Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          mCDo7XbRn4laP3Asim0Hdk+ABgR9Rbnaa8myj6tNGjw=
Subject key identifier:   30:19:81:BD:C8:D1:83:A9:DE:3C:F5:7A:E5:52:85:3A:06:93:F4:6B
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       34EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          34C3
Signing time:             Sat 14 Jun 2025 14:36:58 +0000
Manifest this update:     Sat 14 Jun 2025 14:36:57 +0000
Manifest next update:     Sat 21 Jun 2025 14:36:57 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: 4Y4pNsR+WEOYiw4VxhR6pbVtihUzaU4lYSu5Uve+A2Q=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=)
                          4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13546 (0x34ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: Jun 14 14:36:57 2025 GMT
            Not After : Jun 21 14:36:57 2025 GMT
        Subject: CN=684d8909-08ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:95:9f:27:b4:ad:0f:3d:2d:70:43:c6:f5:
                    5e:fc:6a:5b:4e:b1:8e:5a:0a:e8:6d:a1:fe:68:6f:
                    e0:9c:c0:30:56:9f:c0:d7:78:57:06:43:9d:90:2e:
                    90:ba:61:88:77:f4:f2:6a:da:05:26:b8:47:b1:91:
                    8f:fe:c3:d0:4d:71:f3:4c:d0:4a:5e:00:ce:65:60:
                    a4:4d:82:fd:15:6b:52:1d:ba:d1:1b:e5:5d:de:ef:
                    d8:2f:1c:ca:f3:06:04:c6:ee:ea:74:24:fa:29:05:
                    be:3a:cf:6f:51:82:55:ad:6e:46:79:fb:9d:18:ea:
                    3e:49:35:32:56:cb:b9:df:42:c2:ba:7f:5a:9f:8d:
                    7b:f9:35:69:13:0a:0f:b7:2c:3e:17:22:90:66:7d:
                    51:b6:21:ea:be:5a:cf:38:9a:ee:ec:72:dc:90:58:
                    a3:16:b0:91:e7:c2:1d:60:9f:13:b3:76:60:a6:45:
                    54:3e:a0:f0:b9:c6:cc:6b:c4:6c:2d:a3:ad:6e:11:
                    30:44:2a:ae:6e:74:6f:ec:18:f3:ec:6b:b8:76:36:
                    08:63:ea:ad:6e:74:ab:f9:a7:f9:2f:c4:30:2e:c8:
                    64:34:8b:cf:bc:c8:02:7b:1c:e5:f8:40:b4:27:51:
                    dd:56:fc:8b:46:26:01:68:18:cf:04:1c:f2:dd:ed:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:19:81:BD:C8:D1:83:A9:DE:3C:F5:7A:E5:52:85:3A:06:93:F4:6B
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:47:ec:51:2a:6f:e1:a3:fd:fe:15:bb:25:2b:fe:61:4d:7c:
         cb:29:17:de:6a:a2:59:52:75:14:8a:57:e8:01:08:fe:8a:e0:
         e5:10:cb:32:1b:29:5b:59:65:3a:30:4b:04:5e:8b:0c:ea:42:
         3b:a9:f1:f7:3d:2c:2e:49:da:cd:30:22:fc:86:8e:71:2b:c6:
         4e:9c:c9:c1:68:c9:1c:7f:dc:2c:9c:d0:97:49:fd:dd:53:8e:
         c8:af:bb:a7:d6:5b:47:12:13:43:7a:64:56:cd:e6:c9:bd:d9:
         bc:85:5d:ae:78:8b:9d:f2:bf:97:49:44:66:a2:96:8a:b7:66:
         fd:92:d1:02:71:5b:22:74:da:40:07:10:2e:0b:6d:ab:23:0e:
         7d:da:10:7d:e7:fd:ee:af:58:82:56:23:50:7d:82:29:14:18:
         7f:4b:f0:6a:b4:b1:84:e5:82:12:f4:8d:5f:64:9b:aa:4b:01:
         c3:47:c4:06:a8:c7:d8:d5:c5:e3:e0:5c:1f:44:62:66:c4:0c:
         b2:bf:10:21:30:1d:45:9b:6c:0c:a7:41:c0:96:46:d8:ef:3d:
         8c:b2:b5:31:6a:bf:9a:c8:bf:f2:48:e9:b2:8a:69:30:7b:c8:
         d1:7c:ea:23:16:de:0d:b1:0a:c5:de:2b:74:69:bb:63:82:5b:
         84:9e:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:06:12 2025 by rpki-client