Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          pzzuP6timdE79MgqfWwA//EIBQNFaLs2cAwhXEsvNPo=
Subject key identifier:   B9:71:7B:57:6C:DC:49:15:15:51:61:66:8A:12:16:00:31:A2:9D:18
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          C6
Signing time:             Thu 19 Jun 2025 05:06:19 +0000
Manifest this update:     Thu 19 Jun 2025 05:06:19 +0000
Manifest next update:     Thu 26 Jun 2025 05:06:19 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: 4cErYAIdBv7vFzimIhFKom6bMbJGdADFqtB7Zh+2gfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Jun 19 05:06:19 2025 GMT
            Not After : Jun 26 05:06:19 2025 GMT
        Subject: CN=68539acb-f979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:20:2c:7a:33:31:70:1a:65:06:4f:db:90:d8:
                    ee:9d:78:80:c8:a3:2b:de:3a:0d:be:32:ec:9e:be:
                    4c:4c:e8:9e:8e:3b:73:fe:62:22:7b:a8:42:d6:f4:
                    8e:7d:2a:1a:6b:80:73:b3:0f:5d:1d:a3:e0:ab:cd:
                    22:02:bb:9f:c8:d7:64:72:b6:62:92:cf:c2:b1:9f:
                    0d:4b:45:d9:d1:a8:1d:57:c1:ce:e8:54:0a:99:0e:
                    cf:65:11:ce:e1:df:df:a2:82:d2:ea:ef:38:72:ed:
                    5c:d3:0a:23:45:3e:1f:da:7c:a9:38:75:15:0e:e3:
                    3b:57:0b:35:54:c0:2c:14:10:93:6a:e3:e3:6d:f7:
                    89:69:e5:8f:11:ed:b1:92:cd:84:65:43:26:95:4c:
                    e0:81:f4:01:87:44:52:67:3d:48:8a:91:a8:0d:f9:
                    cc:07:89:b2:4b:ab:b3:17:2b:f6:e2:f2:cb:0d:94:
                    40:98:fe:45:36:95:fa:30:93:39:77:50:b6:d0:59:
                    39:4b:fe:d6:91:54:15:e1:d3:f9:e4:2c:b3:61:9e:
                    8f:73:d8:1f:40:16:55:b1:bb:15:f4:cd:fe:27:af:
                    75:6f:ad:8a:e8:ae:96:ed:f0:2a:76:9f:3c:a3:aa:
                    a6:0a:1c:d5:5c:37:1a:a3:d9:f1:ff:80:66:56:1b:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:7B:57:6C:DC:49:15:15:51:61:66:8A:12:16:00:31:A2:9D:18
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:b3:02:1b:06:29:97:6b:12:f2:ef:4a:1b:be:e4:b8:b3:
         df:47:36:52:1b:1b:01:96:fa:78:61:92:39:25:29:1b:55:92:
         b7:55:47:e6:4d:4b:02:1a:f3:d2:5b:e4:e0:95:15:b3:b8:bf:
         3d:94:55:12:65:87:f6:54:df:6a:09:34:71:2c:be:8a:c8:6a:
         1b:ea:45:23:27:b8:18:e0:d9:c7:3d:df:f4:8c:7e:a5:ba:01:
         28:85:20:1c:bf:2c:fe:9d:1e:c1:00:d9:a9:f6:d8:e0:08:b5:
         6b:41:78:1b:0c:c8:4b:74:9f:0c:39:91:06:ae:a2:7c:db:86:
         b6:9d:52:05:c4:e0:dd:3a:f7:63:98:2b:c0:29:36:31:31:94:
         32:60:31:3d:7e:90:d0:10:44:b4:49:92:f7:6d:1d:2b:f2:3b:
         b1:66:eb:11:53:93:fc:4d:dc:f7:d9:84:f3:a6:fd:d8:db:92:
         68:58:ce:e9:92:a3:61:19:e9:14:48:8c:10:c4:88:b4:b5:c8:
         6c:c5:7d:60:2d:6e:71:bb:cc:47:3e:7f:22:4c:f1:6e:8f:62:
         7c:69:a1:3c:ee:92:f2:37:b9:60:26:9d:49:34:8a:2d:4a:bc:
         ff:fc:0d:cc:7e:e8:25:8e:6f:b2:f6:1b:9c:58:3c:a2:74:b2:
         41:4d:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:18:49 2025 by rpki-client