Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
File:                     v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json)
Hash identifier:          5TonZuqp7/23zDZRMm18gvitlToIn08HHyRKmXViXK4=
Subject key identifier:   5F:28:6F:70:EC:42:90:E8:A9:19:2E:29:CB:AF:4F:68:71:70:FB:3E
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Certificate issuer:       /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
Manifest number:          DD
Signing time:             Tue 13 May 2025 04:42:09 +0000
Manifest this update:     Tue 13 May 2025 04:42:08 +0000
Manifest next update:     Tue 20 May 2025 04:42:08 +0000
Files and hashes:         1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: t8qr24wx19MZSx1g7tsJeOALZn7E5J6NfIDRwhyAV5g=)
                          2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
                          rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
        Validity
            Not Before: May 13 04:42:08 2025 GMT
            Not After : May 20 04:42:08 2025 GMT
        Subject: CN=6822cda1-2695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:2e:e2:af:6a:85:c9:2e:41:2a:fa:4f:52:
                    9e:ae:e2:c4:77:49:ff:a9:4d:38:fd:b6:37:e2:44:
                    d2:2a:0d:ec:a5:2a:d5:79:53:8e:55:c2:14:32:85:
                    41:2c:56:6c:31:99:2b:b9:9b:d8:8d:27:6a:97:04:
                    30:72:32:80:8c:d1:14:f6:0b:c1:1d:93:ac:70:ac:
                    7c:14:6f:43:d3:05:7e:ad:58:2f:f7:74:1d:ef:2b:
                    7a:3b:92:7e:8c:ae:25:c4:f5:44:12:c4:6c:5b:36:
                    62:ef:bc:b8:b5:48:db:02:08:e9:30:51:ea:86:0d:
                    96:2e:cb:eb:3e:42:f3:86:4c:28:64:40:4b:75:02:
                    d9:9a:5c:37:d8:3f:f6:11:1a:d6:41:e0:50:11:56:
                    02:df:dd:86:ca:0e:9d:c1:c2:46:77:c0:e9:05:60:
                    8d:a2:dc:a1:62:c5:d0:c9:0a:37:35:8b:88:8d:37:
                    5e:79:5c:f3:98:c5:ec:ca:57:2c:69:6f:ce:e0:f5:
                    83:d9:30:c0:ac:16:85:53:f1:ef:85:c3:fe:c8:4f:
                    64:d7:d1:79:be:03:9b:c1:ec:69:09:4f:22:50:89:
                    96:54:72:cf:2a:79:f6:cf:57:d1:2b:f7:e3:05:8e:
                    1e:25:0f:fe:86:4a:06:5b:82:d6:6c:f9:8e:ff:07:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:28:6F:70:EC:42:90:E8:A9:19:2E:29:CB:AF:4F:68:71:70:FB:3E
            X509v3 Authority Key Identifier:
                keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:9c:12:13:6e:89:b6:d0:ff:5d:87:3d:9b:1a:c1:9b:ba:
         55:91:c2:12:3f:54:0d:d0:48:e3:7a:27:8c:89:00:6e:07:4c:
         88:77:c6:75:f8:5c:34:54:99:1e:71:17:c1:08:3b:b4:7b:fb:
         85:82:f8:ed:11:66:b4:3c:54:f3:a2:ac:6f:b3:6e:7c:86:29:
         e7:6d:0d:92:b1:94:76:d5:71:d2:85:e6:be:2b:bc:c5:86:e6:
         26:4c:8a:8e:ef:dc:d1:30:a7:af:ed:b0:53:ba:7b:e2:e7:8f:
         a9:6c:99:9c:0e:d8:2d:12:e6:e2:9c:8c:77:eb:5e:29:53:4c:
         c2:8f:25:1b:8f:52:cb:c8:14:b6:9d:25:31:9f:77:70:c5:51:
         1c:50:07:a6:45:96:53:bf:88:31:2a:da:53:76:0d:73:7d:31:
         a9:f6:19:e8:08:23:3a:4a:df:6f:80:89:ab:00:57:eb:57:99:
         68:68:a7:08:ce:b2:65:f3:7f:9a:6a:33:7c:eb:44:cb:c2:fd:
         dc:7b:1e:e0:23:05:2b:74:4d:59:13:67:e6:d2:34:ff:d3:0e:
         eb:1c:1b:cc:67:af:39:ac:df:d5:af:62:ff:5d:7d:16:3a:a7:
         13:f0:e5:2f:18:a5:1c:81:cd:91:1e:53:c7:7e:f9:a4:bb:fe:
         b1:c2:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:38:06 2025 by rpki-client