Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
File:                     wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json)
Hash identifier:          UqwT+4A1yBeJAVD6B3g/ax+CVNSlBNcQPSwqIoyvTN8=
Subject key identifier:   C2:BD:D4:5B:F8:75:8E:FA:90:89:91:CC:C8:AF:56:1A:5B:88:7D:04
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Certificate issuer:       /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial:       064C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
Manifest number:          0647
Signing time:             Thu 24 Apr 2025 22:19:21 +0000
Manifest this update:     Thu 24 Apr 2025 22:19:21 +0000
Manifest next update:     Thu 01 May 2025 22:19:21 +0000
Files and hashes:         1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: vR6sMJinCjcSU9Ihrs6a9AcOz8gmr7tOUHA+IowuOCQ=)
                          2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
        Validity
            Not Before: Apr 24 22:19:21 2025 GMT
            Not After : May  1 22:19:21 2025 GMT
        Subject: CN=680ab8e9-6b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:7d:9a:33:d8:e9:87:51:c0:70:a5:60:1f:
                    72:50:17:e5:bf:5e:38:e4:be:f2:21:4c:75:75:4f:
                    c2:21:a2:93:24:6a:9c:7a:c9:d7:ee:4c:39:9a:e7:
                    fd:60:33:49:f1:4d:96:0f:24:56:8d:2f:03:6b:bc:
                    c6:d0:fd:ba:2b:3b:5a:83:e4:87:bd:1a:e0:2a:f9:
                    02:50:2d:e0:4a:79:60:a0:24:10:9d:fc:f5:75:67:
                    88:ad:58:c0:b6:0a:3a:cb:6a:ac:d4:65:30:47:c3:
                    5c:42:3c:1c:da:b2:7f:e1:4d:a0:aa:bd:17:44:96:
                    7b:8e:45:9b:8c:97:d5:ac:f1:7a:a9:6e:b0:6d:f2:
                    66:d5:8e:35:fb:d8:d9:f2:53:8d:24:0c:01:0a:35:
                    68:5e:35:53:ce:9b:93:4e:e3:9d:00:dc:82:cf:de:
                    9b:24:e6:a7:6d:61:69:44:5b:8c:bf:98:b7:72:37:
                    dd:e6:2c:fe:f9:34:d4:53:f6:e7:b4:6c:6f:d1:71:
                    2d:a6:2c:74:8f:55:d5:f4:ed:3a:ee:96:56:fb:1b:
                    9f:1f:bf:ef:98:5b:67:49:1d:04:01:1d:0e:f6:73:
                    2d:83:ad:37:90:f0:1d:3a:8c:bb:72:1b:44:14:dd:
                    04:90:d7:15:88:70:ca:5c:2a:cd:0b:16:ee:29:f5:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BD:D4:5B:F8:75:8E:FA:90:89:91:CC:C8:AF:56:1A:5B:88:7D:04
            X509v3 Authority Key Identifier:
                keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:44:72:81:6c:b4:2d:b4:0b:75:3b:58:87:fd:99:c1:03:
         58:15:c7:8f:ba:23:13:1a:1a:0c:ef:94:1c:5e:9a:68:ac:cb:
         1e:64:d3:b5:65:79:60:50:07:5d:36:32:2e:e2:85:85:cb:6c:
         b9:4d:c2:38:4f:c3:f0:96:02:27:fd:c6:b2:9b:97:47:60:65:
         e1:8f:ae:e4:f2:60:52:ec:97:e1:f6:39:d1:03:3a:16:3f:5c:
         0a:0c:03:76:cf:0f:01:62:0d:7a:53:6b:af:48:ec:52:f7:27:
         29:1f:04:e5:17:9b:5d:d4:b0:02:ea:5d:53:f3:7d:7c:11:9c:
         51:1c:e9:de:8d:89:81:26:23:bf:ab:8c:e1:39:8d:e0:5b:81:
         41:f9:58:0c:c2:95:ec:95:d1:03:59:1a:b4:b0:bb:3e:3e:f7:
         14:62:d6:34:f4:10:a5:f9:75:13:99:39:59:e7:c9:71:48:0a:
         70:08:7a:16:92:99:6c:0c:a4:af:cc:dd:38:96:c1:4e:bb:8a:
         33:e8:7f:64:79:18:76:89:c9:d8:7b:9f:d3:ac:00:1d:2e:1b:
         a3:d0:e7:d9:54:23:d2:2c:22:7c:2e:74:53:d7:06:66:df:ce:
         ae:3a:ba:bf:7b:62:79:d2:97:8e:dd:20:d1:1c:73:ec:97:bc:
         ec:4f:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:57 2025 by rpki-client