Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          njyq8/zmwSz+7D5ED2tOio7kkwjMK6seDYy90pVG42A=
Subject key identifier:   3C:42:85:C2:74:6D:45:AE:1F:04:1B:A6:7C:7C:12:92:03:C6:BE:C5
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          016C
Signing time:             Tue 13 May 2025 03:24:08 +0000
Manifest this update:     Tue 13 May 2025 03:24:08 +0000
Manifest next update:     Tue 20 May 2025 03:24:08 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: kZi8YLTK095ROYfSnFZ876q4O29n1syai1CbGybz5lc=)
                          2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=)
                          3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: 2y8wJ1PVjmvj/h6RNUPibqQJhsY3FKf+7tKEQmy95j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: May 13 03:24:08 2025 GMT
            Not After : May 20 03:24:08 2025 GMT
        Subject: CN=6822bb58-173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:12:ee:94:3d:ad:ca:42:74:14:97:2c:3d:
                    0c:ac:6a:f1:17:7b:ae:4a:fd:80:d0:f5:a6:7a:27:
                    a9:43:e1:e6:c4:01:0b:b9:27:67:fd:15:e0:a8:c6:
                    10:8d:19:55:e6:2b:8e:f0:59:40:5c:2a:df:2e:8f:
                    90:87:7c:7e:9e:c7:63:dc:0b:c5:c4:f1:7e:d5:a6:
                    b3:db:fe:2b:b4:02:62:23:a3:46:f2:b6:50:ca:5e:
                    a5:d1:4a:e9:a4:a6:e4:ff:90:b3:86:54:67:3f:3e:
                    70:e3:fa:ff:5d:99:d7:5a:24:e6:b9:f7:47:c2:e9:
                    80:ea:07:90:35:89:73:68:a1:ad:70:fc:e2:e0:8d:
                    3a:a6:c6:20:97:46:c2:05:8b:4e:a0:bf:64:7c:1c:
                    70:0f:61:64:b7:50:e0:29:74:93:ae:25:92:18:6a:
                    b9:50:81:70:04:7c:47:52:34:bd:d0:24:73:5a:a8:
                    c9:4b:35:f4:b0:41:2d:55:f6:82:21:73:2d:88:db:
                    68:69:5d:e6:ea:d5:28:e5:e3:67:0a:aa:45:f0:f2:
                    1d:3e:3b:17:5e:0c:48:66:67:8d:ea:ca:84:80:d1:
                    20:d8:1b:28:71:bb:eb:0f:14:8d:1d:5d:ca:49:ca:
                    f9:50:99:79:d2:2a:d9:1e:32:50:a1:4b:e3:71:81:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:42:85:C2:74:6D:45:AE:1F:04:1B:A6:7C:7C:12:92:03:C6:BE:C5
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f9:01:ca:c3:80:fb:52:37:ed:98:81:01:34:d7:19:88:74:
         a0:1e:a9:21:1b:ea:29:84:ab:79:ea:1c:17:cd:ac:59:26:57:
         d4:f2:9c:d7:33:7f:4c:97:44:3f:e8:20:5c:92:a2:b8:e3:8c:
         26:df:29:1e:c3:41:9c:14:a2:bc:79:72:02:07:43:19:02:de:
         39:ec:05:bb:3c:b3:94:78:8a:c5:91:2c:08:4c:45:73:98:ed:
         6e:21:c8:8c:7c:48:7b:17:0f:a7:f5:f8:c0:7e:b0:96:8f:05:
         4a:ac:f0:0a:e3:98:d7:95:8e:83:c9:1f:e7:ed:c8:11:43:9b:
         6c:b8:de:13:b3:74:d4:ff:80:ef:40:5d:76:69:1c:77:0f:04:
         72:5f:82:d8:06:1f:32:07:1a:2f:07:0b:a5:46:9c:8a:87:9e:
         81:67:ea:5d:bd:f7:d0:28:09:0c:83:e3:8f:32:e4:bf:79:6a:
         ce:ea:fa:8b:15:03:4f:85:f4:7f:af:0a:2d:28:eb:d6:b8:e0:
         41:bc:68:0b:dc:9d:fe:50:0d:78:b8:cb:a1:03:6a:82:1d:26:
         63:8a:75:f0:db:5f:cf:e9:c7:cf:22:62:c0:bb:e7:f5:e7:8a:
         68:14:13:3d:db:b7:8b:48:ee:75:f2:88:2c:58:a8:5a:71:d1:
         30:70:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:07:01 2025 by rpki-client