Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
File:                     wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json)
Hash identifier:          7M4M/UPGU9cGDNriUtVXhp2B1OrpVFsrqA7IR4gChPc=
Subject key identifier:   F0:E1:DB:E3:AB:AE:15:74:B6:E5:32:C3:3C:F6:B7:FF:31:0B:29:28
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
Manifest number:          0186
Signing time:             Sun 29 Jun 2025 02:41:43 +0000
Manifest this update:     Sun 29 Jun 2025 02:41:43 +0000
Manifest next update:     Sun 06 Jul 2025 02:41:43 +0000
Files and hashes:         1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: ImIw5F4A5S9sAr1P95FmoMXlBmzUhkEPfYA7TWwI1Uo=)
                          2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Jun 29 02:41:43 2025 GMT
            Not After : Jul  6 02:41:43 2025 GMT
        Subject: CN=6860a7e7-988d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:be:a7:18:e8:c7:45:b1:71:63:46:ab:7d:
                    8e:8b:62:5a:be:64:77:44:c1:ae:31:5e:5b:04:cc:
                    9b:f8:85:a4:c1:ac:1c:12:69:10:0c:27:ea:e1:a7:
                    5a:e7:d8:2a:9a:ac:21:6a:79:9f:d2:b4:cc:1d:ff:
                    1d:1a:84:c8:26:10:45:b5:d3:fe:78:b4:f7:98:1e:
                    dc:b7:08:8d:04:38:80:f2:8d:24:7b:42:9c:b9:71:
                    56:21:4d:c8:76:5c:7a:bf:06:bf:a3:af:8d:01:bc:
                    22:62:41:35:12:e9:f5:23:6d:4c:72:94:7d:60:65:
                    3c:ae:6e:f0:43:ec:96:7f:fa:c9:17:a2:ec:94:c0:
                    64:90:c6:09:ab:50:3b:64:39:8f:dd:cc:01:b9:76:
                    a1:d4:fd:35:99:db:f8:7f:3e:d7:cd:98:15:df:1f:
                    99:c5:5f:1b:3f:f5:f1:b2:e4:8c:fb:ab:62:17:0b:
                    89:68:3e:96:29:00:9a:93:fe:5e:55:45:50:1f:b9:
                    38:5c:e2:0b:b2:07:d5:87:a3:b0:87:2f:ed:aa:fe:
                    49:4c:75:aa:b2:03:98:19:83:52:a3:14:2d:fd:2d:
                    50:41:96:77:05:f6:5b:26:bc:4e:59:d3:33:53:eb:
                    7f:0c:b5:95:c4:73:97:80:57:2b:1d:74:c3:8c:df:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:DB:E3:AB:AE:15:74:B6:E5:32:C3:3C:F6:B7:FF:31:0B:29:28
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:b4:87:55:a7:ab:2b:40:11:b8:c4:48:5c:bc:5e:77:c4:
         fd:e9:08:8b:f6:de:80:80:6f:5b:a9:e5:08:44:17:8b:04:6f:
         dd:f7:7b:32:da:d4:1d:a3:26:5b:47:9d:b9:bb:12:00:04:61:
         fb:b2:e9:0b:d5:d8:4a:c4:b8:34:18:cf:b7:77:f2:3b:3a:a4:
         55:89:c7:4a:4b:93:77:f4:07:2a:e8:14:dd:1e:89:85:58:63:
         bd:26:e2:4c:17:0f:ff:8f:30:44:b0:80:c4:2a:63:9a:96:29:
         a6:34:3e:8d:29:bb:e8:12:86:f3:2b:34:af:dc:fc:34:f2:4a:
         67:34:b6:0e:27:cd:02:25:db:06:9f:0a:ae:77:2d:c2:63:19:
         cd:9e:9b:bd:f3:84:39:0f:84:4a:92:4e:57:04:40:13:35:42:
         06:30:7d:1b:29:63:be:41:ff:97:00:45:38:ea:19:9a:57:3e:
         f3:a2:52:db:56:28:6c:14:79:9f:4b:c4:0a:01:99:33:8b:fe:
         83:d4:38:39:47:de:46:31:93:37:9c:d4:38:68:2c:de:d6:41:
         e3:ca:13:ac:a3:96:42:47:dc:f4:84:bd:c0:45:e9:1b:79:cd:
         a7:20:35:27:4b:5f:6a:ef:4e:05:c0:25:be:4a:e0:39:22:72:
         7c:0b:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:40:11 2025 by rpki-client