Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File:                     wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier:          5QVkRd6aJF7MZz2ciAEYt1rj6D7lER8ClXHUw9tpA/0=
Subject key identifier:   AE:89:AF:B7:DE:05:88:22:75:B4:62:64:E2:23:2F:55:4C:40:DB:30
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number:          0749
Signing time:             Wed 02 Jul 2025 21:57:48 +0000
Manifest this update:     Wed 02 Jul 2025 21:57:47 +0000
Manifest next update:     Wed 09 Jul 2025 21:57:47 +0000
Files and hashes:         1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: WK22dJXsUodemIVV//5q1dYHYmqNMsss9ZrQGN1QTGA=)
                          2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
        Validity
            Not Before: Jul  2 21:57:47 2025 GMT
            Not After : Jul  9 21:57:47 2025 GMT
        Subject: CN=6865ab5b-b28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:9d:98:b2:81:de:fa:bf:bd:1a:c2:a0:00:
                    8f:87:46:86:21:df:60:14:34:a0:15:0d:98:24:8e:
                    d3:20:d1:2b:a3:44:34:e4:35:4f:b9:3a:31:12:fe:
                    a8:04:45:07:27:c7:a1:90:81:4e:7c:0d:e2:d6:d5:
                    93:76:dc:70:2f:8b:c0:b3:f9:ce:c2:91:bd:84:98:
                    66:2b:9b:43:4f:38:7a:0b:0b:08:d5:51:d0:a0:10:
                    b2:68:81:2a:6f:5d:d4:6c:a5:69:15:a2:48:0e:d8:
                    7b:85:9a:34:32:c7:4d:15:59:37:5c:cf:e8:1c:1f:
                    7c:e7:24:1a:cd:05:30:55:b5:7a:38:b4:39:66:77:
                    22:66:62:ed:2f:35:e7:31:8a:98:92:fa:f4:84:21:
                    75:8c:9b:35:9f:83:d1:3a:80:70:73:a2:96:c8:2c:
                    24:f8:fb:b3:80:6e:e3:63:b5:13:4f:79:18:cb:18:
                    ba:b8:af:7d:f1:61:ca:ec:b9:64:d1:e3:15:f6:51:
                    ab:01:06:b2:e2:dc:7a:b4:a5:26:42:e9:ee:b4:6d:
                    54:5e:87:e6:ef:e9:bc:30:8e:75:de:81:73:2c:37:
                    f8:7a:bb:a9:98:c9:8e:a1:89:25:ed:c0:bb:ab:cb:
                    bc:0f:64:f0:56:28:36:4f:55:4b:ef:a4:33:62:61:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:AF:B7:DE:05:88:22:75:B4:62:64:E2:23:2F:55:4C:40:DB:30
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:84:75:d0:af:42:67:3c:65:f5:d7:7d:79:c0:03:98:58:
         21:25:fe:a4:88:91:1b:b6:3a:fe:b1:1c:60:fa:b1:e3:50:f4:
         44:4f:f9:f0:ea:92:7f:fd:a1:c4:ab:b1:2d:f2:d0:be:99:a5:
         48:aa:5e:bf:88:4e:f0:4c:41:1d:51:f8:98:dd:23:48:7b:eb:
         d8:4a:d4:f7:76:44:ff:71:29:bb:bf:ab:8a:86:29:26:d6:d9:
         53:20:97:1e:44:37:ba:79:f6:7b:aa:20:14:d6:f5:08:de:34:
         6a:93:7a:43:99:80:40:68:90:1a:ff:57:ac:25:bb:2c:f2:28:
         f6:c5:1d:2a:ad:69:01:f6:92:44:6e:f8:02:8b:1c:0c:c9:f6:
         9b:ec:dc:15:a6:0c:ae:c5:22:9d:59:94:d5:cc:21:80:ef:1e:
         df:26:7c:79:41:ba:e8:1b:ca:21:ba:03:99:d1:b6:2a:40:d3:
         1b:7a:f3:3d:5f:ee:ef:28:8f:38:f2:09:2f:7b:78:bc:7d:dc:
         15:98:55:81:07:c4:df:4f:78:40:40:a6:41:58:81:04:bf:cf:
         a2:e7:b2:4a:1a:31:04:d6:1f:f8:c3:98:31:a7:ef:9b:37:74:
         0e:04:5b:31:02:d6:ea:7d:b1:7e:3e:0c:be:20:c7:16:c7:06:
         93:b7:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:08:52 2025 by rpki-client