Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
File:                     WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json)
Hash identifier:          LlFbzatqhafp+JL70LpIuLjR5CwYKLP0Sd1P9dCaEkk=
Subject key identifier:   1B:70:3B:E7:E1:80:3F:B2:72:E9:C4:A4:64:8F:5C:28:35:26:FD:AA
Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
Certificate issuer:       /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
Certificate serial:       0B73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
Manifest number:          0B5E
Signing time:             Thu 12 Jun 2025 18:54:50 +0000
Manifest this update:     Thu 12 Jun 2025 18:54:49 +0000
Manifest next update:     Thu 19 Jun 2025 18:54:49 +0000
Files and hashes:         1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: yBuNqVB03pA4C8qlrvq98T9KCRCEY1aokkE+XlVbJu0=)
                          2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=)
                          3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
        Validity
            Not Before: Jun 12 18:54:49 2025 GMT
            Not After : Jun 19 18:54:49 2025 GMT
        Subject: CN=684b2279-2d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:fc:6a:29:15:9e:8e:3e:a7:08:ea:da:dd:
                    71:df:9e:82:33:52:90:b1:25:cd:1a:01:6c:d8:3f:
                    90:51:9a:bf:78:ca:44:ea:51:b0:82:e9:39:9a:1b:
                    74:f9:aa:5c:e8:f7:39:dd:ad:e1:11:53:66:a2:a8:
                    3f:22:e2:cf:78:33:bb:86:6c:a0:50:dc:33:c7:04:
                    07:84:77:ca:e9:bf:8c:27:c8:75:b0:bf:6f:f7:3c:
                    69:b4:52:df:46:11:80:a7:c1:a4:bd:bd:2a:40:a4:
                    3b:9f:a2:41:65:f0:c0:a9:5c:3f:43:f6:a0:29:f7:
                    77:be:5c:18:93:13:89:93:90:5a:7e:62:e6:1b:55:
                    3f:64:fd:2a:19:d9:6c:b2:7d:de:cb:83:1a:60:7e:
                    ae:36:14:d8:dc:97:6f:82:11:8d:43:3e:f6:7e:99:
                    c8:f2:d8:db:5a:1f:e0:bb:43:b0:a6:e7:73:a1:f5:
                    7a:70:c7:9e:f6:c1:6d:a8:de:b3:1b:c1:65:95:b6:
                    c3:09:69:e0:1e:d7:7f:ce:e7:0e:7d:08:34:31:42:
                    7e:b2:e4:a0:66:58:b4:1f:f4:c6:43:9f:c8:33:7a:
                    ea:6e:f9:ad:be:b5:4f:d7:54:54:0f:ed:83:a5:90:
                    6a:c0:a4:87:16:bd:46:06:37:fb:32:e1:c7:3d:f8:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:3B:E7:E1:80:3F:B2:72:E9:C4:A4:64:8F:5C:28:35:26:FD:AA
            X509v3 Authority Key Identifier:
                keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:23:01:8b:62:35:65:59:51:c1:43:8e:9b:51:52:4d:e1:71:
         a5:e6:6f:e9:4f:b8:60:c2:54:ca:e5:3f:34:19:4c:54:85:b8:
         6f:a1:ad:7e:fc:d4:d9:50:3c:40:ac:cd:fc:26:e9:6c:38:42:
         27:4a:9d:9e:0a:77:fd:ef:89:6d:89:ea:96:d9:24:b2:8a:3a:
         d9:da:54:96:7c:ba:7a:81:44:1d:e1:5f:78:02:d8:e2:1c:79:
         89:46:54:f9:60:5f:a3:3f:90:8b:64:3d:d2:7d:5d:ea:85:b9:
         f7:10:99:02:ad:9e:6c:c6:ae:e2:1e:5d:d4:27:cf:d5:3b:23:
         a0:02:36:b4:6f:d2:c3:6b:2b:fb:fe:af:b4:73:a1:d6:cc:a9:
         d8:a0:89:ce:99:db:79:db:31:2b:bc:81:67:08:0d:dd:f8:eb:
         06:b0:fd:3d:17:69:8f:17:6f:5e:d1:2f:7a:f2:45:52:a8:66:
         b9:5a:2a:7a:01:09:94:41:78:a8:1c:38:3f:a6:f3:a5:35:ab:
         32:13:8c:dc:b5:92:a3:1a:57:55:c1:06:50:1e:53:d3:6c:53:
         86:4f:d4:35:93:2e:85:2a:47:83:5b:98:b5:33:a1:e0:d5:ba:
         86:ba:83:f6:89:ee:a5:e7:8e:8e:d7:d3:f6:de:e5:bf:cd:43:
         fc:cb:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:00 2025 by rpki-client