Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          YrSu0lm9OgJr7QA0vUlzzwezPmG6+wiQ+tioyRTYPlM=
Subject key identifier:   87:C5:9C:E3:22:7E:94:B8:51:1C:32:A0:F7:9E:D8:9C:18:A8:23:0E
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1202
Signing time:             Sun 04 May 2025 17:07:51 +0000
Manifest this update:     Sun 04 May 2025 17:07:51 +0000
Manifest next update:     Sun 11 May 2025 17:07:51 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: 512VZOBr2fuX0hX9R2qsl5uI1W/aAjF1WBywh5Da30U=)
                          2: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: IG4jmJj09ZmYUDZS75YYloyHVVnkQPCtgyizJh/z2GY=)
                          3: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: N2FIp6cqZ/iIaqLg9GcTL9vc/asv0vunls3TgsCu4g8=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 3pO0l/yUtX7x2D/AxqjrC/P01Kg4CqMSxw9LDwoutV8=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: hRNZyfRzeRFOuYP02LqeZC62CwbEGFyqzlu6Izq5YRg=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: zZbyRHW0pqbTrpMmp00k/TCH9Wkc7p2seUGv01Mxk78=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6ePvq7R+VevTRBijwhsSbY7s0xfysrtCLdJS1Hrf1fw=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: FUvbvupZMSdGClwmyLJUN0LQUs/rAewHwV1Hd6aOfHI=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: sguTknz+XKgvX4qQD5q6spAgfuzmInwdxR7VIdoUOEU=)
                          10: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: oE9CTvywlwh3yT1kTz+S7CEZmViwntB8y/0OBWzj/ZY=)
                          11: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: GFNrQVb1wvfBgedxihD2Z8QNCQ3jWb2g3ubAHNMRqyI=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: Z72B2clD1drV5IAH1qd2T+bMR6C28KSN0ZpXzAvWln4=)
                          13: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: kEg5BySD5/6d6+2W+gzFQa7n4JYZpDzOwTlx1JrwL00=)
                          14: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: mdu9JMCWm1VcaEkAvSFDvH8Q8ILUzNJBmUo72/x8o9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 17:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4866 (0x1302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: May  4 17:07:51 2025 GMT
            Not After : May 11 17:07:51 2025 GMT
        Subject: CN=68179ee7-a4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:83:aa:b2:73:7a:b4:7f:4c:bd:2e:5b:34:
                    f1:fd:68:dc:54:61:1c:1b:f4:f5:f5:3c:69:e2:3d:
                    98:ec:c9:ea:e2:04:4c:be:6c:c8:c9:44:04:41:0b:
                    a7:79:97:29:eb:46:45:b4:58:24:a8:73:7c:bd:68:
                    39:f3:10:b8:10:7d:d5:3c:d4:12:c7:80:9a:67:9d:
                    96:c5:74:c3:bd:f4:a5:3d:c5:0b:db:be:04:07:6e:
                    32:7d:39:b2:74:04:8b:f9:03:0b:1c:04:42:c7:35:
                    14:1c:ee:ca:93:a4:4f:94:b6:c8:66:da:18:66:4f:
                    3a:33:f7:5c:e2:a5:42:c7:d7:40:ed:7b:ba:7d:98:
                    12:b5:89:27:ec:74:b4:aa:ad:42:3d:6c:41:2a:bb:
                    79:b8:c1:fc:5c:b4:90:13:09:ba:63:9e:92:1d:da:
                    79:6f:c1:c8:5f:dc:5e:38:11:1a:c7:3e:c8:40:41:
                    e7:09:1b:b4:97:66:67:0c:c7:3b:3c:f8:a1:9b:d2:
                    4d:70:d5:ea:f1:2f:10:fe:3d:d4:a6:14:0f:b3:ef:
                    7f:1a:f7:70:7e:c4:06:fb:82:12:3e:8c:c3:5d:5c:
                    af:35:12:1e:40:33:41:bf:19:96:1c:45:b5:ee:58:
                    3a:b6:77:7d:f9:e6:1b:53:b8:56:2d:55:b5:65:cc:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:9C:E3:22:7E:94:B8:51:1C:32:A0:F7:9E:D8:9C:18:A8:23:0E
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:2b:9a:b8:0c:0d:e5:f1:ce:cd:01:d6:87:34:f6:ab:c4:
         ac:aa:ee:0f:f9:a9:26:81:ed:54:75:7b:c4:ef:65:e1:3c:ee:
         06:98:e1:0d:bd:8a:90:32:14:a1:f4:0f:61:d2:43:32:e5:ff:
         78:d9:ae:3e:f5:69:c7:43:cd:b2:d4:eb:b6:b4:1a:e0:cc:19:
         90:f2:f8:14:e6:6b:28:c3:91:ef:ad:2e:27:ee:30:81:bb:39:
         bc:7f:fa:af:f2:fa:44:0a:7e:b0:40:da:da:bb:92:51:98:d4:
         36:e6:b9:7f:57:83:9b:ac:f8:36:29:c8:cd:c8:2d:cf:4f:8f:
         02:41:5e:31:8f:7e:f0:e3:c9:8f:3e:2a:6e:f3:71:58:98:ed:
         58:79:e4:d9:73:f1:35:b6:8b:56:41:66:64:be:e2:dd:02:2c:
         b0:38:ad:18:b5:b3:04:8e:43:42:df:fd:63:f8:ce:89:05:62:
         7e:44:52:55:bd:e0:a5:cb:44:0f:90:fc:bb:b8:b7:32:9b:1b:
         59:fa:4b:9d:7e:f0:ca:13:a6:14:1a:7d:16:aa:74:8a:d4:06:
         d4:51:a6:53:9c:95:c5:b3:5a:10:9a:92:7c:2b:cc:66:d6:c5:
         18:49:4e:91:2e:a2:cb:f8:db:82:9a:9a:b3:ef:c4:86:6f:7c:
         d7:35:83:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5
N0QxQjE2NTMwHhcNMjUwNTA0MTcwNzUxWhcNMjUwNTExMTcwNzUxWjAYMRYwFAYD
VQQDEw02ODE3OWVlNy1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxN2DqrJzerR/TL0uWzTx/WjcVGEcG/T19Txp4j2Y7Mnq4gRMvmzIyUQEQQun
eZcp60ZFtFgkqHN8vWg58xC4EH3VPNQSx4CaZ52WxXTDvfSlPcUL274EB24yfTmy
dASL+QMLHARCxzUUHO7Kk6RPlLbIZtoYZk86M/dc4qVCx9dA7Xu6fZgStYkn7HS0
qq1CPWxBKrt5uMH8XLSQEwm6Y56SHdp5b8HIX9xeOBEaxz7IQEHnCRu0l2ZnDMc7
PPihm9JNcNXq8S8Q/j3UphQPs+9/GvdwfsQG+4ISPozDXVyvNRIeQDNBvxmWHEW1
7lg6tnd9+eYbU7hWLVW1ZcwcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfFnOMi
fpS4URwyoPee2JwYqCMOMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE
M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDJEQy8yRDUxQUY0MkZEM0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYy
Y25JNXVTcVRzMktYMGJGbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBxyuauAwN5fHOzQHWhzT2q8Ssqu4P+akmge1UdXvE72XhPO4GmOEN
vYqQMhSh9A9h0kMy5f942a4+9WnHQ82y1Ou2tBrgzBmQ8vgU5msow5HvrS4n7jCB
uzm8f/qv8vpECn6wQNrau5JRmNQ25rl/V4ObrPg2KcjNyC3PT48CQV4xj37w48mP
Pipu83FYmO1YeeTZc/E1totWQWZkvuLdAiywOK0YtbMEjkNC3/1j+M6JBWJ+RFJV
veCly0QPkPy7uLcymxtZ+kudfvDKE6YUGn0WqnSK1AbUUaZTnJXFs1oQmpJ8K8xm
1sUYSU6RLqLL+NuCmpqz78SGb3zXNYPk
-----END CERTIFICATE-----
Generated at Tue May 6 12:04:47 2025 by rpki-client