Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
File:                     W63-0zDWXKC6s_c5AcuVMFogfcM.mft (raw, json)
Hash identifier:          w+7Oldn6tqVBJX1NZIjnzz9g5thw1Z2/p5qtKB7XQwk=
Subject key identifier:   90:C9:34:06:6B:5C:B5:3B:D9:79:61:CB:C7:7F:3E:F5:2E:93:35:D6
Authority key identifier: 5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3
Certificate issuer:       /CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3
Certificate serial:       06B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
Manifest number:          06AC
Signing time:             Thu 24 Apr 2025 21:57:48 +0000
Manifest this update:     Thu 24 Apr 2025 21:57:48 +0000
Manifest next update:     Thu 01 May 2025 21:57:48 +0000
Files and hashes:         1: W63-0zDWXKC6s_c5AcuVMFogfcM.crl (hash: QTPS+erPPJLW31w9txD7wAL5vzUXS2+X4/X97XXjNWc=)
                          2: 2428B7AE5D3A11EBA0F5C625C4F9AE02.roa (hash: uGyiffgSVa017Vx7fUECky0Rn5Nr1nPji4RP81NPr/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl
                          rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95C, serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3
        Validity
            Not Before: Apr 24 21:57:48 2025 GMT
            Not After : May  1 21:57:48 2025 GMT
        Subject: CN=680ab3dc-1e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:4a:a3:71:3e:73:03:f8:1e:1c:87:a1:63:
                    6b:75:d0:76:64:fe:b9:e5:ff:2c:f4:ec:6e:ee:18:
                    da:e0:f5:7a:f2:ff:30:be:8b:02:4f:4c:5f:90:f3:
                    73:1a:45:67:dd:54:e2:03:37:a2:5a:6e:65:c5:3e:
                    15:5c:87:19:8f:87:10:89:fa:2f:9c:bf:c0:ce:17:
                    e6:64:ee:11:9b:00:d7:0c:ef:47:47:90:09:59:53:
                    70:0d:0e:2d:3a:fa:de:74:8b:d8:64:b5:2b:43:ac:
                    e2:b1:b7:72:43:5b:6d:b4:16:af:d7:82:14:5f:c0:
                    cc:10:69:6d:80:44:98:5b:91:0d:4b:88:75:48:02:
                    ac:d0:da:72:63:51:13:7b:aa:b7:c3:b4:9a:a2:28:
                    94:c8:d2:c6:15:0c:0d:56:96:9c:19:b4:a2:90:0a:
                    16:4a:22:66:88:97:8d:93:b8:e7:93:82:b8:12:ce:
                    0f:9e:81:e9:ec:2d:b3:5f:9c:ae:21:1d:d3:dd:ff:
                    af:c2:95:41:71:ff:a0:6b:a4:04:dd:f4:ef:56:c9:
                    46:41:ea:a1:98:34:3b:36:5d:69:59:ff:38:73:a5:
                    d4:a2:8d:29:cc:09:cf:f9:fa:f3:5f:c4:c1:5a:51:
                    39:ce:ec:4f:e7:b9:ad:38:1b:8c:6a:92:46:5d:ce:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C9:34:06:6B:5C:B5:3B:D9:79:61:CB:C7:7F:3E:F5:2E:93:35:D6
            X509v3 Authority Key Identifier:
                keyid:5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d9:b0:61:fc:6f:0c:a7:99:b9:c9:0b:03:b4:74:57:42:cb:
         ad:13:7e:16:89:02:15:51:76:9f:a7:c7:11:f0:1b:d8:a6:32:
         45:9c:ee:30:3c:6c:f2:be:cc:e8:6f:20:75:67:e7:e3:39:12:
         fe:f7:68:9d:54:ec:90:da:ce:23:22:75:0c:46:ee:f6:58:77:
         b3:10:75:17:1d:af:0f:9d:90:2d:fe:58:5f:03:e4:69:aa:5b:
         57:ba:50:f9:07:c7:f9:1c:20:fb:ea:1b:39:d3:6b:56:1b:07:
         ce:c5:43:33:a7:b4:05:16:6e:91:91:57:24:78:22:7b:2b:fa:
         4a:ab:29:5b:cd:7d:bf:22:3c:43:59:17:94:12:1f:1d:b9:c0:
         04:7c:e0:e4:76:8f:5e:a6:91:70:a1:bf:80:ff:52:12:4e:b6:
         ea:0e:3f:d0:a1:81:11:f3:25:3c:63:9f:fe:d0:32:08:87:dd:
         11:b2:cc:fb:96:3c:2e:d4:98:77:a9:05:74:dc:ef:b4:43:64:
         f1:df:27:71:48:50:30:74:f1:8f:52:98:86:e1:5e:b6:9a:28:
         72:d3:0c:78:58:1d:8e:ca:33:0b:cf:0a:11:41:a7:fe:a5:ac:
         8c:92:51:9f:ee:c1:02:3c:74:f3:b8:2a:ca:5c:ab:f3:c5:3a:
         b9:4d:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:34 2025 by rpki-client