Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          092/x6IYBpt+owq+REvoPXfmgx1flw5iI++561CeqV4=
Subject key identifier:   C3:38:71:F0:7F:83:5D:A3:0A:28:84:E0:DC:B9:43:1B:A2:FD:15:0A
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       3496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          3495
Signing time:             Wed 02 Jul 2025 15:11:32 +0000
Manifest this update:     Wed 02 Jul 2025 15:11:31 +0000
Manifest next update:     Wed 09 Jul 2025 15:11:31 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: K/hXCV2D6x4TKUxkzMQKPYP/ICZulJkFE23TJfpzyCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
                          rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13462 (0x3496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Jul  2 15:11:31 2025 GMT
            Not After : Jul  9 15:11:31 2025 GMT
        Subject: CN=68654c24-254e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:01:15:fc:f6:72:c7:02:fc:b1:09:7c:ff:
                    2e:9c:13:47:8c:99:d1:85:73:91:8a:cc:20:c7:f6:
                    ed:cd:80:75:4a:9e:6b:f7:fb:d0:08:24:80:7a:57:
                    ca:65:d3:ba:10:78:18:89:0f:06:e7:4a:2f:04:da:
                    80:1a:90:a0:5c:7a:4d:ee:b1:5e:ee:2d:f9:4e:5a:
                    cf:f1:b2:39:7f:9d:a3:37:52:ca:c2:1a:51:9d:d0:
                    d5:4e:45:74:84:68:f0:77:4b:0d:3d:c0:d3:40:e1:
                    4b:bc:8b:88:4b:9f:4f:69:2f:18:15:f9:9e:1d:cf:
                    35:ee:af:ff:50:d5:ba:a1:9e:2d:51:97:5f:a6:91:
                    dd:18:f0:8d:3a:59:9b:3a:93:ca:6b:5f:32:88:d9:
                    5f:8a:33:13:b7:2b:9b:4e:fb:97:b1:a4:cd:0f:ac:
                    13:10:34:10:a3:cc:54:d6:c1:82:e5:c0:c2:85:c8:
                    44:51:c0:a0:06:1f:6d:ad:6c:71:bf:bc:52:e5:46:
                    b3:b2:aa:6e:36:74:93:b6:60:d0:83:be:e3:ae:b3:
                    f0:4c:98:a7:49:7c:e1:c8:4c:e5:0a:d8:b2:a1:61:
                    c3:1d:f8:84:b4:9e:a1:21:26:6a:50:85:36:2e:57:
                    d2:2c:a9:b4:91:ae:f0:f6:33:a7:a1:82:82:cd:a7:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:71:F0:7F:83:5D:A3:0A:28:84:E0:DC:B9:43:1B:A2:FD:15:0A
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e1:64:2f:ee:e8:05:9b:c2:fb:4e:6a:c2:ac:b8:4a:4e:72:
         0a:dc:ce:cd:50:f5:45:02:1c:64:af:91:ee:5b:30:a7:17:3d:
         fa:10:07:6a:54:51:4c:95:71:de:b7:36:b8:ee:f8:36:d4:25:
         d1:7e:9d:4c:37:6a:c8:f7:a2:40:2c:90:86:76:93:65:e9:5b:
         7f:0b:b4:a5:4c:a6:08:81:41:59:c0:3c:db:4c:2a:6d:ba:62:
         e6:63:8f:36:94:13:ec:df:f6:d5:86:83:28:74:28:56:aa:58:
         4f:1b:6c:e2:5a:ab:b0:8f:a6:68:ec:2b:3a:e0:26:bc:89:92:
         90:ab:cf:0c:1e:d6:22:47:8e:e2:7d:eb:b4:e2:ab:a9:f6:8c:
         15:a9:be:d7:b8:4e:31:3e:05:9e:bf:18:5d:87:70:fc:52:de:
         70:43:88:00:e6:bd:0e:37:d7:14:32:62:a1:f7:24:dc:0b:2e:
         22:36:01:84:db:b0:a1:81:28:94:82:d0:7f:ca:25:a2:77:b2:
         74:fc:92:10:f0:ed:08:9f:d2:8b:bd:ab:73:f4:e6:b7:7d:97:
         4a:86:61:6c:07:20:bf:7c:71:c2:40:7c:7d:e5:7d:73:31:c7:
         08:7f:fa:0d:36:7d:c9:45:0a:cf:59:87:65:43:cc:75:b3:7c:
         48:2f:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:44:20 2025 by rpki-client