Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          v59/MLCu1eMtKvG5OMKAwpsb6turSxRHZ9XESTxvzF4=
Subject key identifier:   3B:2F:F1:71:BF:84:5E:82:6C:72:52:D2:3F:2C:ED:87:75:6F:06:E4
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          0689
Signing time:             Wed 14 May 2025 22:19:37 +0000
Manifest this update:     Wed 14 May 2025 22:19:36 +0000
Manifest next update:     Wed 21 May 2025 22:19:36 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: pOGw3uj0+pd5IpToDJXbj4/TTPySuypmN6+DuiZVwO0=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: nbo+aRpaKhKrr9ll2EHatjWC4IcNme0KBXjobYgnQ18=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: dk7hZcw60oBzYDsH/VfIiPOBe+wfd9KvvAO7IK7LLKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: May 14 22:19:36 2025 GMT
            Not After : May 21 22:19:36 2025 GMT
        Subject: CN=682516f8-458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:6e:ba:4e:cc:b1:90:7a:7f:48:a9:7d:28:
                    96:25:97:b7:d5:e9:b7:6c:0a:1c:b5:10:a3:70:74:
                    2c:ef:bb:e1:3b:7c:5d:0a:84:61:10:de:a7:c1:a7:
                    a0:b0:66:5e:0a:de:9a:08:2e:4a:74:1b:79:68:bc:
                    1a:1d:63:1f:f1:94:1d:4b:25:12:ff:c8:48:a6:6f:
                    5f:f8:60:cf:8c:1f:bf:f8:26:6d:b8:68:d6:fa:d5:
                    b9:d3:39:0d:c2:ee:49:d1:6a:b6:92:00:8c:a2:59:
                    93:61:63:ae:9d:2d:cf:8d:15:c4:27:91:b9:aa:ad:
                    d4:f9:a4:7c:4f:2f:f7:3b:19:fb:a9:6d:d3:93:8a:
                    1d:ef:28:2e:14:19:c8:47:23:9d:dc:df:4d:10:46:
                    45:f3:d1:bd:42:7d:79:58:a7:f0:59:4f:df:04:a9:
                    29:9b:37:80:43:28:92:b1:5e:22:d3:4e:eb:75:fc:
                    1e:2a:0f:51:a6:17:d7:7e:22:3f:71:c8:c2:12:3d:
                    3d:72:8a:e6:10:17:57:c4:1d:4f:17:c5:55:9a:73:
                    9b:6a:4b:71:2a:63:25:28:5b:df:b2:bf:bf:a5:9b:
                    94:89:8e:fd:de:38:29:f3:24:c5:0d:fa:65:2d:a0:
                    b6:4d:b9:d9:0a:6c:d9:f3:ca:cc:b9:28:9a:27:85:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2F:F1:71:BF:84:5E:82:6C:72:52:D2:3F:2C:ED:87:75:6F:06:E4
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:87:a9:21:28:a3:2d:27:3f:a3:48:db:bb:b1:22:66:be:bc:
         b9:55:90:46:ad:17:f2:ec:13:9e:fb:80:a7:46:24:8b:72:30:
         be:78:9f:98:a9:f5:6c:91:45:49:d0:7e:4f:ba:98:82:fc:a2:
         57:d5:da:75:2b:0c:f0:25:8b:1f:89:5f:4d:d6:13:12:05:a7:
         94:47:39:4b:f9:ae:88:be:1d:8f:3a:63:83:1e:3d:ef:05:a1:
         1d:08:c6:36:eb:ec:19:2d:e9:c7:65:a7:65:60:81:b3:e1:75:
         b1:f1:02:3f:fb:80:e5:ff:d1:77:86:b8:61:e6:9f:6a:b2:7d:
         6d:a0:38:bd:86:93:5c:9b:d1:1f:72:dc:f4:08:4f:6b:b6:ad:
         b7:9b:4d:eb:fb:6a:f3:ba:e9:56:b5:1f:0f:49:58:3d:62:38:
         41:58:6a:5e:4f:6e:7e:27:d3:d5:f9:f7:2c:84:4c:9f:43:e0:
         d7:4a:07:13:41:31:a5:0b:11:13:96:48:3d:05:61:cc:23:49:
         ec:5e:9f:bd:e4:fc:f5:82:76:fa:79:25:1c:eb:6c:c5:17:66:
         8f:63:eb:fe:6c:c1:b7:54:84:27:71:9d:6c:2a:3a:9d:e7:c4:
         da:92:a8:81:cd:f9:93:68:68:3a:45:da:56:19:53:a2:3a:16:
         07:3e:cd:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG
QzdCNjlBMUIwHhcNMjUwNTE0MjIxOTM2WhcNMjUwNTIxMjIxOTM2WjAYMRYwFAYD
VQQDEw02ODI1MTZmOC00NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIFuuk7MsZB6f0ipfSiWJZe31em3bAoctRCjcHQs77vhO3xdCoRhEN6nwaeg
sGZeCt6aCC5KdBt5aLwaHWMf8ZQdSyUS/8hIpm9f+GDPjB+/+CZtuGjW+tW50zkN
wu5J0Wq2kgCMolmTYWOunS3PjRXEJ5G5qq3U+aR8Ty/3Oxn7qW3Tk4od7yguFBnI
RyOd3N9NEEZF89G9Qn15WKfwWU/fBKkpmzeAQyiSsV4i007rdfweKg9RphfXfiI/
ccjCEj09cormEBdXxB1PF8VVmnObaktxKmMlKFvfsr+/pZuUiY793jgp8yTFDfpl
LaC2TbnZCmzZ88rMuSiaJ4Xk/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsv8XG/
hF6CbHJS0j8s7Yd1bwbkMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx
QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2
bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqh6khKKMtJz+jSNu7sSJmvry5VZBGrRfy7BOe+4CnRiSLcjC+eJ+Y
qfVskUVJ0H5PupiC/KJX1dp1KwzwJYsfiV9N1hMSBaeURzlL+a6Ivh2POmODHj3v
BaEdCMY26+wZLenHZadlYIGz4XWx8QI/+4Dl/9F3hrhh5p9qsn1toDi9hpNcm9Ef
ctz0CE9rtq23m03r+2rzuulWtR8PSVg9YjhBWGpeT25+J9PV+fcshEyfQ+DXSgcT
QTGlCxETlkg9BWHMI0nsXp+95Pz1gnb6eSUc62zFF2aPY+v+bMG3VIQncZ1sKjqd
58TakqiBzfmTaGg6RdpWGVOiOhYHPs3k
-----END CERTIFICATE-----
Generated at Fri May 16 09:30:13 2025 by rpki-client