJgi7e9bjldWY/rVtpdp9nvzV7837P9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl
                          rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE77, serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
        Validity
            Not Before: May 12 21:02:16 2025 GMT
            Not After : May 19 21:02:16 2025 GMT
        Subject: CN=682261d8-dc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:e0:c6:7d:df:94:91:e4:3c:45:20:ca:6a:
                    d4:67:9d:61:c7:ab:a4:5a:9a:b9:cb:b1:71:6b:68:
                    f0:67:d0:bf:87:98:16:89:c2:61:f9:f2:39:3e:03:
                    9f:96:ae:92:30:b6:75:57:92:e5:5f:fd:ad:ea:39:
                    6a:29:c8:05:81:3b:09:f7:8d:51:7e:2b:cc:d7:59:
                    ac:8c:42:be:bb:77:8c:9f:43:67:c6:4f:30:e6:ff:
                    cd:3e:ce:fe:f9:d9:80:a2:dc:e2:6a:8c:a0:eb:e0:
                    a6:ab:95:6f:05:76:5c:60:54:e9:52:17:69:7a:73:
                    67:a3:fb:8c:8c:10:6e:91:61:01:66:ff:f2:cf:3c:
                    35:c2:0a:dc:0b:9b:c1:d5:b2:69:fc:79:82:a7:ef:
                    1a:7d:03:5e:62:c9:83:f9:c5:63:ea:2a:53:28:99:
                    0e:5f:56:f6:2f:9d:86:ad:ed:aa:65:96:52:75:a7:
                    00:55:3b:31:50:1a:45:12:d2:27:7e:da:38:eb:12:
                    c9:a9:83:1f:7b:c2:22:49:b0:cf:ac:b9:23:23:eb:
                    5f:6a:d6:68:ab:2c:d3:74:6b:f9:4e:ac:b5:c1:6e:
                    49:96:ce:63:13:aa:23:15:4f:32:c5:1f:f2:d4:1d:
                    c7:9a:86:23:bf:48:50:71:bb:56:09:1e:a6:02:8f:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:73:FB:CD:87:57:90:3A:E8:36:D0:31:15:A2:DF:B4:C0:B3:A4
            X509v3 Authority Key Identifier:
                keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:31:6a:dc:9d:85:78:c7:63:ae:aa:f5:10:d9:17:c3:cd:ce:
         4d:d4:c0:c6:fc:50:29:87:70:d0:b3:87:e8:f5:36:a3:5b:90:
         2f:0d:f6:ea:a9:a7:af:f7:1d:08:dd:97:8a:bc:9e:19:de:cd:
         cd:c0:3b:7b:a6:1d:bf:df:c0:73:cd:10:ac:49:71:da:64:ee:
         b9:13:d4:3b:ca:71:86:c6:49:2d:fa:5b:63:eb:22:d4:9e:ed:
         24:8f:c5:67:28:e7:22:af:c3:d7:be:bb:00:e8:75:81:65:de:
         ca:73:ba:a2:53:99:a1:a0:e7:ac:66:df:c8:36:7b:ca:0c:8a:
         f7:44:c5:a1:18:5e:08:b6:3b:79:90:f6:81:5b:45:04:94:bb:
         90:2b:be:f9:ff:ce:20:bd:37:42:cd:3d:eb:54:1e:71:05:58:
         a8:46:2b:07:8e:87:8d:94:42:78:5e:9d:0a:e6:ff:f7:1d:b5:
         18:a5:5a:58:a1:d6:36:be:53:71:9e:53:cc:1d:9e:83:c2:0c:
         fb:b5:24:53:97:f2:d2:5b:71:af:f3:fb:d6:cc:51:af:03:67:
         37:b8:ec:a2:6b:f2:0f:cc:08:ad:3f:2a:ac:c9:41:22:8e:8e:
         eb:a7:de:d6:22:59:09:bd:4d:dd:b1:b3:aa:a6:13:10:43:fb:
         84:dd:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:43:35 2025 by rpki-client