Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          v4zfpCYEn3wW990a7qxvnvCH7jG03Za1gxD1x+mBHYc=
Subject key identifier:   EB:4A:07:8C:04:07:12:7C:44:CD:92:E3:8E:A2:71:3B:1F:91:93:AA
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          F9
Signing time:             Fri 13 Jun 2025 04:12:25 +0000
Manifest this update:     Fri 13 Jun 2025 04:12:25 +0000
Manifest next update:     Fri 20 Jun 2025 04:12:24 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: ztyi9RGQENemmvRJ7gcpc9EmdAnp+yBHfr3+LIohXm0=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Jun 13 04:12:25 2025 GMT
            Not After : Jun 20 04:12:24 2025 GMT
        Subject: CN=684ba529-245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:f6:9a:f1:bb:b6:4e:9c:0b:1f:40:17:db:
                    41:fa:d5:9d:a2:40:67:a3:44:91:ca:00:cb:02:1d:
                    3a:d7:5e:e1:6e:bd:51:16:55:fb:ca:20:dc:de:79:
                    f4:49:f6:51:72:68:8f:f9:56:af:46:63:48:09:01:
                    6a:e2:7c:3e:96:d0:ad:59:db:64:72:79:24:11:9b:
                    5c:f6:8f:d1:67:ac:7f:c9:0d:a4:86:64:26:47:b0:
                    85:ab:49:e1:ab:cb:50:41:f7:66:ff:0a:83:16:cf:
                    cf:7c:94:0c:1a:74:ad:96:2d:bf:67:49:03:e1:f2:
                    aa:60:5c:30:63:c3:a6:ca:64:2d:1a:15:2c:61:50:
                    a9:d5:df:8d:7e:8b:6d:86:d1:64:79:85:9e:fe:68:
                    65:ae:75:e2:21:43:83:6b:06:ba:e6:a8:ad:1f:0c:
                    73:5b:eb:0a:51:e5:89:8d:b0:eb:dd:e4:0c:56:f1:
                    04:45:93:a1:0c:46:06:05:3c:fa:53:0b:5e:d8:8f:
                    ec:42:1f:ad:17:cc:f3:58:cf:59:81:ff:fd:15:9f:
                    9a:21:9d:20:35:0e:80:db:f5:11:0a:f2:dc:02:00:
                    61:d6:f5:64:48:07:ec:46:8e:2f:f1:ba:8b:4e:07:
                    ae:30:92:10:c1:2e:b2:b5:dd:3a:b9:67:0e:73:2f:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4A:07:8C:04:07:12:7C:44:CD:92:E3:8E:A2:71:3B:1F:91:93:AA
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:55:1a:98:64:3c:1f:e9:9f:a4:0d:84:2b:d5:21:35:72:
         6f:de:e8:8c:c7:e1:8e:ed:65:e8:5d:db:ad:50:f0:8c:63:7d:
         49:8d:2b:04:e1:7b:b4:a1:8d:50:77:2d:c8:87:9e:2a:c6:86:
         8d:b6:6c:40:f4:46:d0:3f:e5:3f:12:42:11:d7:0c:f9:56:a8:
         72:f8:24:24:0f:b1:3f:8d:bc:cd:96:e0:d8:0c:1a:3b:dc:ee:
         12:05:49:35:d3:cd:9e:d7:6b:c6:a2:e4:e8:52:03:ba:44:2c:
         a6:90:3e:be:bf:47:81:42:34:77:09:fa:e6:05:e2:0e:ab:f5:
         fb:80:98:b3:c3:b6:51:44:56:42:ff:e7:5e:59:29:76:27:78:
         46:5d:1b:ac:d8:7d:59:54:92:f6:a3:10:0b:99:73:69:cb:c4:
         8e:33:7e:65:e3:49:a2:76:49:87:55:23:c3:d3:cb:84:72:9d:
         c4:e3:f1:01:8f:b6:8f:68:1d:e1:9f:b3:83:5a:5c:1a:73:e5:
         9d:06:b8:a9:b7:b4:77:96:3b:69:b1:30:7e:b3:f5:0e:d4:55:
         e0:3d:90:43:bd:76:08:e2:60:94:8e:fc:9d:a5:87:04:f2:69:
         1c:e3:72:f9:45:90:da:bf:01:05:c5:28:e8:fc:0a:4f:d0:34:
         63:5b:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:43:52 2025 by rpki-client