Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File:                     wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier:          C6Rv4orE7ewNKp1Uy/oVGPPWTKSQzMaIJMTCMdEFc4o=
Subject key identifier:   DB:55:04:B5:4A:40:78:88:98:DC:E8:4F:73:1A:E3:23:3F:32:94:8C
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer:       /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number:          0562
Signing time:             Mon 30 Jun 2025 23:45:49 +0000
Manifest this update:     Mon 30 Jun 2025 23:45:48 +0000
Manifest next update:     Mon 07 Jul 2025 23:45:48 +0000
Files and hashes:         1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: uhAP7CcDQp04YhzDOx6v4C2f4LMZWREMJZkWb40iknE=)
                          2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: bEuAdA3yRgHUx1B8M9eSaNpdhvP9aDsmMm6seL8p7oY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
        Validity
            Not Before: Jun 30 23:45:48 2025 GMT
            Not After : Jul  7 23:45:48 2025 GMT
        Subject: CN=686321ac-69b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:33:57:e4:92:80:07:38:74:e1:86:e3:d9:
                    8c:61:6e:22:f4:06:08:7a:de:9f:83:05:1c:61:c2:
                    c6:6f:0f:61:a8:41:4b:1a:4a:0d:c7:74:ae:69:00:
                    52:50:20:73:4b:db:f7:fb:58:42:bf:a1:07:c9:e4:
                    5c:55:90:28:f3:95:50:5e:94:0d:be:ee:c6:a0:e1:
                    3a:b1:2e:81:42:e8:a8:2e:f1:b8:7e:db:31:04:f0:
                    59:fe:d4:f9:6f:09:b9:77:da:b1:b7:c8:4f:1f:ce:
                    c2:f2:16:c8:23:84:e8:40:ec:d3:a7:e3:d3:62:6d:
                    13:02:7f:4e:75:56:c3:42:76:07:25:d4:46:3d:c8:
                    dc:2e:c5:cb:c6:1b:9a:36:22:69:5d:72:2a:db:a7:
                    81:5d:ed:68:e3:ec:30:82:49:43:62:ab:e5:ad:a1:
                    bb:af:fa:0a:6b:fc:06:fd:84:d3:34:44:53:c5:7f:
                    f4:b1:bb:d4:70:13:39:43:89:96:64:52:a9:be:46:
                    e3:78:aa:83:2d:b8:70:df:7f:d8:a9:c2:b1:00:c8:
                    9f:af:3a:3a:37:bf:1c:29:c4:6e:ea:f8:36:6b:7f:
                    36:f9:90:07:ea:c1:d1:95:6a:72:c9:a6:f6:20:26:
                    0a:ba:45:e6:3f:89:36:a5:64:6e:e7:8e:db:4f:73:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:04:B5:4A:40:78:88:98:DC:E8:4F:73:1A:E3:23:3F:32:94:8C
            X509v3 Authority Key Identifier:
                keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:46:42:32:65:fe:68:69:9f:f9:9c:ec:6e:0a:b5:84:32:d8:
         50:0e:a2:3b:d7:6f:28:3f:f0:78:c0:20:2a:a1:eb:a3:52:97:
         94:00:25:f2:0d:d9:2a:72:7e:67:46:93:a4:15:2f:4c:2f:1c:
         1d:0b:ed:6b:9b:75:d6:f1:21:cc:bf:ba:09:cb:ff:09:67:d6:
         f8:d6:b5:c5:8c:69:7a:c3:31:b7:be:5d:c5:93:a3:01:2a:53:
         62:4c:6e:81:56:37:57:9f:93:77:6c:5e:3f:1b:00:14:04:ee:
         99:3b:8f:29:24:9a:df:1b:14:a8:fa:26:76:b4:43:4a:5c:2a:
         8a:b6:67:cb:50:3c:c2:48:a4:06:a5:65:3a:89:bb:c8:59:4f:
         22:e6:3d:d0:26:a2:c2:a2:54:ed:71:ef:7a:82:80:f4:cd:7f:
         49:3e:7f:68:ae:ea:5e:dd:37:14:f0:f8:c9:95:d2:06:f3:98:
         16:26:ae:4f:f9:78:7d:fe:44:85:8c:17:9b:42:33:51:b3:8e:
         7c:20:2d:31:7d:96:7c:2c:31:19:3b:08:2d:3f:d9:a2:42:54:
         b4:ad:50:a6:91:76:8d:58:d4:27:07:53:ad:55:1e:39:1f:59:
         64:af:9e:d4:7f:47:9a:2b:f6:b1:54:d9:6d:af:31:3d:10:cf:
         40:2e:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:14:06 2025 by rpki-client