Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File:                     Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier:          pfJFK//NfoP7vCmRtFGnKNWl19ncu0p0yS/fDe7hL9c=
Subject key identifier:   55:9B:96:CF:3F:F6:EE:7D:4E:14:8F:CE:70:62:4F:7F:3B:AF:AE:62
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer:       /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number:          23
Signing time:             Thu 15 May 2025 07:08:28 +0000
Manifest this update:     Thu 15 May 2025 07:08:28 +0000
Manifest next update:     Thu 22 May 2025 07:08:28 +0000
Files and hashes:         1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: x8rjo4K5r1tMU8yTvtqucYCRlvWghDh7g0U2hU5WzxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
                          rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 07:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
        Validity
            Not Before: May 15 07:08:28 2025 GMT
            Not After : May 22 07:08:28 2025 GMT
        Subject: CN=682592ec-310b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:5b:d9:3b:c7:eb:5d:3d:64:60:2c:fa:59:
                    c5:a3:34:0e:7e:a9:0e:4f:15:b4:6e:fa:cf:75:b2:
                    53:ac:05:1c:dd:fa:88:e6:88:75:da:cb:cd:f1:5f:
                    33:5c:ff:37:24:0f:c1:c6:46:50:56:73:81:b8:18:
                    4c:6a:63:aa:3c:ff:51:e1:21:28:1f:6e:0c:d3:90:
                    ee:11:e4:f1:46:80:d5:8c:49:10:df:30:bf:95:05:
                    4f:4d:c5:aa:b1:ae:d3:88:68:ff:d4:2b:4a:60:6f:
                    18:ae:4c:af:c2:e1:da:d3:16:95:fe:52:44:f8:08:
                    8b:9c:02:d8:b8:3f:5a:41:06:70:4b:cc:a3:f6:93:
                    12:ab:c3:07:f8:9e:44:73:0a:b2:1e:05:b9:d3:49:
                    a6:9c:b7:96:61:9e:f9:79:a2:33:cc:f1:55:44:a6:
                    70:3d:bb:26:8b:a0:c0:ec:a9:19:e2:79:13:29:3c:
                    5c:a6:30:30:47:1a:e7:41:9e:0c:e7:c8:5c:b1:74:
                    fc:35:10:92:ff:83:1e:b9:76:4d:d8:3f:36:22:d3:
                    14:08:7a:16:28:e7:15:44:11:3c:5e:28:65:35:00:
                    59:a8:c8:24:13:47:64:8d:00:dd:59:44:34:64:fa:
                    9f:bb:37:94:cc:72:4e:53:f6:11:b3:3b:ea:1d:1b:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:96:CF:3F:F6:EE:7D:4E:14:8F:CE:70:62:4F:7F:3B:AF:AE:62
            X509v3 Authority Key Identifier:
                keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:2b:dc:64:40:92:df:15:b5:b9:71:51:04:84:d8:33:3a:
         0e:67:25:fa:23:32:52:1f:b1:0e:db:52:8f:25:41:fc:c0:ef:
         1c:0a:4b:ca:ba:19:fe:32:3f:54:53:0e:40:92:b5:a2:c7:70:
         77:6a:00:f1:94:a3:1c:66:aa:d9:9a:39:3c:cb:85:cc:b3:50:
         ab:d6:37:b6:f7:60:d6:1c:7a:eb:34:e1:e1:b1:35:ac:7b:eb:
         cc:b3:0d:76:0d:30:56:89:e0:12:a6:77:f8:e6:16:05:fa:8c:
         11:24:7b:5c:0c:dd:e5:03:6e:68:df:34:4e:a1:94:11:f1:be:
         e5:27:b0:14:36:a8:dc:85:f1:3e:63:38:8d:ea:c3:95:13:48:
         c8:99:0e:a1:39:80:32:17:1e:14:f9:db:b4:f5:e9:5d:7d:66:
         6c:8e:02:c7:c1:4f:d1:93:0f:e2:e1:73:c6:dc:9e:e8:b6:58:
         9e:28:82:f5:c4:0e:dc:d6:a0:cf:e1:cc:dc:75:49:d6:22:ef:
         9e:d5:9b:2b:f7:22:d3:f5:e3:59:7d:76:a7:9a:f1:10:22:08:
         94:1b:b9:3e:c6:20:a3:46:1f:9f:bf:2b:0c:40:49:92:bd:c9:
         88:07:84:59:b4:71:c8:a9:35:7f:38:18:69:ec:ab:ce:92:37:
         77:48:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:25:45 2025 by rpki-client