Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          I4dxn+xZWsVzLhGkdPyrmL1PL/WfalIb+JvnLkH4GKc=
Subject key identifier:   16:C7:97:B4:AC:12:E3:C0:8F:DC:61:9C:EB:17:63:C2:51:D1:18:1A
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          0627
Signing time:             Sat 14 Jun 2025 22:27:53 +0000
Manifest this update:     Sat 14 Jun 2025 22:27:52 +0000
Manifest next update:     Sat 21 Jun 2025 22:27:52 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: sFOszYoSqCSNPxZKveZ+SbvZdHKRKcI8c+riU4nH9os=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: YIXSyV44XhAG1Lj7gtWc38+2l5HR5ltRFiBGyckO8MU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Jun 14 22:27:52 2025 GMT
            Not After : Jun 21 22:27:52 2025 GMT
        Subject: CN=684df768-4f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:20:34:6f:a4:02:28:0d:54:79:a2:8d:cb:
                    b6:96:d4:f3:14:1b:d5:60:13:dc:7c:cd:9b:be:51:
                    b1:3f:b6:ce:4b:d2:64:97:d1:f3:46:55:1d:4a:81:
                    2b:3e:20:52:0f:aa:50:e3:2b:ec:cd:64:a0:c2:bb:
                    54:2d:12:24:bc:6a:06:71:b9:01:d7:63:64:47:a5:
                    77:a2:dd:c3:04:24:e5:f0:0f:68:5e:e4:35:e9:19:
                    cd:6a:eb:a6:de:6b:b4:53:84:b6:ae:55:d0:00:e4:
                    8a:4c:e9:b7:cf:4c:78:bf:fc:66:e2:1f:5a:fa:b2:
                    e9:54:cb:f3:44:93:e3:75:ab:06:07:a0:dc:47:b7:
                    e2:17:91:c2:72:99:80:f3:93:4a:ac:c1:c0:c7:7e:
                    c3:8c:2c:11:6d:c0:69:be:af:11:44:35:e3:66:e6:
                    31:46:78:57:be:40:fa:ea:a6:17:d0:b3:fb:20:8e:
                    b2:a7:06:02:48:94:b1:50:ce:ef:14:3c:9a:41:5b:
                    0a:63:ee:11:bb:c6:49:b4:ba:75:c6:97:fd:7f:30:
                    49:4e:ca:e3:65:20:18:94:06:ac:85:f5:9b:4b:1d:
                    50:b9:88:07:f4:95:84:c4:b6:93:a0:21:7a:a2:f9:
                    e8:d2:3f:20:b2:f3:1f:cb:f7:1c:d7:70:c3:2b:75:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:97:B4:AC:12:E3:C0:8F:DC:61:9C:EB:17:63:C2:51:D1:18:1A
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:01:22:79:57:d5:06:29:c1:94:ec:84:05:aa:c2:8b:f7:
         6f:82:86:6e:30:6d:ae:7e:38:d3:53:cd:ce:8d:77:cc:f5:97:
         37:fd:29:11:4e:ed:7c:7e:96:da:2f:f1:eb:87:5b:77:e6:0b:
         de:d9:83:cb:cb:a4:79:f5:ba:22:57:4a:ab:36:63:25:e2:0e:
         dd:c8:2e:9f:19:54:74:ab:ec:0b:7b:95:01:e1:b2:31:74:9d:
         64:2c:d1:f0:cc:15:0f:46:66:17:d7:46:60:be:c8:94:00:e1:
         bd:b6:50:79:54:b5:6c:d7:6a:e5:6a:48:99:45:ea:92:ab:bf:
         fe:7e:b4:14:35:99:7f:3a:ca:b3:8b:65:7c:cf:30:9b:b6:c9:
         4a:ab:78:73:b5:b3:4f:7f:e7:e2:a3:31:97:75:1e:a6:41:ef:
         38:14:79:9c:e4:66:66:b6:d4:56:3a:24:f0:32:00:58:9e:44:
         36:a8:47:2e:f9:60:7c:62:1d:5c:e0:48:db:24:f2:75:35:d9:
         b7:b8:d6:e5:14:29:54:78:66:44:13:30:1e:08:9f:af:1d:7f:
         83:f0:8e:e6:d6:02:a3:6b:7d:3c:d9:1b:0b:0d:ed:6f:2e:ac:
         d0:fa:7f:f1:74:0f:68:bd:3c:de:6b:18:9b:73:e8:58:0e:47:
         9f:69:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:32 2025 by rpki-client