Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          dVUBvyiYnJ2hdYrrmnX67nodSDg/z5R83OqfLd5ppIA=
Subject key identifier:   ED:66:56:D3:C0:F9:FB:02:74:C2:E3:E6:D3:42:3B:D8:14:D1:BE:25
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          8B
Signing time:             Fri 25 Apr 2025 05:29:36 +0000
Manifest this update:     Fri 25 Apr 2025 05:29:36 +0000
Manifest next update:     Fri 02 May 2025 05:29:36 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: 35g4zv+VGpPkPfNoQzuwsMZLt+X4LtC/Nh+cimLTIug=)
                          2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: 5XjH5jYQNGqgzAYgO3kN1PD7Sd1lEpbAQIK2Gn00Jgc=)
                          3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: Bt9vGqi9TgbZdaX+9C2xi9dkPbVYKmUnDkvJSbxIGtE=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: HHG06rbqXUGTVwCC0t+f2pu30l3PoUzNu4BfvZ/sQwE=)
                          5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: tOqCLeToyx3OlovnhW3Ug6iPrFYH9Umb6yvHYh2Zk9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Apr 25 05:29:36 2025 GMT
            Not After : May  2 05:29:36 2025 GMT
        Subject: CN=680b1dc0-42f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:e1:c9:a1:e6:fa:33:c5:ed:fe:be:26:78:
                    d3:d2:94:56:11:77:63:68:53:c2:bb:95:55:f5:64:
                    11:6d:62:23:d0:e2:13:7d:d6:78:9b:e7:37:ac:2e:
                    f9:7b:1c:1d:ee:55:11:96:de:a6:70:b6:25:9a:1e:
                    97:da:0d:26:55:3c:92:90:fd:ed:46:e0:be:da:85:
                    62:cb:be:1b:3b:5c:71:9e:e2:6c:1a:c4:e7:65:e3:
                    e0:ae:f0:fa:1d:a0:54:50:df:72:77:24:4a:82:80:
                    0f:50:78:f6:3e:76:d7:f3:e9:c1:23:9b:26:9c:a0:
                    ac:76:4f:f4:69:df:98:a8:2b:a9:b4:02:49:f5:2a:
                    05:d4:48:88:b2:97:7e:8b:57:d5:25:3c:4c:a3:d5:
                    1a:b0:c8:cf:97:08:1b:b6:7d:c7:79:1a:a5:2e:06:
                    7d:4c:b3:06:20:03:40:8f:e4:9c:7e:43:64:ce:d3:
                    be:03:8f:ca:5a:73:46:45:19:e2:ab:2f:e1:bf:19:
                    75:02:8b:e1:02:b9:a5:75:4f:97:78:34:2f:96:04:
                    17:3e:cc:f8:76:00:b1:8c:e3:5f:bf:e4:84:06:21:
                    bf:1f:30:78:ad:c7:c1:9a:fa:43:8f:77:e4:ba:ea:
                    fc:d6:f5:8d:cf:8d:bb:02:32:a5:75:d0:fd:21:1b:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:56:D3:C0:F9:FB:02:74:C2:E3:E6:D3:42:3B:D8:14:D1:BE:25
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:01:51:cf:5a:78:9b:07:41:2b:0b:bb:09:16:dd:45:79:3a:
         37:66:7b:c2:bd:0f:b4:32:be:e2:c4:77:8f:df:bd:3b:56:11:
         c2:9b:03:bd:0a:48:38:49:42:38:c0:47:bf:ac:63:e4:6d:1f:
         7e:0d:c0:92:e1:a7:5b:2d:f7:37:06:6e:74:53:d3:37:bc:18:
         ba:67:e1:d5:2c:95:34:c5:92:23:58:35:46:83:6f:72:17:da:
         af:8f:61:38:78:f7:4f:cb:3f:7d:a4:1f:85:fb:5d:4f:09:05:
         6b:c0:cd:50:bd:9e:3d:28:9e:09:88:5d:68:d2:97:ac:a2:6f:
         fc:21:14:4e:28:59:29:11:79:34:a7:88:59:27:c4:11:7c:d5:
         84:fc:8c:14:62:7d:cf:43:53:b5:7c:81:3f:24:d2:00:f2:44:
         15:7f:b9:6e:9f:45:6a:63:5a:f6:d6:fc:c6:d7:c8:ee:10:13:
         83:56:50:16:cd:b5:74:27:b0:72:5b:d7:93:59:b5:0d:18:ef:
         de:29:df:81:c5:6f:89:78:13:00:f7:83:97:fa:85:0d:3e:0d:
         a1:4d:86:00:1c:05:46:a3:82:d2:a4:99:d9:e8:8c:9c:f9:25:
         71:10:dd:c5:b4:85:ba:42:b4:2f:09:c9:a2:4c:99:cf:bf:7c:
         f8:67:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:31 2025 by rpki-client