Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
File:                     RWxgg2WE6Qooop0Ci1snYBqT1EY.mft (raw, json)
Hash identifier:          qA+2YgJdW9GZ68HNRoi+osGQ/5kPqtzdbb8A5wqHrMo=
Subject key identifier:   BC:9A:E4:24:A4:1D:D8:85:1C:F6:C6:CC:15:76:4E:8A:04:47:BE:4F
Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
Certificate issuer:       /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
Manifest number:          22
Signing time:             Thu 15 May 2025 07:09:30 +0000
Manifest this update:     Thu 15 May 2025 07:09:30 +0000
Manifest next update:     Thu 22 May 2025 07:09:30 +0000
Files and hashes:         1: RWxgg2WE6Qooop0Ci1snYBqT1EY.crl (hash: wuRJ1gyt13azOVz92yrHni7LOfH7BLmAjvNk6W+brzo=)
                          2: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (hash: tVDbnB/oVjQqBCd2UeAI1BWWN7K0TVLfW0PjLHaDZvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
                          rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446
        Validity
            Not Before: May 15 07:09:30 2025 GMT
            Not After : May 22 07:09:30 2025 GMT
        Subject: CN=6825932a-529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fb:af:99:b1:17:35:0e:4d:25:82:4a:82:28:
                    36:3c:c9:b1:09:d8:be:39:00:8a:43:ad:73:d3:4b:
                    1c:23:82:5b:06:c2:c4:72:db:6c:b3:90:d7:65:ba:
                    f1:64:d5:e3:6f:dc:28:e0:9e:db:87:f0:2c:82:01:
                    e8:7d:33:36:ab:57:c5:fc:1d:02:de:77:2e:99:3a:
                    cf:39:7f:e7:d7:f5:a2:86:02:e2:79:ec:21:6d:12:
                    37:1a:f7:c3:a9:8a:46:2c:e9:c4:f5:7a:9e:24:f2:
                    01:20:40:2e:8a:fe:94:83:4f:1b:7c:7f:9f:12:6a:
                    78:9b:94:38:f7:0d:05:1e:79:a8:f8:ab:96:e4:d0:
                    d4:f4:bf:99:83:1d:85:ba:82:a6:16:27:25:3c:34:
                    ee:cf:ce:0c:d7:c9:83:60:dc:75:91:34:a7:d3:e4:
                    c9:5d:88:80:1f:57:90:71:29:b4:49:ce:4e:93:5e:
                    48:29:df:23:14:e2:de:ec:2f:12:9a:c2:d9:1c:ac:
                    8a:64:dd:cf:18:39:92:c7:7d:ba:cb:11:13:57:6d:
                    82:ae:50:3b:03:c4:32:19:17:46:92:67:66:cc:f4:
                    00:e7:9b:36:14:ca:be:86:26:e3:41:c8:65:bf:e1:
                    d0:5a:5d:fb:30:2b:5d:6c:1e:e5:45:04:fa:40:a7:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:E4:24:A4:1D:D8:85:1C:F6:C6:CC:15:76:4E:8A:04:47:BE:4F
            X509v3 Authority Key Identifier:
                keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:84:ee:24:f9:ec:6a:20:87:22:bf:24:a5:8b:36:a0:97:81:
         89:61:8e:00:d6:a9:50:7c:7f:80:88:db:3c:25:fb:4b:de:e9:
         13:59:d4:3f:27:37:78:c9:1b:ec:17:4e:70:f6:9e:a0:de:f9:
         3f:21:68:b6:59:24:41:9d:21:4c:ed:49:63:0e:41:e2:73:4d:
         2f:09:d0:d7:16:6b:96:f8:b4:c2:7e:c4:11:f4:9e:57:3f:43:
         ba:17:ea:07:ba:0e:0e:3f:2e:78:64:8f:5e:57:7b:a0:fd:cd:
         53:d6:2b:ad:18:fb:84:95:cd:10:8b:47:0f:59:57:4e:84:f6:
         1f:62:8c:17:98:86:e8:db:d4:50:9a:ac:6f:b5:eb:cc:f5:e6:
         96:fc:54:1a:a4:d1:05:07:24:0e:e3:69:3a:2b:b1:42:8e:1e:
         3b:ca:0a:63:48:65:bc:fd:b5:a4:e6:52:51:d2:85:94:e8:23:
         25:6c:8c:8a:b3:e5:d4:c0:70:90:54:78:76:85:8e:3b:04:98:
         88:6c:c5:77:a1:67:29:5e:35:c9:3c:08:a9:75:84:db:d9:fa:
         e0:02:38:6a:43:3a:80:4b:ac:4b:dc:c7:f6:e7:c1:aa:b9:13:
         26:27:a0:de:ac:7b:7a:47:ca:47:40:d3:73:04:ff:e8:01:44:
         9c:1d:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:55:30 2025 by rpki-client