Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File:                     WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier:          0ga2Ox3Awkr+ovbkSb8Pq5eVTTMoO4JoVjY40qwosQs=
Subject key identifier:   06:C5:0D:E3:C9:87:E3:67:AA:82:68:AF:03:E1:5C:A8:89:4C:07:81
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       05ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number:          05D4
Signing time:             Sat 14 Jun 2025 22:49:12 +0000
Manifest this update:     Sat 14 Jun 2025 22:49:12 +0000
Manifest next update:     Sat 21 Jun 2025 22:49:12 +0000
Files and hashes:         1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: BrlyIZMlie2Ze9pWuNMJTgQOfLI70Mad8JUEHyeiszQ=)
                          2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=)
                          3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=)
                          4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=)
                          5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: Jun 14 22:49:12 2025 GMT
            Not After : Jun 21 22:49:12 2025 GMT
        Subject: CN=684dfc68-8829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:9b:18:9a:f7:d0:62:c1:75:e0:62:1c:2a:
                    cb:07:3b:06:c0:e7:71:3c:97:22:ac:b6:ab:32:9d:
                    09:cf:07:97:b7:b9:11:44:fc:2d:22:e7:87:8d:54:
                    ed:4c:90:98:29:02:a8:a9:cc:1e:ca:b3:f8:22:5c:
                    b4:1a:65:4a:02:a5:41:e1:e1:1b:f0:06:27:0e:b9:
                    1a:2f:de:76:8d:f9:dc:e2:58:6c:7c:11:50:24:6f:
                    06:1d:78:06:2d:88:07:7b:1d:37:1e:cc:4e:a9:d4:
                    70:99:33:2f:47:da:6e:b1:6c:4a:74:80:5b:fc:81:
                    2e:b9:93:90:b8:39:ac:f6:39:9a:63:95:88:41:ad:
                    e2:30:6b:1d:0e:32:a6:2a:ef:c5:7d:54:c5:21:67:
                    0f:9d:b8:f6:ee:1a:9e:84:6e:ef:97:69:2f:36:54:
                    73:dc:97:46:59:50:bd:e4:70:b5:64:9d:6a:62:52:
                    bc:c7:09:9c:c4:3d:1e:5a:ca:a2:c2:ea:5f:27:b5:
                    83:83:42:2b:5a:b8:b1:f7:cc:58:c9:ec:c3:97:8d:
                    85:d4:36:0c:99:49:e3:81:86:50:f9:8f:1b:06:78:
                    4c:8f:af:a4:88:a5:bd:db:b6:87:08:6d:ec:10:e5:
                    52:92:00:a3:1a:a8:bc:eb:77:10:01:52:62:16:b7:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:0D:E3:C9:87:E3:67:AA:82:68:AF:03:E1:5C:A8:89:4C:07:81
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:aa:1d:6f:ff:40:c4:6d:38:42:6e:34:3d:90:5a:2f:72:
         f7:9f:f7:b9:75:62:30:2a:a4:46:d3:ea:50:0f:de:02:ee:85:
         4e:d0:11:52:f4:37:ce:f4:96:c0:5b:3a:c5:0f:d6:1b:27:5a:
         7e:68:c9:ae:f7:77:95:48:7f:e0:fd:4b:ae:ab:87:d4:00:40:
         ea:08:05:5f:d6:1f:d1:1b:bd:16:cf:8d:9d:39:09:82:6f:0b:
         26:23:8a:f6:e7:a5:08:bb:35:5c:02:83:f8:ef:1d:9a:e8:da:
         46:9b:29:19:ff:35:52:81:50:85:62:e2:d0:21:e7:76:c1:6b:
         0a:2d:ac:30:8a:64:1d:16:5d:9b:ac:0c:e7:7a:12:4f:6a:dc:
         b0:51:d0:c8:11:db:94:ba:65:18:22:d6:1f:90:56:5b:80:79:
         86:e0:15:e0:02:68:a8:a8:25:99:a1:32:c8:85:78:b1:c7:ea:
         41:00:fc:e6:f2:12:b5:33:dc:d2:33:ef:7e:ab:aa:cf:14:70:
         09:19:c5:1c:40:b5:b1:fd:f3:31:5e:e3:1a:41:6d:9c:38:13:
         d8:e6:b3:38:66:a5:a3:60:3a:73:17:b3:51:b0:de:88:04:5d:
         e9:98:9f:d6:d0:f8:43:b3:f7:5c:73:c7:af:a8:5c:1c:fc:8d:
         e4:68:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:48 2025 by rpki-client