Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
File:                     wYD2VoONE4d3oUtu7zRrekx5G10.mft (raw, json)
Hash identifier:          IZOwl8Ew1P8FygLG+6GuEB+4mxUm9YRl649s9SEeeT4=
Subject key identifier:   66:24:AF:7D:E7:B6:D6:F0:F5:36:C0:26:4F:03:08:0A:39:F1:42:CC
Authority key identifier: C1:80:F6:56:83:8D:13:87:77:A1:4B:6E:EF:34:6B:7A:4C:79:1B:5D
Certificate issuer:       /CN=A91ABC49/serialNumber=C180F656838D138777A14B6EEF346B7A4C791B5D
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
Manifest number:          0790
Signing time:             Mon 16 Jun 2025 21:06:04 +0000
Manifest this update:     Mon 16 Jun 2025 21:06:04 +0000
Manifest next update:     Mon 23 Jun 2025 21:06:04 +0000
Files and hashes:         1: wYD2VoONE4d3oUtu7zRrekx5G10.crl (hash: BN4DCnogeImlYldfBXRsSz6y4jpI3MG+cvwmAjGmCGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.crl
                          rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 21:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABC49, serialNumber=C180F656838D138777A14B6EEF346B7A4C791B5D
        Validity
            Not Before: Jun 16 21:06:04 2025 GMT
            Not After : Jun 23 21:06:04 2025 GMT
        Subject: CN=6850873c-689a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:96:5d:1d:c8:52:be:8c:dc:3c:cb:65:16:
                    de:1e:f6:e6:b3:36:24:c2:2e:ba:c9:56:16:7f:6a:
                    80:c7:8d:4e:74:78:60:9b:4d:41:01:2a:4c:8d:5d:
                    53:63:cf:d2:2e:5a:59:65:36:56:bc:92:d7:f5:47:
                    c3:0e:2a:e9:97:69:c4:88:c4:af:fa:91:ce:4f:bc:
                    ad:1e:c4:79:b3:40:31:65:b8:f9:33:64:d3:0a:8e:
                    ed:49:8f:97:d7:ce:18:71:de:d9:ed:3f:fb:f5:f2:
                    15:3d:19:41:67:f5:3a:de:21:30:25:ae:93:d4:57:
                    de:23:4e:fd:04:c1:fe:ca:69:54:7b:89:3e:82:eb:
                    b3:95:e3:fc:bc:0b:eb:10:4f:8e:e4:b5:6b:b1:f5:
                    ff:62:0a:e4:5e:03:f2:20:89:67:da:48:1b:77:47:
                    df:53:f5:b1:b8:5b:b7:58:d7:93:a7:15:da:6a:6b:
                    16:8d:8a:65:1e:57:b2:b7:6b:32:80:22:8f:a9:e2:
                    a6:a5:50:70:80:f0:95:73:6f:46:4e:ac:cc:3c:11:
                    03:df:e6:5e:37:c0:78:c3:1e:29:4b:60:26:e9:5a:
                    12:6f:5a:f8:e9:5a:0d:a6:51:61:c9:53:22:9a:18:
                    bc:95:2e:db:7f:c3:61:a3:73:17:d7:c9:aa:60:1d:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:AF:7D:E7:B6:D6:F0:F5:36:C0:26:4F:03:08:0A:39:F1:42:CC
            X509v3 Authority Key Identifier:
                keyid:C1:80:F6:56:83:8D:13:87:77:A1:4B:6E:EF:34:6B:7A:4C:79:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d9:97:99:b0:af:c3:8f:3a:c5:ba:f1:a3:8c:40:87:03:7a:
         b2:05:f5:23:a9:5c:08:03:52:c5:fa:4d:de:18:b6:2f:9d:82:
         33:69:00:c2:31:d9:fb:06:a4:35:20:76:0e:e5:e4:28:28:2c:
         84:04:34:ba:50:a6:eb:c3:1f:36:34:91:eb:8d:7a:47:53:a1:
         20:58:d5:df:96:87:2a:2a:bc:7c:df:6d:61:8c:f0:8d:0e:6c:
         15:ec:3b:1c:3e:84:54:c8:8a:5f:64:a8:42:ef:ea:63:aa:d4:
         cd:ea:42:76:11:a7:c4:6a:01:b9:6d:7e:e2:bc:fc:5f:9f:99:
         a4:fe:8f:e7:53:7f:57:81:b5:31:c8:3f:ec:45:f7:f5:b7:82:
         f7:2b:87:00:0f:16:99:70:03:3d:69:91:53:b2:68:92:df:ab:
         dc:46:03:ad:0d:4e:4b:5b:79:ab:5b:a0:71:cc:a9:9b:56:94:
         7a:6b:b4:fe:90:c6:cd:62:08:75:f7:20:0d:86:61:df:f4:c7:
         b3:e1:ef:c8:e3:b8:48:59:40:78:f0:c7:38:53:3c:fb:e8:8a:
         95:a2:83:4c:1e:6f:0e:6b:44:b9:40:f6:d2:7c:ea:ea:73:60:
         ee:00:9d:a0:6e:f0:18:3b:9f:69:0c:00:2d:68:55:3d:80:df:
         61:49:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:47:25 2025 by rpki-client