Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          eJfLkblJen33n06PfxxO0lI5FJiyi4l5Vr4vDVtGYCU=
Subject key identifier:   54:10:17:54:4D:76:2C:AF:0D:71:2F:20:4A:14:04:36:69:6C:25:D5
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          0615
Signing time:             Mon 12 May 2025 22:34:21 +0000
Manifest this update:     Mon 12 May 2025 22:34:21 +0000
Manifest next update:     Mon 19 May 2025 22:34:21 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: CxXQCLCsetkJzU3MdzrhyW18JOTqMSFhloMNvKYQXe4=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: KNP57ubsOVF9oNCH7Xk/Z7xQApgpYUwHKDlJNQIBNxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: May 12 22:34:21 2025 GMT
            Not After : May 19 22:34:21 2025 GMT
        Subject: CN=6822776d-d6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:81:29:8e:a8:e3:a4:2b:9a:9a:cf:e7:ac:
                    3f:19:12:53:94:1c:a2:12:21:12:f8:8f:5b:64:33:
                    d6:53:fd:a0:41:49:91:67:b0:0a:2b:73:49:c4:a8:
                    95:af:db:97:82:b9:aa:0c:c1:9f:2e:8b:62:7e:2f:
                    25:89:de:b2:b9:53:4f:c1:68:5f:b8:8c:64:40:d4:
                    af:44:ae:ff:72:12:0f:70:48:a3:ea:53:fe:31:ec:
                    a6:94:89:16:3b:6d:c1:17:6b:db:6f:9b:df:57:f4:
                    e0:37:eb:01:87:83:22:d3:6d:c2:55:06:33:7f:a4:
                    1e:de:4f:d9:e8:94:ce:a5:e0:88:9e:55:fb:25:57:
                    cd:8e:46:71:36:a9:3c:27:10:93:73:b4:de:32:8f:
                    d4:10:88:b6:9f:7a:4a:05:e5:82:42:62:b1:f5:2a:
                    62:a6:28:f1:a0:68:20:2f:09:07:91:e8:82:80:51:
                    53:1e:45:05:34:7e:7b:99:9c:3d:f0:ad:fb:22:02:
                    4a:3f:2f:6e:8e:b2:bf:7d:3a:ec:07:5a:8d:72:18:
                    82:07:17:b9:ed:5b:51:37:54:68:02:84:61:0d:00:
                    ef:37:d3:e0:74:cd:0e:13:49:bc:7e:2c:42:8c:c6:
                    4a:8a:50:71:37:c3:9f:2b:ef:74:47:84:95:1e:71:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:17:54:4D:76:2C:AF:0D:71:2F:20:4A:14:04:36:69:6C:25:D5
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:08:54:d3:d0:46:01:40:5d:b5:7e:47:a7:15:27:55:57:
         85:f4:ad:8c:06:00:96:0d:d2:00:8a:e5:1b:d5:9e:7c:e4:a6:
         d2:af:1b:23:c3:73:c9:05:02:d6:2f:51:9d:24:38:75:c1:0e:
         7c:c3:62:ce:8a:b4:f9:4e:de:e5:84:c9:49:9c:c9:e2:87:07:
         cc:25:2a:92:98:45:1c:cd:47:31:f0:02:3b:9b:d9:7d:32:3b:
         f6:5c:72:66:a4:28:92:44:4a:0f:68:f6:7f:99:de:94:e3:ae:
         00:a4:2f:49:ac:86:b0:55:d6:42:b4:69:b5:c7:25:ce:e0:5a:
         a5:51:54:93:b2:43:7b:76:b9:7e:47:6a:86:48:cc:15:3e:43:
         63:7f:3d:26:ac:0f:85:ab:a9:2e:49:e4:9a:06:69:db:aa:7d:
         8d:e8:4b:ca:7c:45:a0:ab:c9:2f:0c:79:6b:0f:f9:37:35:52:
         56:74:bf:92:47:86:8b:cd:84:7d:7f:59:d7:25:84:c7:61:c1:
         ab:75:4a:de:ef:53:49:eb:15:b2:20:8d:69:31:50:7a:ea:ed:
         1f:ca:f7:8c:be:b6:40:f3:be:f2:5a:e7:4f:d7:1f:77:6b:95:
         fa:e9:2e:1a:20:c7:e5:82:c8:07:b3:20:08:8d:41:b5:5d:4f:
         ec:e0:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:15:00 2025 by rpki-client