Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          m9XCsRtCNdpPt8EZ6/vPWJHbnONfxSNDF1lY/A+c/Ec=
Subject key identifier:   77:46:C2:7C:F3:26:01:A3:0C:CA:7F:C4:8C:49:79:2E:79:89:6D:D1
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       348D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          348C
Signing time:             Sat 14 Jun 2025 15:05:56 +0000
Manifest this update:     Sat 14 Jun 2025 15:05:55 +0000
Manifest next update:     Sat 21 Jun 2025 15:05:55 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: iSlfx9IE+1LTu+sHnwwHrOzE6UxNUbS+QTNjoR+cCvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
                          rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13453 (0x348d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Jun 14 15:05:55 2025 GMT
            Not After : Jun 21 15:05:55 2025 GMT
        Subject: CN=684d8fd3-258a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:b3:1e:09:cb:d0:5d:01:ce:0b:81:bf:66:
                    52:44:00:6d:57:e5:26:cd:95:e9:77:35:f9:d0:57:
                    cc:25:ad:3d:3b:dd:3d:48:b3:7b:2d:d7:b5:af:2b:
                    1f:c4:59:a4:f3:43:ec:38:c7:e6:33:67:f7:e4:34:
                    53:99:d1:a0:7c:d4:e0:c7:35:d0:d2:ca:8e:63:bb:
                    31:9c:8b:b1:dc:86:d0:66:8b:7f:d4:27:2b:00:d8:
                    6a:3d:e6:6d:1a:ce:42:5b:28:49:e2:0f:ff:1f:6f:
                    15:38:fc:e4:6e:f9:05:38:be:d2:21:30:cb:a9:26:
                    ec:6a:e2:80:dc:65:13:de:5f:6f:0d:8d:e9:e6:be:
                    e4:19:91:a0:51:4d:e7:0d:4e:db:0a:7f:20:e0:48:
                    76:6e:73:8a:29:d3:e4:56:bc:b6:6e:63:e2:a7:55:
                    cf:07:c0:81:8f:bb:95:fa:54:d8:e9:f2:da:93:59:
                    df:07:b9:bc:fe:0d:34:f2:8f:5e:e6:43:6c:51:b3:
                    eb:ca:4d:ed:30:9e:56:eb:57:21:9e:31:54:b6:39:
                    72:d2:db:72:82:ff:e5:70:15:53:5c:33:77:61:b7:
                    26:a7:40:b7:6e:0e:40:8d:64:9e:c8:36:51:66:9e:
                    61:1d:25:85:d8:99:fe:e6:3d:9f:fc:f4:68:aa:d8:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:C2:7C:F3:26:01:A3:0C:CA:7F:C4:8C:49:79:2E:79:89:6D:D1
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3e:d8:37:a7:da:f5:2b:90:47:e5:c2:2d:ca:75:01:8f:e6:
         4b:11:83:e2:34:fa:3b:b0:d9:00:71:c5:45:71:33:38:f3:8b:
         65:84:ad:d3:3c:89:46:eb:88:5e:22:ec:93:e5:e0:96:1a:09:
         e3:b7:26:18:b8:27:87:f5:95:86:b0:22:38:9d:3d:17:cd:cf:
         f9:1a:86:8a:d6:d2:93:b8:a3:64:46:98:44:de:fb:02:4b:be:
         c5:16:34:83:90:83:48:e5:0f:38:48:c2:ba:dc:30:73:64:06:
         b5:e4:d8:5c:0d:ad:76:ce:08:86:3a:8f:f9:9b:b8:5a:30:cc:
         e9:aa:75:df:0c:0a:b6:ab:89:20:32:30:5f:1d:cc:a4:6e:2b:
         64:30:ce:fa:92:6b:bb:db:4f:cd:f1:c0:6c:39:ad:a5:59:73:
         06:4e:14:65:34:8b:ba:12:28:8d:97:73:5c:93:7d:16:db:4e:
         5c:b2:e0:89:5c:27:e1:0a:df:7b:ce:41:29:fb:78:f9:41:5c:
         88:f9:30:77:12:b2:04:c0:f7:49:95:ee:da:aa:da:4c:1b:61:
         09:80:ba:e6:0c:ff:a6:b0:7b:8c:5b:09:5d:6c:49:41:8d:70:
         32:50:76:b3:b3:e7:5a:01:9e:39:0b:d7:fa:48:55:51:04:74:
         fa:e2:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:11:22 2025 by rpki-client