Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          iUBUAIFnY2cCbkEzYs7KmAo0AUM5luituW8p8DLPZDE=
Subject key identifier:   DE:1E:66:CB:28:61:9A:16:88:A1:E0:F4:3E:D2:2B:39:D1:B2:88:55
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          0162
Signing time:             Fri 25 Apr 2025 03:23:38 +0000
Manifest this update:     Fri 25 Apr 2025 03:23:38 +0000
Manifest next update:     Fri 02 May 2025 03:23:38 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: e+fP7aaPm4I00d6goI0XvV6YIXTzONylkqwDy9T1zNg=)
                          2: B7D0DFCE4DB711EF8E122A5FC4F9AE02.roa (hash: VKZ9LIexMFkEYGOmEADIBtbRMOmwzVdorGbV8zP17Qg=)
                          3: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=)
                          4: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: 2y8wJ1PVjmvj/h6RNUPibqQJhsY3FKf+7tKEQmy95j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Apr 25 03:23:38 2025 GMT
            Not After : May  2 03:23:38 2025 GMT
        Subject: CN=680b003a-b3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:b4:1c:ed:24:a1:69:37:45:c1:51:1c:ea:
                    9d:b4:a7:3b:d1:52:0b:7b:97:2b:09:b7:12:db:93:
                    55:07:57:39:cc:5f:0a:49:ae:17:7a:4d:1b:01:79:
                    5f:e2:00:01:26:a9:c4:af:46:1e:b9:79:70:85:49:
                    99:5a:8e:15:14:f2:4f:cf:0a:b0:07:bb:8d:92:0b:
                    0c:f2:14:b6:6e:f2:37:69:5e:53:21:40:20:79:67:
                    8a:9b:ee:63:ab:8f:97:69:ed:36:cc:9a:0b:aa:87:
                    fd:8f:e5:37:9a:02:06:8f:79:89:d4:43:bb:3f:d9:
                    d3:f8:c8:53:52:49:01:14:96:08:ff:56:30:c1:2c:
                    a5:74:41:16:d4:49:94:0a:ae:f7:1d:07:f7:82:a9:
                    21:b5:70:2d:ee:21:33:0d:37:00:11:2c:39:b8:4d:
                    01:67:54:08:18:03:e6:c6:5b:61:54:fb:ce:4e:f5:
                    c7:21:66:c1:5b:83:e9:15:7b:00:3f:31:2f:6f:f8:
                    50:c0:4f:11:9c:c8:51:31:f0:89:b9:4e:cc:4d:7a:
                    3c:85:c8:42:1e:b0:ac:06:55:4f:96:5a:8e:4d:7b:
                    e2:67:61:2b:53:e5:48:cd:42:a4:87:8d:4e:a3:16:
                    43:50:bb:01:f5:cf:a6:58:6e:69:53:e0:55:78:92:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:66:CB:28:61:9A:16:88:A1:E0:F4:3E:D2:2B:39:D1:B2:88:55
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:74:2a:da:c6:74:57:f8:9f:f3:41:b6:98:66:0f:26:f2:a5:
         d4:9b:be:db:3f:52:0d:9a:66:54:87:1c:b3:d4:5b:38:85:38:
         b3:a4:39:ca:69:de:74:af:e8:1c:6e:65:99:6c:46:ff:c4:7c:
         5e:7a:42:ee:ab:81:b7:b4:e6:39:cd:7e:b2:0b:0a:13:48:9c:
         d1:df:7b:29:7d:1e:34:4e:9c:03:25:b9:bf:86:54:32:f7:bb:
         c3:6f:0b:b5:eb:bc:09:e6:20:1c:66:8b:e8:ec:cd:a3:d9:1c:
         87:22:0f:1d:04:de:18:1b:d8:91:e0:f3:12:c7:23:e4:ac:08:
         40:43:98:ba:83:0c:dd:2d:83:16:2f:d3:30:59:37:d7:8b:db:
         c7:a1:e2:40:a8:11:cc:cd:d6:19:e5:f4:6b:62:cb:68:a9:a7:
         a4:70:d7:e8:f6:a3:70:a6:6e:25:81:05:59:f0:f8:d0:c5:03:
         32:d6:52:52:e5:a4:d9:20:84:2f:bf:1e:b2:86:f1:67:02:f7:
         15:c9:04:c5:38:76:c5:8d:48:c3:6a:c9:9d:2a:5e:a7:80:a3:
         7a:48:c7:84:8e:39:65:a5:57:bd:67:fb:0e:34:fc:43:3e:b1:
         dd:0b:b8:53:77:0f:d4:13:29:b7:8f:c6:7d:7b:3a:29:2f:d4:
         53:7f:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:26 2025 by rpki-client