Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          Kqwjc0d1r+8WpQqBDcNG2M2G9zN8AuBSUm0diCFu7YA=
Subject key identifier:   1E:EC:44:CA:A3:5F:06:81:62:BD:DF:27:C1:30:96:0A:0E:16:23:7B
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          57
Signing time:             Tue 13 May 2025 06:24:48 +0000
Manifest this update:     Tue 13 May 2025 06:24:48 +0000
Manifest next update:     Tue 20 May 2025 06:24:48 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: ZF4KazIHiTW9PtAvpQrW5Xs/Zel/koOHvL/H+M5y8lM=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: May 13 06:24:48 2025 GMT
            Not After : May 20 06:24:48 2025 GMT
        Subject: CN=6822e5b0-bb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:22:2a:11:b5:19:af:60:c1:c9:27:e6:c6:
                    ea:f4:29:c9:13:52:d9:0f:db:aa:db:18:89:f3:11:
                    d9:d9:bb:1b:3e:48:59:1b:04:2d:bf:32:a5:52:b7:
                    03:32:cf:ec:9c:7e:0c:68:b0:da:3e:25:cd:54:3c:
                    1e:a3:43:45:cc:17:c1:a3:07:01:60:73:46:61:33:
                    3d:6e:9b:63:6b:90:b1:a4:73:30:cc:4b:79:33:5a:
                    76:62:c2:d1:39:24:6d:e6:e1:1c:52:a7:56:09:0e:
                    0c:15:4d:c9:e0:3d:97:0f:3b:75:85:f1:04:68:26:
                    fc:cc:e6:b9:57:f5:e4:a5:9b:22:eb:dc:a3:94:dc:
                    d6:7a:df:48:45:f6:5e:d6:90:79:6d:67:44:f5:0d:
                    2d:a0:77:64:2c:f3:6f:94:49:f9:f8:24:68:e8:e4:
                    7c:89:d0:00:8b:7a:33:13:80:6a:b5:68:79:28:db:
                    6f:f1:e9:f2:66:68:50:bf:f7:7a:30:a9:b9:84:26:
                    20:b5:71:36:9b:6f:dc:3f:44:15:e1:f3:c5:56:c3:
                    41:db:6d:8d:9b:40:84:4d:52:04:6a:d0:fe:88:c1:
                    a9:e4:1c:70:94:08:bc:15:13:7b:43:5b:ff:71:fd:
                    62:90:42:86:48:35:0c:ac:ce:18:26:ce:78:07:78:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:44:CA:A3:5F:06:81:62:BD:DF:27:C1:30:96:0A:0E:16:23:7B
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:a8:67:b1:fe:c4:81:c8:d7:89:cf:f7:95:f7:5c:4c:3e:
         7a:22:63:7e:28:0c:54:a7:43:9c:91:c4:fe:b6:aa:b2:28:1f:
         e9:d4:d2:8f:31:c9:d6:05:04:fd:6d:96:5c:5e:1c:81:27:fa:
         6b:9b:39:fe:ed:43:b6:8b:d5:0f:a0:36:cb:d4:b7:77:5f:c0:
         82:77:06:a8:3f:12:5e:c2:72:9e:ef:72:42:80:b1:32:de:24:
         f3:be:67:f6:58:5a:d3:d3:19:04:e7:8c:97:be:25:ba:d4:29:
         fe:15:28:34:5f:9d:1a:e5:92:71:4f:c3:83:ac:86:01:fe:97:
         23:42:6e:be:07:18:0e:7b:4f:23:56:7d:0c:07:ad:bd:db:f9:
         51:48:79:a1:a9:40:b3:c8:b3:ef:28:ab:ba:82:be:e2:6c:e1:
         2e:b9:7b:c5:13:d8:ef:c3:1d:e9:d0:ff:d8:cf:2d:68:8e:d0:
         28:b7:ff:5c:c8:c6:fe:da:29:b1:1e:98:35:2d:c4:71:9f:03:
         06:c2:ac:d7:1a:64:f8:85:f3:db:99:4c:33:1b:0d:52:d7:d9:
         5d:e3:9b:85:ba:7d:05:f1:8b:f4:3a:bd:4a:43:bf:9d:64:ef:
         b8:27:6a:7b:97:dd:34:48:bb:2d:f1:0b:15:58:c1:cc:19:41:
         df:f4:36:fa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RjNBMjExMC8GA1UEBRMoQzIzREZDMjY5NzM5NDE4RkE1NzkyMUY4RDI5MDVCQTE2
NzQyRkM0RDAeFw0yNTA1MTMwNjI0NDhaFw0yNTA1MjAwNjI0NDhaMBgxFjAUBgNV
BAMTDTY4MjJlNWIwLWJiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu0SIqEbUZr2DBySfmxur0KckTUtkP26rbGInzEdnZuxs+SFkbBC2/MqVStwMy
z+ycfgxosNo+Jc1UPB6jQ0XMF8GjBwFgc0ZhMz1um2NrkLGkczDMS3kzWnZiwtE5
JG3m4RxSp1YJDgwVTcngPZcPO3WF8QRoJvzM5rlX9eSlmyLr3KOU3NZ630hF9l7W
kHltZ0T1DS2gd2Qs82+USfn4JGjo5HyJ0ACLejMTgGq1aHko22/x6fJmaFC/93ow
qbmEJiC1cTabb9w/RBXh88VWw0HbbY2bQIRNUgRq0P6IwankHHCUCLwVE3tDW/9x
/WKQQoZINQyszhgmzngHeBizAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHuxEyqNf
BoFivd8nwTCWCg4WI3swHwYDVR0jBBgwFoAUwj38Jpc5QY+leSH40pBboWdC/E0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzVGODQ1Q0VBQUU0
OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19F
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd2ozOEpwYzVRWS1sZVNINDBwQmJvV2RDX0UwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
M0EyLzVGODQ1Q0VBQUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVkt
bGVTSDQwcEJib1dkQ19FMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHn5qGex/sSByNeJz/eV91xMPnoiY34oDFSnQ5yRxP62qrIoH+nU0o8x
ydYFBP1tllxeHIEn+mubOf7tQ7aL1Q+gNsvUt3dfwIJ3Bqg/El7Ccp7vckKAsTLe
JPO+Z/ZYWtPTGQTnjJe+JbrUKf4VKDRfnRrlknFPw4OshgH+lyNCbr4HGA57TyNW
fQwHrb3b+VFIeaGpQLPIs+8oq7qCvuJs4S65e8UT2O/DHenQ/9jPLWiO0Ci3/1zI
xv7aKbEemDUtxHGfAwbCrNcaZPiF89uZTDMbDVLX2V3jm4W6fQXxi/Q6vUpDv51k
77gnanuX3TRIuy3xCxVYwcwZQd/0Nvo=
-----END CERTIFICATE-----
Generated at Wed May 14 04:32:25 2025 by rpki-client