Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
File:                     Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json)
Hash identifier:          gP4vh3fzdQHt4OO14at0vf+BWkkVr5kgScW77KraopA=
Subject key identifier:   4E:6B:66:4B:C3:9B:9F:10:89:37:6D:85:31:43:A2:03:AE:32:5B:28
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Certificate issuer:       /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
Manifest number:          067C
Signing time:             Wed 14 May 2025 22:20:28 +0000
Manifest this update:     Wed 14 May 2025 22:20:28 +0000
Manifest next update:     Wed 21 May 2025 22:20:28 +0000
Files and hashes:         1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: U0mTePNMGjUcgY7YHBBDm849zuZeVnlL1ZERqo9/7a4=)
                          2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
        Validity
            Not Before: May 14 22:20:28 2025 GMT
            Not After : May 21 22:20:28 2025 GMT
        Subject: CN=6825172c-c128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:f7:4b:f2:c7:99:ee:c3:04:ef:86:a3:7b:
                    e4:4f:0e:f0:38:b1:7e:ea:84:a6:0a:bd:9d:37:d6:
                    31:d6:4a:da:9b:e4:00:79:e8:b1:47:b7:5f:c3:75:
                    9a:ae:b1:a5:4a:04:64:b4:2a:1f:72:85:7b:3c:d8:
                    86:38:0f:80:cd:2c:44:9a:4c:dc:3e:e4:ea:c5:0b:
                    30:f6:91:68:82:98:ec:1d:01:9b:27:79:e4:f5:c2:
                    b2:66:22:ff:1c:59:73:2a:7a:96:a2:67:b4:2a:76:
                    5a:ad:b2:27:d0:d5:be:43:75:16:71:89:c2:b8:39:
                    00:9b:07:29:81:c1:5e:c2:e6:61:31:e9:55:c7:c2:
                    ab:7e:64:35:8e:db:1a:7c:2b:eb:d2:6e:65:2f:97:
                    cc:51:d6:ee:03:92:26:15:06:19:4a:ef:02:d0:d1:
                    9f:3d:16:8e:0e:56:a7:4c:fe:48:6c:a4:1d:d7:bb:
                    57:43:3b:d8:e3:b3:99:69:65:16:e0:e9:1e:b9:66:
                    30:b8:86:7f:a1:aa:76:d9:02:8c:1f:21:16:85:cd:
                    0e:c5:d1:97:76:63:c0:a8:b6:c9:09:be:44:2d:93:
                    ce:6b:0f:6f:ca:6e:6e:6e:07:92:70:5b:32:e4:b8:
                    60:11:d3:68:14:a8:36:1a:4a:f9:b9:2f:3c:3e:07:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:66:4B:C3:9B:9F:10:89:37:6D:85:31:43:A2:03:AE:32:5B:28
            X509v3 Authority Key Identifier:
                keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:74:44:bc:52:41:90:2d:78:c4:68:e9:37:42:b7:e2:0f:30:
         4d:1c:7b:d2:0e:1d:6f:79:a1:86:81:71:8a:2f:0e:68:39:f6:
         f5:c4:67:b2:d6:8d:d5:39:c1:19:d6:48:f5:01:77:80:81:ae:
         9d:be:b9:8d:09:bf:3c:c4:cf:9c:f7:60:c6:5d:91:48:84:a7:
         96:b6:38:d0:dd:07:ec:f7:db:d1:d0:9b:e3:38:41:c1:8c:ac:
         b6:aa:3c:e9:b7:30:9e:83:ba:a1:be:7b:db:c8:b6:97:06:4b:
         db:65:59:ee:64:89:74:e4:a3:2b:b3:ec:0e:f7:0f:ef:d1:62:
         b0:2d:3e:f4:07:15:cc:ba:46:1e:41:5c:15:fc:3e:53:70:a3:
         63:8c:a6:4f:b7:00:35:2a:4e:b0:d9:f0:19:aa:87:c3:3f:75:
         74:41:9f:a0:4a:8a:fe:7e:80:9a:d0:b7:c9:5c:4a:db:00:b3:
         4d:0b:41:aa:e5:96:9e:b3:bc:4d:f1:09:29:b7:6f:62:25:48:
         04:70:48:34:3e:74:0e:4f:da:64:7e:0c:37:75:9d:bc:a1:ee:
         b7:61:67:89:60:e6:27:04:0d:46:f5:ff:53:36:28:00:b6:4c:
         5b:a7:7d:4e:f0:f5:a3:a3:0b:44:54:35:8b:ee:95:fb:3c:13:
         12:d3:b0:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I2RDUxMTAvBgNVBAUTKDVBQzk2NUU1MENGRUJCNTkxNDc5MzdEQzM0RDgxRkQz
MDJCNkJBNzMwHhcNMjUwNTE0MjIyMDI4WhcNMjUwNTIxMjIyMDI4WjAYMRYwFAYD
VQQDEw02ODI1MTcyYy1jMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmT3S/LHme7DBO+Go3vkTw7wOLF+6oSmCr2dN9Yx1kram+QAeeixR7dfw3Wa
rrGlSgRktCofcoV7PNiGOA+AzSxEmkzcPuTqxQsw9pFogpjsHQGbJ3nk9cKyZiL/
HFlzKnqWome0KnZarbIn0NW+Q3UWcYnCuDkAmwcpgcFewuZhMelVx8KrfmQ1jtsa
fCvr0m5lL5fMUdbuA5ImFQYZSu8C0NGfPRaODlanTP5IbKQd17tXQzvY47OZaWUW
4OkeuWYwuIZ/oap22QKMHyEWhc0OxdGXdmPAqLbJCb5ELZPOaw9vym5ubgeScFsy
5LhgEdNoFKg2Gkr5uS88Pgc3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5rZkvD
m58QiTdthTFDogOuMlsoMB8GA1UdIwQYMBaAFFrJZeUM/rtZFHk33DTYH9MCtrpz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENS9CQzRCRkI3Njc0
MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUxa1VlVGZjTk5nZjB3SzJ1
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzbGw1UXotdTFrVWVUZmNOTmdmMHdLMnVuTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjZENS9CQzRCRkI3Njc0MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUx
a1VlVGZjTk5nZjB3SzJ1bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBldES8UkGQLXjEaOk3QrfiDzBNHHvSDh1veaGGgXGKLw5oOfb1xGey
1o3VOcEZ1kj1AXeAga6dvrmNCb88xM+c92DGXZFIhKeWtjjQ3Qfs99vR0JvjOEHB
jKy2qjzptzCeg7qhvnvbyLaXBkvbZVnuZIl05KMrs+wO9w/v0WKwLT70BxXMukYe
QVwV/D5TcKNjjKZPtwA1Kk6w2fAZqofDP3V0QZ+gSor+foCa0LfJXErbALNNC0Gq
5Zaes7xN8Qkpt29iJUgEcEg0PnQOT9pkfgw3dZ28oe63YWeJYOYnBA1G9f9TNigA
tkxbp31O8PWjowtEVDWL7pX7PBMS07BN
-----END CERTIFICATE-----
Generated at Fri May 16 08:19:13 2025 by rpki-client