Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
File:                     W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json)
Hash identifier:          yfZ8AeLHg1ZnTcJZXsBYwhD2gOQBNMtGeLbZDAWb+S8=
Subject key identifier:   02:AD:A5:11:06:78:8B:A3:C1:55:A5:0E:A2:CE:80:1B:5A:AA:8D:24
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       0545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
Manifest number:          0540
Signing time:             Thu 12 Jun 2025 23:03:23 +0000
Manifest this update:     Thu 12 Jun 2025 23:03:22 +0000
Manifest next update:     Thu 19 Jun 2025 23:03:22 +0000
Files and hashes:         1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: ZXJealYXOnmp+nRc/xusWg0MInrMn2nGlrk1mYxI54M=)
                          2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Jun 12 23:03:22 2025 GMT
            Not After : Jun 19 23:03:22 2025 GMT
        Subject: CN=684b5cba-1f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:da:13:c5:55:76:8e:be:38:7a:fe:0d:82:
                    82:0f:dc:01:b7:06:5c:b1:2d:f6:91:ed:a1:73:87:
                    3e:b6:13:e5:38:dc:95:d2:ff:30:0d:45:10:9d:7d:
                    99:af:ab:3a:ab:ea:e0:c8:37:a5:b8:ab:a1:be:3e:
                    3d:cd:e4:dd:8f:27:3d:5f:36:8b:02:ae:96:44:c1:
                    ab:33:da:08:e0:46:5a:bf:3d:0f:65:2a:91:52:84:
                    af:4b:59:8a:0a:9d:bb:16:c0:b7:ea:0f:5f:d7:0d:
                    db:a9:7c:e0:17:7c:3d:92:e9:13:6c:b7:f6:41:cc:
                    e6:25:07:1e:39:3c:97:1f:1e:88:ae:bc:4a:b8:b4:
                    aa:44:f3:b9:19:88:98:ba:49:3d:cf:4e:cb:f8:14:
                    29:01:b3:c6:35:22:8e:0e:f1:13:1f:64:d3:4b:f1:
                    ea:79:f9:f6:d6:29:7a:8e:c3:f7:ab:e3:ee:f1:53:
                    d8:19:2e:89:20:87:4b:76:b4:52:c3:68:a0:c3:35:
                    77:48:29:f7:dd:9c:24:c2:ac:21:af:f2:76:69:08:
                    a1:5b:61:83:cd:71:6f:52:25:eb:20:a1:78:65:e2:
                    35:cd:f5:82:77:2e:aa:3e:69:3d:7d:4e:63:65:6d:
                    35:f9:53:29:57:45:46:cc:25:1a:34:33:b9:7b:32:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:A5:11:06:78:8B:A3:C1:55:A5:0E:A2:CE:80:1B:5A:AA:8D:24
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8c:58:5f:65:14:6c:55:99:c8:8d:2c:5d:91:78:08:ba:db:
         61:64:e4:8d:07:1b:2f:39:11:08:13:e9:bd:3e:ab:a6:c8:d1:
         a0:ac:11:f6:61:5b:4a:f8:36:66:ce:97:a3:a8:96:6b:80:44:
         bb:58:46:9a:c0:63:ba:33:17:dc:80:dd:ea:a9:5e:6a:f7:2c:
         74:3c:33:09:dc:58:aa:49:61:2b:d1:39:68:2e:f6:cc:06:19:
         07:3a:10:b0:fb:5e:6e:97:d8:23:49:23:05:35:a1:70:eb:50:
         36:dc:ac:bf:4c:56:12:f3:00:56:4a:52:ba:5a:3f:f0:c9:44:
         86:af:7b:ce:eb:f6:71:9c:ac:90:f5:ea:0e:e4:88:5a:26:88:
         6c:5c:3d:39:69:94:9f:a4:36:f7:39:b3:5a:6d:77:ac:e7:9c:
         e8:26:53:07:9f:43:9b:7e:2b:fa:37:de:11:3f:91:e9:ca:d1:
         33:74:97:7a:80:9e:11:02:2a:31:aa:aa:e9:3e:70:bc:bc:75:
         15:fa:21:b6:6c:e4:ea:9d:35:91:3a:58:d1:e4:62:50:7e:d8:
         9e:35:ce:2f:e7:e4:80:49:53:62:78:21:b7:61:67:8e:ce:d6:
         0c:71:ca:8d:f9:08:99:5c:0e:35:5d:3e:8a:93:5e:1e:5e:23:
         60:ed:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:41:49 2025 by rpki-client