Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File:                     WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier:          yTaQDjMFChzHnYVuOnxBaHz6I+oCQODP4oYhjHCl0qc=
Subject key identifier:   A3:2A:B9:30:06:B3:58:C0:B2:57:DF:03:4A:F0:A7:E2:F4:9B:B9:0A
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer:       /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial:       348B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number:          348B
Signing time:             Sat 14 Jun 2025 14:53:14 +0000
Manifest this update:     Sat 14 Jun 2025 14:53:14 +0000
Manifest next update:     Sat 21 Jun 2025 14:53:14 +0000
Files and hashes:         1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: euUZw3XVmp8zBoB3tvEgEh4la3BFElbAdYgXPih9gEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13451 (0x348b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
        Validity
            Not Before: Jun 14 14:53:14 2025 GMT
            Not After : Jun 21 14:53:14 2025 GMT
        Subject: CN=684d8cda-7522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:6f:dc:44:01:c8:31:1e:c2:61:fc:a2:0f:
                    2c:2f:80:96:ce:d0:0c:9d:b0:63:ef:8c:eb:a1:f6:
                    9a:26:80:f5:4f:e9:ac:2e:91:24:fa:1d:9e:3c:00:
                    3f:d9:c3:a2:33:2f:8f:55:b5:df:f2:94:4e:b6:ef:
                    9e:b0:84:60:a7:9a:48:8e:91:e4:33:51:31:37:7a:
                    de:76:9d:18:cb:b7:85:1e:48:a4:84:dc:4b:10:95:
                    8f:3e:d2:0e:55:2e:91:a9:26:6c:f4:95:5f:54:31:
                    89:bc:87:53:b5:a9:b8:9f:5a:92:f0:e2:66:e6:f2:
                    9b:83:e4:67:fe:ea:e3:0f:fa:95:48:7c:90:e3:0a:
                    7e:38:a7:0a:e1:d4:4a:e7:a9:50:a6:f2:83:5d:78:
                    c7:05:ab:1c:0a:a9:44:c6:41:3f:a7:ba:18:a1:62:
                    9f:5c:25:0b:9e:1d:c6:e3:4b:0e:95:c0:ca:b6:cd:
                    cc:53:b3:11:4f:c3:a8:55:18:a4:d2:84:45:4d:41:
                    5e:84:8c:bd:3a:6f:46:69:4a:5d:9e:2c:1b:bd:d4:
                    a9:19:75:d6:cb:7a:07:42:1b:32:f4:cd:72:46:bd:
                    71:0f:c9:9d:68:26:80:d1:a6:a4:e5:6d:6d:a1:6c:
                    c1:36:af:5c:6c:84:8f:d8:28:c0:04:18:a0:89:7c:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2A:B9:30:06:B3:58:C0:B2:57:DF:03:4A:F0:A7:E2:F4:9B:B9:0A
            X509v3 Authority Key Identifier:
                keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:35:c5:d3:be:07:6d:1a:32:88:1d:c4:cc:b3:08:db:ae:
         1d:3f:53:5c:b3:d6:73:d2:91:57:d5:08:93:57:2d:fb:31:42:
         95:92:29:7a:46:83:2e:55:14:ff:50:85:17:7a:10:64:9f:4b:
         fb:ce:14:3b:eb:65:d5:81:0c:fc:d2:25:a4:26:5d:d6:2b:ae:
         48:00:1d:ff:48:ff:e4:b6:fe:6b:0b:f6:05:27:aa:6e:35:66:
         f1:30:f3:84:ff:e6:2b:90:98:37:f5:67:68:0b:97:de:b9:8e:
         eb:99:f9:f5:a2:57:0f:8f:01:bd:05:ea:63:a8:8c:f4:e0:5a:
         b3:5a:ba:c2:fb:9b:b2:44:58:b6:68:cb:86:29:d1:65:9d:97:
         c1:d8:a8:34:05:6e:02:4e:5d:16:48:78:5e:72:d6:ec:7c:ea:
         33:37:05:64:b9:e3:2f:8b:87:32:19:19:81:b1:ab:1f:8c:82:
         32:2a:17:aa:fa:71:e2:33:4f:72:56:5c:0d:da:ea:d5:06:5f:
         9b:32:5c:4f:55:e2:14:db:b6:36:97:a0:08:95:57:af:ec:78:
         7f:38:48:6a:ef:37:db:25:b4:df:80:7b:9b:2a:a7:15:0a:07:
         e9:d8:93:6a:69:9f:cc:22:de:ad:35:d5:47:68:5e:ef:a0:5b:
         7f:a1:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:09 2025 by rpki-client