Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File:                     WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier:          vEmgcSmiLj0UsGARwtIzpVHVlwuOJogLjfVuUP16rso=
Subject key identifier:   0E:5D:B6:5A:6B:8E:D3:CE:8C:52:32:E4:93:97:6C:4B:8C:9D:00:81
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer:       /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial:       06E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number:          06DC
Signing time:             Mon 16 Jun 2025 21:44:41 +0000
Manifest this update:     Mon 16 Jun 2025 21:44:41 +0000
Manifest next update:     Mon 23 Jun 2025 21:44:41 +0000
Files and hashes:         1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: 4GOdlqeS5a7F4rBVC0XpXaW8eCE5YPRLTWIdIdsFs4g=)
                          2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=)
                          3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 21:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
        Validity
            Not Before: Jun 16 21:44:41 2025 GMT
            Not After : Jun 23 21:44:41 2025 GMT
        Subject: CN=68509049-cbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:8f:ae:1e:5c:72:1b:c5:df:1a:26:b5:6b:
                    b6:98:e7:b7:ce:9e:8e:e3:cd:ef:77:54:d0:bb:fd:
                    84:b1:58:dd:dd:6e:c8:51:ac:04:c9:04:60:02:d0:
                    68:0f:4f:de:ff:f7:e4:db:ac:05:d8:78:49:94:e8:
                    1e:47:4a:e5:43:34:c3:a1:f7:fa:77:38:7b:a4:11:
                    bc:7d:27:12:64:25:4e:21:dc:e2:c3:84:e2:c9:d9:
                    11:a1:d0:f3:ff:d3:66:61:4b:db:af:0c:6e:e5:20:
                    09:d7:ba:14:19:91:7d:97:35:5e:5d:a3:68:5b:b9:
                    6c:fc:f1:16:cc:09:2e:2a:97:d6:b6:42:42:ae:41:
                    27:13:07:dd:7e:dc:67:82:28:58:1c:09:e2:92:eb:
                    3d:d8:1b:7c:e4:cb:c7:e3:76:12:68:72:7f:85:cd:
                    b0:bf:60:5f:07:f2:b0:4d:95:46:e1:2b:ce:0d:b8:
                    a5:53:eb:0f:d4:0d:28:ca:74:af:cc:72:16:af:8a:
                    fa:8e:6e:a4:6d:a8:e6:db:1d:33:32:b7:7a:1e:39:
                    da:d2:7a:d9:53:36:06:be:1d:2f:f1:c4:23:c4:e8:
                    b6:37:40:24:ea:54:6a:ad:b8:fd:33:0e:34:50:e2:
                    2f:cf:87:1c:62:72:58:ed:8b:a2:a2:b0:ff:34:38:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:B6:5A:6B:8E:D3:CE:8C:52:32:E4:93:97:6C:4B:8C:9D:00:81
            X509v3 Authority Key Identifier:
                keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:88:01:f6:1a:67:12:48:ed:9a:6c:6e:76:a7:1d:33:10:35:
         08:25:d8:f5:7d:1d:e1:b9:4c:5e:6c:74:d0:3c:ae:3c:9b:ac:
         c2:5a:cc:21:d5:9a:98:d9:61:b4:3a:76:e5:c1:a2:06:79:46:
         58:b2:b9:b2:11:8f:2f:5c:f2:06:ae:51:95:83:30:aa:bd:0b:
         c7:d4:65:35:30:6a:34:62:18:ff:67:bf:2b:b8:f1:0a:6f:3e:
         40:b4:9a:e3:e8:d5:a1:4b:ae:91:ff:20:d8:86:ea:07:22:33:
         f9:52:b0:c6:22:4f:8e:29:49:f6:a2:20:c1:87:21:2a:ac:ed:
         d3:e7:ba:9f:0e:28:a9:68:69:a4:a4:be:ed:da:0d:b1:f5:8c:
         91:20:aa:44:c7:5a:3a:80:52:d7:b5:05:da:82:e4:43:60:73:
         97:e4:5d:8c:8b:ec:15:38:42:2b:27:73:88:56:99:2d:ca:46:
         5d:01:3b:3c:25:5c:6f:ce:ff:c2:9e:46:ba:a9:52:95:19:9a:
         2a:d6:78:89:1f:d6:a9:b2:ef:04:af:2d:5d:ac:b0:e7:79:ca:
         90:17:b3:93:60:16:af:a3:a7:b1:46:ee:6a:1d:9b:a7:7c:38:
         da:5a:e7:e9:c8:2b:23:d5:21:76:7c:e9:2e:02:cf:a3:4d:63:
         d1:5e:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:16 2025 by rpki-client