Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
File:                     Wooi55jo9JLh-FhQOV63mFXso-U.mft (raw, json)
Hash identifier:          MNA3fep6tNZVOyapHext91qvxBWZ7y+jqau/vAf8+dg=
Subject key identifier:   AD:7F:E4:01:3C:E6:F1:1C:AD:28:05:5E:BD:E7:3C:0D:DC:A2:09:EA
Authority key identifier: 5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Certificate issuer:       /CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
Manifest number:          061B
Signing time:             Thu 24 Apr 2025 22:32:20 +0000
Manifest this update:     Thu 24 Apr 2025 22:32:20 +0000
Manifest next update:     Thu 01 May 2025 22:32:20 +0000
Files and hashes:         1: Wooi55jo9JLh-FhQOV63mFXso-U.crl (hash: 7/Y3aynbrF3Q4ayhkOE84kO1Icxzc/7xCM37ASCHnu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
        Validity
            Not Before: Apr 24 22:32:20 2025 GMT
            Not After : May  1 22:32:20 2025 GMT
        Subject: CN=680abbf4-d1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:8b:c4:99:b9:92:ef:de:6e:21:1e:7f:2a:
                    44:c5:02:27:08:9a:cb:bd:e8:2e:18:50:e7:23:2e:
                    4a:03:b8:f4:98:05:8a:ea:69:00:ec:55:11:46:9d:
                    b4:7a:80:06:19:48:51:be:ff:61:9b:f1:23:c5:ca:
                    c1:64:fb:1f:86:08:2d:d1:cd:ee:73:a6:af:93:75:
                    18:e3:5a:fd:85:b8:c2:b6:14:a9:ad:7b:30:aa:50:
                    38:b2:61:54:e5:b6:5c:38:c3:3c:17:fb:00:10:e8:
                    23:96:6f:c6:3f:db:09:f1:ca:f8:41:13:2a:82:34:
                    34:69:9f:46:84:82:92:c4:e1:49:dc:80:4b:f5:98:
                    bf:84:d4:fb:11:ca:0d:19:f4:22:ad:38:53:45:6f:
                    2f:35:94:7a:82:45:4e:b4:d6:2b:f8:d5:a3:b8:3f:
                    af:7a:07:eb:a1:ea:78:9c:de:39:28:78:81:d0:7f:
                    f1:14:a0:ba:7c:05:85:63:bf:f1:d3:8c:05:06:df:
                    78:23:ed:c4:da:8b:4b:3b:b2:a7:21:2d:8d:93:7b:
                    c8:19:66:fe:8d:d1:0b:6f:1b:7e:37:03:95:c5:a8:
                    8a:ad:4c:08:50:61:e1:34:23:d2:64:b8:67:5d:f4:
                    b3:80:c4:7f:da:15:0d:c3:d9:2d:01:9a:5e:94:b4:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:E4:01:3C:E6:F1:1C:AD:28:05:5E:BD:E7:3C:0D:DC:A2:09:EA
            X509v3 Authority Key Identifier:
                keyid:5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:96:17:9f:d1:96:49:cd:77:57:66:84:d6:81:04:ce:37:
         d7:31:24:13:9a:1b:df:81:be:d6:c9:83:be:ba:f5:ad:81:79:
         84:4b:3d:10:36:14:a2:94:a1:08:92:d7:ff:de:0b:0c:3d:60:
         71:2d:e9:39:5f:54:b1:6e:e2:6d:e1:68:c6:c5:18:48:77:f3:
         71:bf:cb:d2:82:47:64:27:fd:dc:cc:eb:ce:0e:bb:ba:68:16:
         17:ca:00:9b:bc:e1:b5:a4:42:f3:13:cf:d3:f9:99:13:75:db:
         b7:54:f0:4b:c6:0f:9c:21:4c:9e:09:8c:7a:67:8f:56:5b:21:
         77:3e:6d:54:c2:e8:3e:e7:4b:74:db:34:6b:45:30:4e:71:e9:
         a5:10:a5:e0:2c:44:9c:dc:0f:58:51:a7:ac:b4:a7:dd:bf:78:
         94:4c:9e:7b:1f:47:df:b8:b6:9a:5c:1d:73:8b:d4:32:d1:ba:
         4f:59:38:72:fd:4d:5c:3e:87:8d:9c:82:98:f4:41:81:5f:c6:
         45:b3:2b:76:ee:5d:b3:8b:7f:6b:31:c2:d0:4c:e8:bd:ca:2b:
         06:f1:e0:6f:2d:01:dc:ef:a3:35:7e:f1:ae:38:bf:ee:90:df:
         97:18:19:bb:4a:d7:5e:f9:32:a5:3f:11:ad:f3:69:8f:2f:90:
         c7:8c:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:48 2025 by rpki-client