Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          mIZQSgaLyzScDvtzlJR1AUJziqx2NS7wR/WJn2EyKyw=
Subject key identifier:   03:73:F3:F5:99:35:B3:94:39:A7:B5:49:27:81:75:A3:25:3B:41:49
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          AA
Signing time:             Sat 19 Jul 2025 06:19:34 +0000
Manifest this update:     Sat 19 Jul 2025 06:19:33 +0000
Manifest next update:     Sat 26 Jul 2025 06:19:33 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: Mmhvj/AoFz6ieK+1IE31OCmhta0cnS07NQFi1KQkWkw=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: Jul 19 06:19:33 2025 GMT
            Not After : Jul 26 06:19:33 2025 GMT
        Subject: CN=687b38f6-f4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:99:ca:05:f1:dc:41:3e:d3:96:c7:17:17:
                    10:89:4d:3c:22:40:d1:7b:54:14:f9:94:eb:10:80:
                    e4:b6:26:bd:17:4d:ce:09:96:87:4a:e8:11:71:0b:
                    d1:89:84:ee:b7:b6:b1:eb:cb:bb:bb:b1:7c:d2:6d:
                    6d:28:1f:f6:23:38:92:24:dc:af:05:9f:14:58:9b:
                    1a:70:ee:19:13:29:88:f3:4c:df:c7:ad:3e:2b:54:
                    25:f2:b3:ce:54:98:b4:dd:91:2b:20:c5:d5:49:32:
                    bd:7d:75:73:f3:2c:22:56:4f:7d:96:b1:3a:18:41:
                    b7:38:f1:80:a4:83:d0:9d:58:d2:6e:58:18:72:d8:
                    0a:22:f8:74:f6:22:d0:a1:1a:bf:a9:fd:22:31:97:
                    7f:79:1e:a3:d9:f7:6d:b3:61:8c:36:73:70:5f:3f:
                    d5:91:7b:d3:6f:a7:54:f4:38:28:45:a6:63:5b:9e:
                    90:88:ad:6e:3e:58:5b:07:7c:98:cb:7a:1c:33:0a:
                    d0:0b:a5:bd:36:6f:5e:d5:f4:25:95:5e:d9:b6:ce:
                    9d:c4:0e:06:e7:1b:5e:8b:5a:36:6e:2c:65:91:67:
                    2c:79:25:cf:05:2d:9a:4b:79:05:e2:4b:92:82:30:
                    d8:e0:da:03:85:7d:66:3f:2b:bc:3b:60:a5:d2:a4:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:73:F3:F5:99:35:B3:94:39:A7:B5:49:27:81:75:A3:25:3B:41:49
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:4d:df:5c:20:83:de:44:a5:b7:e9:de:82:8c:d3:b6:1f:
         dc:96:82:8d:59:84:82:39:d5:b1:66:50:f1:73:9e:ae:d0:eb:
         74:c7:c8:dc:a2:e7:79:bc:fc:f1:99:9d:5f:1d:71:5f:eb:89:
         a1:13:06:cc:a2:ed:fc:93:5d:e5:79:98:36:72:13:9b:2a:32:
         66:ee:af:43:93:b6:fc:5a:b6:a0:52:49:f0:72:32:11:ba:46:
         c7:28:e2:83:b4:e7:07:f8:46:66:c6:3d:11:4b:45:80:60:19:
         aa:39:88:3f:27:e4:81:46:ea:b4:4a:72:cb:cf:e9:df:e7:3c:
         5e:de:15:19:2f:b1:74:28:44:92:4c:ef:49:6d:47:da:f1:3f:
         86:cf:7c:a3:be:3d:5a:80:7c:e3:83:61:c0:b7:22:1d:5d:25:
         09:4f:74:c0:74:93:df:c6:4b:32:80:59:6f:a2:5b:dc:ec:49:
         7c:f8:97:73:58:18:bc:20:af:81:f5:40:1a:b3:50:76:53:86:
         0d:ab:08:12:68:d5:0f:8e:00:47:de:bc:05:27:0b:9a:40:58:
         69:c8:85:db:70:ec:c0:20:8b:c1:42:e6:6d:29:d1:70:0f:70:
         78:0c:d8:37:73:83:74:30:61:ca:4f:6d:d4:35:2e:e5:f2:ca:
         54:43:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 19 14:53:52 2025 by rpki-client