Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File:                     woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier:          ++zzvdRhIMvuIjhzOFXCRgd1WCEszx011NePN7nlWns=
Subject key identifier:   88:9D:C8:68:9D:60:22:A7:A8:B4:53:1B:88:49:FF:07:A9:10:B3:08
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer:       /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial:       0B94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number:          0B77
Signing time:             Wed 14 May 2025 19:14:27 +0000
Manifest this update:     Wed 14 May 2025 19:14:26 +0000
Manifest next update:     Wed 21 May 2025 19:14:26 +0000
Files and hashes:         1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: DSwjGWwI/txET64MsS98KinpGQdBojTBQBDF+512uzU=)
                          2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2964 (0xb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
        Validity
            Not Before: May 14 19:14:26 2025 GMT
            Not After : May 21 19:14:26 2025 GMT
        Subject: CN=6824eb93-6f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:60:a6:1b:e2:d5:e5:d3:9f:69:9c:88:ff:
                    a8:da:5f:22:c0:f4:07:fd:40:42:c8:70:68:d2:53:
                    4c:44:0a:5f:ae:8b:49:07:b9:3a:97:d7:25:03:5e:
                    a5:e3:11:f0:a1:44:41:9f:7f:54:c1:3e:3c:a9:08:
                    1c:a5:d0:a7:e9:7b:ac:be:0d:a8:1d:21:b4:7d:fe:
                    24:da:45:ed:90:39:c2:3c:f8:02:cf:a9:58:31:d6:
                    9c:eb:92:d5:68:a5:87:5b:02:4a:17:a1:27:30:cb:
                    82:f3:fa:93:51:29:1c:16:50:0a:84:34:6d:b1:21:
                    47:d8:41:ec:b8:5a:4c:29:e1:70:91:3d:de:c9:88:
                    b9:d0:84:8c:39:84:87:11:f3:96:47:27:8d:6d:80:
                    63:c0:00:6c:54:79:23:45:46:3d:2e:3c:01:34:2d:
                    e6:77:c7:6f:27:5d:98:f8:f1:1c:2a:fe:b9:8e:2a:
                    8d:29:d4:00:00:43:ba:7e:12:7b:db:34:8f:d2:05:
                    63:50:b5:ae:f4:0f:92:f3:ec:f2:2a:ec:45:a3:1c:
                    5a:e7:0e:83:00:7c:8f:c7:84:78:29:e2:b1:1d:66:
                    74:5a:64:09:c4:a9:56:91:8e:04:6f:73:88:60:6b:
                    fe:00:85:d4:4b:3d:e0:e7:ef:1a:da:af:a1:64:14:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9D:C8:68:9D:60:22:A7:A8:B4:53:1B:88:49:FF:07:A9:10:B3:08
            X509v3 Authority Key Identifier:
                keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:73:87:10:5b:ac:89:c5:d9:07:48:0e:72:19:37:80:55:
         0a:a1:6e:fc:60:b4:6b:cc:26:b1:74:f9:a3:1b:20:be:3c:9b:
         93:16:e6:2e:39:09:76:ce:49:d7:5f:af:ff:43:f0:82:3f:37:
         cc:b9:f9:0d:87:84:b0:77:22:2c:32:06:82:07:96:e9:d3:f5:
         74:69:2e:c8:98:40:f9:ef:85:d7:56:80:ba:06:8e:22:8b:1b:
         9d:3a:cd:16:4d:3b:4c:38:96:82:36:0c:b3:04:14:b5:18:bf:
         b6:1b:1a:60:ee:8d:a9:22:cd:36:75:1f:c4:0d:41:7b:a9:d4:
         12:66:15:72:5b:00:cf:a5:5e:85:48:18:b3:e5:51:f4:4f:58:
         51:9d:d4:f0:37:46:1a:67:2a:64:e3:a0:bc:a5:ef:42:6d:bb:
         8b:d5:9a:d5:61:97:d1:52:0a:40:03:f3:3f:16:95:3b:89:d6:
         5a:1c:f1:47:0f:63:28:7e:8f:c8:30:73:36:6d:84:ac:b9:a5:
         ae:40:19:38:f5:b6:94:4e:e6:86:3c:b3:57:01:27:bd:c1:97:
         fa:5e:e6:07:7d:53:31:56:09:d2:32:38:10:d2:78:d6:2c:19:
         1d:98:5b:ab:ae:ca:c8:2f:64:65:83:2e:dc:18:2c:aa:b2:ce:
         8a:5d:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:22:21 2025 by rpki-client