Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          Jy21pqarRyOP1ZiCbV9KzIc6DhGSoRcZsIys/nXmPnU=
Subject key identifier:   24:41:CB:56:F3:84:9D:3B:E0:0A:31:24:06:D2:87:30:D8:A5:C1:83
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          8B
Signing time:             Sat 17 May 2025 06:00:10 +0000
Manifest this update:     Sat 17 May 2025 06:00:09 +0000
Manifest next update:     Sat 24 May 2025 06:00:09 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: eJp7xFVMFLIEwc6BKrY4PjaDTa/+0zl/ngb/TySCRz0=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 06:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: May 17 06:00:09 2025 GMT
            Not After : May 24 06:00:09 2025 GMT
        Subject: CN=682825e9-7710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:29:e4:cb:2b:48:3d:f4:54:fa:51:ef:15:
                    5e:8c:78:44:38:e4:31:0e:43:45:4d:21:b3:3d:7e:
                    74:ad:c1:e9:3d:5d:c6:4f:4a:6b:56:7b:c8:38:ef:
                    bf:54:90:9f:96:91:83:d6:27:c8:b1:f1:53:fa:fa:
                    cf:20:f5:48:a7:43:2e:85:b4:f5:54:17:ba:7f:89:
                    e6:b2:8e:4c:b3:b6:3e:e6:b8:4d:bd:77:1e:d9:17:
                    d0:95:d2:71:f4:fd:fc:b8:f9:fe:62:66:b4:6b:95:
                    44:f5:fa:b1:47:0e:2f:02:f9:3a:a1:f6:9f:7f:b6:
                    0b:98:93:d4:b9:e7:11:a9:1c:e5:3d:b7:5c:53:96:
                    43:44:13:ba:46:c2:de:4b:f0:56:da:7e:02:d1:62:
                    33:d3:70:4b:f2:d1:13:26:17:22:6f:bc:1a:6c:68:
                    73:b9:32:b3:14:58:d1:56:24:d6:21:43:4e:35:96:
                    69:96:4d:34:df:8a:7e:84:d1:44:6d:61:4c:c7:a6:
                    f8:9f:7d:78:c0:3e:08:79:c5:68:30:bc:24:87:19:
                    15:e1:3b:66:f6:09:29:ae:c2:f1:8e:f5:af:59:fe:
                    4d:9d:6e:b6:38:c4:72:9f:d4:29:58:42:d9:e6:cc:
                    cd:6c:a7:48:3f:4f:0e:82:bb:36:4b:90:35:03:bc:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:41:CB:56:F3:84:9D:3B:E0:0A:31:24:06:D2:87:30:D8:A5:C1:83
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:b4:1e:b8:ad:78:22:d6:bb:a6:2d:41:38:f3:4d:dc:d2:
         f3:97:fd:c5:97:0d:8b:9e:67:e2:ba:b3:ae:70:5b:ce:8e:5b:
         4b:4b:f8:46:e9:e8:b6:73:3e:d2:10:11:e2:03:14:0d:39:97:
         5f:6e:28:cf:1e:f8:ce:18:f1:c2:c8:f6:be:4e:d7:ae:e6:46:
         06:39:7e:c6:aa:fd:48:3b:65:4a:09:e9:18:b7:c5:79:69:7b:
         22:2a:89:c1:88:0d:43:06:e0:44:7c:87:b2:b8:72:42:b3:b5:
         df:b6:50:fc:26:6b:74:f4:d2:89:95:be:99:7c:d1:c4:f6:c5:
         bd:5f:f1:57:ba:14:87:7e:22:4f:4b:6d:a8:a8:1f:19:3a:7d:
         fc:45:84:5a:be:9e:21:28:6c:43:9e:2a:9f:10:d9:50:ef:6f:
         ca:e9:13:ca:63:dc:50:c5:5d:f0:4c:8d:0e:19:20:76:81:42:
         4a:b8:b1:c3:3c:c2:17:ae:cc:fc:c5:d4:0e:35:19:58:6a:5a:
         07:de:a5:5f:c7:14:6c:4b:9e:75:43:1e:a0:e5:b6:42:ff:df:
         15:54:8f:56:e3:5f:e9:45:12:31:d4:f5:54:6a:aa:55:2f:f4:
         94:9d:43:bf:44:e5:58:66:7b:99:38:10:08:10:d3:a9:d7:76:
         17:7a:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:14:30 2025 by rpki-client