Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          2//QltQ84pngU8vYkFjz9fIZBF37nl6gTxdoBMQwEJU=
Subject key identifier:   87:CC:B1:D3:15:BF:92:35:F0:31:79:F4:65:35:60:82:2E:03:4F:CD
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          37
Signing time:             Fri 13 Jun 2025 06:28:32 +0000
Manifest this update:     Fri 13 Jun 2025 06:28:31 +0000
Manifest next update:     Fri 20 Jun 2025 06:28:31 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: uhjv83+Azh+BnQH2aQoa6oXXL9KGZihROCkze0I5fHA=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: IcKmF13UvgbjR5e+pq74azw6DFKPoTGhWhM8VYVh+JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Jun 13 06:28:31 2025 GMT
            Not After : Jun 20 06:28:31 2025 GMT
        Subject: CN=684bc50f-f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:c9:49:53:73:06:7a:54:c9:ea:0f:a5:15:
                    45:ee:93:1c:5b:36:8c:04:bc:87:d8:34:dd:ff:56:
                    ed:e1:48:ee:5c:d4:4e:de:b5:9d:71:38:7a:b6:6a:
                    53:6f:c6:b1:77:09:6f:70:8b:e7:ad:1c:f1:0a:4b:
                    83:42:a2:de:50:08:31:92:ea:d7:81:55:89:a0:8f:
                    38:79:6b:f8:3d:91:94:9b:c4:0f:28:c7:15:8e:f6:
                    f0:b2:b1:e5:0d:2c:7b:2f:74:dd:5b:ea:3f:f8:a0:
                    92:9c:e3:4a:24:91:6f:46:01:88:32:c7:22:ef:26:
                    ee:31:75:b0:5b:7c:a1:09:6e:8c:ff:3b:e0:07:b9:
                    b2:34:69:99:df:6f:94:ff:4f:7e:7d:b5:92:37:82:
                    67:f7:f9:ee:5c:78:31:4c:98:12:93:00:de:09:8f:
                    04:c9:8d:5b:26:09:c1:8d:c3:d3:39:fd:4e:78:a4:
                    f1:c9:86:54:4d:70:34:7d:56:ee:69:20:fa:25:14:
                    f8:d7:56:31:22:6b:ce:49:45:93:62:14:72:fc:c6:
                    db:09:8e:5f:2d:a9:aa:42:6f:12:97:08:0b:16:8e:
                    23:b2:bd:ef:60:7d:21:c6:e2:df:84:7a:e8:8a:71:
                    b9:4b:d4:5e:d3:51:09:c4:24:9c:03:a6:5c:18:97:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:B1:D3:15:BF:92:35:F0:31:79:F4:65:35:60:82:2E:03:4F:CD
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:4a:d8:fc:1c:47:e8:52:8a:0b:a6:a9:4d:80:c7:27:fa:
         72:f7:56:99:f1:ed:87:11:0e:c9:86:a6:ee:e3:58:d0:6a:51:
         0a:82:2f:55:3e:5b:b5:5e:69:7f:c4:6e:c8:21:ab:cb:2a:4c:
         81:5c:2d:76:a7:24:e7:63:38:fb:d7:99:31:e7:5b:a9:3e:60:
         fc:10:ce:19:3c:dc:93:e3:8b:9b:e0:65:37:08:53:a0:2e:82:
         af:44:9f:47:a9:b6:db:88:21:5a:97:f2:a1:50:1f:25:b7:1a:
         6d:2a:06:1d:a0:a3:8a:51:fa:18:1e:0b:fb:55:db:45:3e:f3:
         0e:8e:59:d5:ee:16:15:73:9f:1e:b1:66:d3:95:10:0e:12:55:
         72:ef:13:b1:c4:77:5b:29:57:8a:07:7c:2f:01:35:c1:2b:11:
         f5:1e:cf:8b:70:ef:36:1d:95:09:b1:f2:15:7b:c2:a6:d9:6b:
         f8:1c:92:82:17:54:f1:47:38:58:46:1e:f9:a8:da:2b:59:b4:
         21:c5:1b:89:fc:91:57:18:59:96:37:f9:33:e6:9e:f2:6d:ae:
         5e:90:80:7f:80:a4:5a:9c:39:d9:ef:0e:2c:ce:a7:4f:0a:b2:
         2a:27:06:74:4e:ad:5d:ab:30:a8:1c:b9:08:fb:fa:ca:b6:5e:
         65:39:d4:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTc1QTExMC8GA1UEBRMoNThFRUU1MkQyQUUwOTJFQzU1ODZFMDcwRTY0NjJDMzYz
NTBGQTZFMTAeFw0yNTA2MTMwNjI4MzFaFw0yNTA2MjAwNjI4MzFaMBgxFjAUBgNV
BAMTDTY4NGJjNTBmLWY4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFislJU3MGelTJ6g+lFUXukxxbNowEvIfYNN3/Vu3hSO5c1E7etZ1xOHq2alNv
xrF3CW9wi+etHPEKS4NCot5QCDGS6teBVYmgjzh5a/g9kZSbxA8oxxWO9vCyseUN
LHsvdN1b6j/4oJKc40okkW9GAYgyxyLvJu4xdbBbfKEJboz/O+AHubI0aZnfb5T/
T359tZI3gmf3+e5ceDFMmBKTAN4JjwTJjVsmCcGNw9M5/U54pPHJhlRNcDR9Vu5p
IPolFPjXVjEia85JRZNiFHL8xtsJjl8tqapCbxKXCAsWjiOyve9gfSHG4t+EeuiK
cblL1F7TUQnEJJwDplwYl62RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh8yx0xW/
kjXwMXn0ZTVggi4DT80wHwYDVR0jBBgwFoAUWO7lLSrgkuxVhuBw5kYsNjUPpuEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNzVBLzNGQUE3QzU0RjQ4
NzExRUY4NDlBMjc3MkM0RjlBRTAyL1dPN2xMU3Jna3V4Vmh1Qnc1a1lzTmpVUHB1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV083bExTcmdrdXhWaHVCdzVrWXNOalVQcHVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
NzVBLzNGQUE3QzU0RjQ4NzExRUY4NDlBMjc3MkM0RjlBRTAyL1dPN2xMU3Jna3V4
Vmh1Qnc1a1lzTmpVUHB1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHuhStj8HEfoUooLpqlNgMcn+nL3Vpnx7YcRDsmGpu7jWNBqUQqCL1U+
W7VeaX/Ebsghq8sqTIFcLXanJOdjOPvXmTHnW6k+YPwQzhk83JPji5vgZTcIU6Au
gq9En0epttuIIVqX8qFQHyW3Gm0qBh2go4pR+hgeC/tV20U+8w6OWdXuFhVznx6x
ZtOVEA4SVXLvE7HEd1spV4oHfC8BNcErEfUez4tw7zYdlQmx8hV7wqbZa/gckoIX
VPFHOFhGHvmo2itZtCHFG4n8kVcYWZY3+TPmnvJtrl6QgH+ApFqcOdnvDizOp08K
sionBnROrV2rMKgcuQj7+sq2XmU51H8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:36 2025 by rpki-client