Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
File:                     WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft (raw, json)
Hash identifier:          HZMt4sQKlpGiC/b6vnUZKluvL++RhgfkhSDF2GqvEHw=
Subject key identifier:   F2:B2:B8:92:BB:6E:02:7C:00:11:2C:16:ED:D7:91:44:B1:57:B2:FC
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       0637
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
Manifest number:          0620
Signing time:             Wed 14 May 2025 22:52:56 +0000
Manifest this update:     Wed 14 May 2025 22:52:56 +0000
Manifest next update:     Wed 21 May 2025 22:52:56 +0000
Files and hashes:         1: WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl (hash: tnHm/ht/DMt8UqMlyvKA40gZLtvDQ1GuPAshmxcrpIg=)
                          2: 636BEC0EDE2911EB9B09A334C4F9AE02.roa (hash: VOYm7jU4Kvc9hx4OGGVzt7NNxmHs7ShlGibbgILvMOk=)
                          3: B7C5A65A789511EF9F788D6CC4F9AE02.roa (hash: FLIaC8+H2xNjpJ35zOczqWgOPR2HIQ5C5y39ODcYtx0=)
                          4: E8D31B34EEE611EF9A3B106FC4F9AE02.roa (hash: cPs1LKJUI3RaKvM0Gb6vGr7waDmX6Las4XomAAIFzGA=)
                          5: E71DE3EA563B11EEB0A9E236C4F9AE02.roa (hash: 8l6giQdjJx2S1Fe0QDhUiPROaODQoPmGLlkq+hHu3as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: May 14 22:52:56 2025 GMT
            Not After : May 21 22:52:56 2025 GMT
        Subject: CN=68251ec8-5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:14:fd:93:a8:d3:58:12:d8:23:74:1f:c1:
                    d2:5b:4b:fc:34:9b:22:b2:6e:2d:38:8f:8d:25:27:
                    c8:ea:9f:43:a1:bf:a4:18:e0:fd:55:d0:0a:c8:c6:
                    12:60:0b:e5:09:da:14:0a:95:ac:6e:aa:39:74:6a:
                    55:66:d7:7e:a4:3f:35:68:e0:dd:9f:aa:54:9e:b4:
                    f5:74:87:f9:24:0a:03:c7:9f:66:78:c3:17:26:0d:
                    31:70:41:19:38:bc:93:f6:85:84:22:a1:cd:12:78:
                    8a:70:2f:8d:ff:34:c2:be:b3:ba:c5:2a:c9:7c:36:
                    1d:21:a2:3b:30:24:4f:4d:3b:14:81:91:35:6d:e0:
                    a3:ff:2b:57:84:c7:a1:0d:1f:d3:28:73:4c:1a:16:
                    12:74:ab:3e:d2:42:f1:65:f9:d0:b9:c6:a2:20:ce:
                    92:3e:9b:c2:8a:7a:4c:e2:42:48:60:15:2c:1b:a8:
                    ca:c6:09:79:1e:51:ad:30:26:7d:ac:90:9c:54:46:
                    84:6b:12:ff:9b:49:04:b0:a9:87:c3:4b:db:a5:f7:
                    fb:93:ab:c5:58:33:df:0c:b1:af:f2:64:bb:48:53:
                    6d:c5:39:e9:e6:7e:68:a6:27:fb:90:f4:73:39:7a:
                    8e:ba:4a:34:d8:78:40:0b:99:23:b5:75:60:7e:43:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:B8:92:BB:6E:02:7C:00:11:2C:16:ED:D7:91:44:B1:57:B2:FC
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:75:58:7d:97:d8:da:61:dd:c6:f7:f0:d6:43:d8:cb:b6:
         78:8c:17:16:f7:59:74:6c:62:c0:06:d4:02:c4:64:04:60:25:
         68:2d:7f:f2:00:69:02:6b:4f:a4:6a:92:0f:f2:ae:3c:4e:62:
         d7:29:73:48:7e:d0:d3:3d:01:14:c7:ca:1f:52:87:80:05:11:
         2a:a2:d2:8f:d4:d0:da:62:0e:b6:f3:26:e0:9d:ec:c9:c1:d8:
         ee:27:5e:22:6f:ba:0a:b0:67:47:77:c0:46:1c:38:ec:45:a2:
         5d:dd:96:a8:cb:f3:7a:28:3b:3a:05:49:61:86:9c:90:8d:92:
         38:db:29:4d:5d:54:b8:97:5a:35:a6:9f:f7:f0:dc:f0:db:ef:
         b2:4f:7a:af:49:8a:2d:c2:00:cb:66:e1:45:f8:bb:1b:c0:78:
         78:1a:28:88:c5:0a:1b:8f:f5:97:ba:55:d7:f5:70:26:a3:3c:
         77:ce:fa:31:5f:9a:9e:cc:de:97:55:07:d1:05:ac:35:1e:99:
         86:96:36:33:fe:01:de:26:58:c1:60:fa:e5:20:09:21:b5:99:
         cf:d1:76:d4:6b:85:e3:dc:1a:0a:48:cf:bd:4b:d2:29:42:67:
         ed:11:0d:84:24:52:40:ca:c3:3a:27:5c:f9:29:5f:80:22:4d:
         94:28:b8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 20:51:31 2025 by rpki-client