Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier:          ViOunWUb3StGsbSSCLNEW+JXVU58cICnPujKkI97ZN4=
Subject key identifier:   C0:45:7F:C3:A0:66:99:95:24:13:45:3D:E4:39:06:2A:D5:3D:9D:02
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer:       /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial:       346E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number:          346E
Signing time:             Thu 24 Apr 2025 15:05:13 +0000
Manifest this update:     Thu 24 Apr 2025 15:05:12 +0000
Manifest next update:     Thu 01 May 2025 15:05:12 +0000
Files and hashes:         1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: KvzQdUuAHyFEOzPLyJFZXtFypMsPFVUtKFKv+BIM/aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
                          rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13422 (0x346e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
        Validity
            Not Before: Apr 24 15:05:12 2025 GMT
            Not After : May  1 15:05:12 2025 GMT
        Subject: CN=680a5329-a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:dd:e1:03:9c:9a:77:a6:f7:74:90:9c:2a:
                    e0:71:06:89:bd:ba:34:39:e4:64:13:a5:b8:db:34:
                    71:0f:d0:e2:f7:57:9c:47:80:04:61:33:98:8c:eb:
                    5a:5e:55:73:b7:0a:ed:c0:4f:e3:06:0e:16:a3:a9:
                    df:48:cc:08:1e:10:18:79:05:db:dd:22:39:60:f0:
                    13:05:dd:5e:18:39:f9:f2:25:99:f0:f9:4e:48:d2:
                    c5:e7:32:1e:1c:10:3a:4b:40:0f:bc:c1:6a:4b:c3:
                    3b:51:c6:fc:95:2e:24:27:7e:3e:3d:08:2a:5b:30:
                    e3:d8:7d:bc:3a:1c:89:2a:9d:28:f7:42:48:36:54:
                    45:fd:2b:82:6e:da:68:94:ff:29:6d:68:de:5f:d6:
                    a0:29:90:32:93:42:65:7f:f6:d7:2e:c6:b6:f8:24:
                    3b:e2:af:ac:ba:a1:ac:00:18:b4:01:09:1c:81:12:
                    85:f5:06:26:45:d6:9f:7b:6c:c6:93:47:f2:10:c4:
                    95:0b:16:f8:dc:34:df:96:7b:80:b3:f3:dd:ed:c5:
                    ee:5e:ce:d3:7f:41:3e:8f:22:7a:56:18:97:30:a6:
                    dd:2b:12:96:2d:4c:00:f8:fd:88:0b:bb:30:b9:4c:
                    b7:d5:a8:ba:e1:c4:0e:65:32:5f:80:89:f2:6c:fd:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:7F:C3:A0:66:99:95:24:13:45:3D:E4:39:06:2A:D5:3D:9D:02
            X509v3 Authority Key Identifier:
                keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:55:11:91:97:a5:7e:8d:2a:d2:49:31:69:73:01:a5:15:b4:
         92:2b:6d:a7:fa:de:a1:51:d5:c9:8e:a4:75:b6:75:f0:33:ad:
         ac:ee:6f:26:93:13:c3:09:79:70:88:22:94:38:2f:5f:4a:f4:
         39:8d:eb:fc:60:95:17:7d:be:0a:e3:f1:c7:de:2b:df:6e:7e:
         3c:e2:8e:50:ad:70:7a:d4:23:9e:f1:cd:93:0f:6e:6a:af:52:
         82:95:da:b0:26:f7:7c:5a:25:5b:02:c2:86:93:79:74:7a:5f:
         65:07:41:82:f2:69:60:ef:f6:67:41:13:9a:2e:b0:58:6a:7c:
         79:db:a6:7b:08:cf:17:c8:45:f7:f8:12:ce:20:8b:02:1d:a8:
         45:40:a6:e8:bd:25:e0:6a:6a:99:41:c6:cf:5e:f9:58:1d:60:
         d8:f4:64:6e:08:9a:3b:9f:1f:a6:d8:1e:e0:0a:c1:ac:76:de:
         03:d7:ab:a6:d0:14:56:c9:91:e4:e4:27:02:0c:e8:80:71:a6:
         14:b4:72:51:92:de:9c:58:72:79:21:16:0e:66:2d:7c:77:ef:
         a3:47:09:af:30:06:10:6e:4b:1c:4e:f1:4f:3f:e1:8e:d2:27:
         bc:72:4a:86:be:1c:ca:4d:54:87:e7:c3:af:e0:43:1f:e5:3f:
         19:51:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:59 2025 by rpki-client