Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
File:                     wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json)
Hash identifier:          7WReclzKHm88bWxz0IUU9Ycg7o7m28WNsmovgFUT3Gk=
Subject key identifier:   D8:00:FF:67:4D:76:74:3B:35:D1:85:4D:BF:55:A4:EA:7A:56:FA:46
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       04C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
Manifest number:          04C0
Signing time:             Thu 12 Jun 2025 23:26:33 +0000
Manifest this update:     Thu 12 Jun 2025 23:26:33 +0000
Manifest next update:     Thu 19 Jun 2025 23:26:33 +0000
Files and hashes:         1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: NMbLHQoE6dsbLRJZWi0k3AW5EhP4HZQdXhY2iQ8qxD0=)
                          2: 861D1DB82C4411EC9539C124C4F9AE02.roa (hash: L7nlhQmvIweH/CDk6Porr52Om6tp3xqWvQb2+9BsORw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Jun 12 23:26:33 2025 GMT
            Not After : Jun 19 23:26:33 2025 GMT
        Subject: CN=684b6229-f69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:3a:02:be:c7:7b:e8:e3:43:30:60:65:63:
                    20:43:86:93:14:b3:b7:21:05:9e:88:85:71:55:78:
                    dd:7b:72:c6:85:68:22:24:37:a4:cc:10:05:0a:04:
                    5d:22:b6:68:af:ba:2d:94:6e:57:a3:30:e5:35:70:
                    c9:a6:b1:54:c6:9d:42:1a:5e:b0:2d:b5:12:a5:96:
                    5f:72:f9:9e:0c:51:d3:22:8d:fd:ec:f6:ac:71:d9:
                    e9:d1:49:41:20:da:27:05:35:f9:bc:05:44:ba:5e:
                    51:4d:23:e2:36:9d:9e:9f:2e:01:17:87:35:e2:10:
                    51:15:d8:6b:6d:29:42:44:40:4f:24:82:ec:f2:93:
                    8e:d5:b6:da:57:c3:a4:82:2f:9d:f0:2f:37:44:5d:
                    1e:4f:e0:8b:51:08:2c:04:aa:c9:f8:57:a8:6e:87:
                    7b:4d:00:93:2a:6e:5e:54:d1:cc:7d:f3:1b:56:5d:
                    c8:94:cf:2c:0d:7c:e3:8e:66:86:88:9e:5d:ff:1b:
                    99:3f:81:68:e3:cf:82:fe:6a:66:cf:19:34:26:33:
                    85:af:f1:3b:a0:36:50:f4:a4:d6:fe:8e:b2:47:d0:
                    f5:54:53:10:9d:3c:61:47:44:ec:58:23:a6:ac:5f:
                    46:b3:8f:64:71:18:57:64:75:0c:ed:e4:64:3f:8e:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:FF:67:4D:76:74:3B:35:D1:85:4D:BF:55:A4:EA:7A:56:FA:46
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:8f:24:b3:dc:d8:b7:d9:3f:eb:8e:2a:eb:36:df:57:5c:
         48:ea:c1:34:0d:a3:bb:4e:f3:fe:17:3e:6e:eb:87:cb:6c:64:
         5e:09:24:1a:b2:c0:ec:a0:57:3b:ae:87:df:8d:8f:5f:49:ef:
         bc:2e:f4:0e:91:71:f4:68:c3:c1:30:9b:95:20:f8:d1:6c:db:
         b5:74:ab:5d:42:a5:2a:29:0b:be:1c:a8:85:85:ee:19:01:73:
         b4:9f:49:94:69:50:3b:ac:e9:28:13:ee:9e:fe:10:ba:2a:64:
         bf:ac:b7:11:35:26:72:2b:7a:6d:97:72:bd:49:81:fb:7d:86:
         c7:24:06:ed:46:ad:18:0b:ef:ed:df:73:4c:da:53:eb:12:e4:
         88:d4:4c:25:bb:27:8b:a8:b6:e6:f9:1b:72:f4:e4:a9:14:ea:
         11:d5:57:2b:b9:7e:70:85:69:25:13:cf:56:98:b8:99:95:d0:
         79:d8:f8:ba:33:e6:20:36:b6:01:d9:23:94:89:df:d4:1a:ac:
         10:6d:e8:d7:e0:e4:68:5c:d1:37:7a:5c:a8:8c:e3:0c:7d:9e:
         25:c8:da:4a:35:0a:53:98:74:02:16:5e:85:9a:0f:92:28:d1:
         1d:4d:57:e1:8f:4c:55:9d:9e:16:ba:6c:31:41:c1:51:34:0f:
         2d:62:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:12 2025 by rpki-client