Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File:                     wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier:          D66l57iYm8wXVCfkJkEIt8UskGVYWw67GNzX8PUAIJk=
Subject key identifier:   B8:33:C5:F7:BD:C7:D8:96:FA:93:7A:7C:D1:13:11:28:16:F3:E7:71
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer:       /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number:          0554
Signing time:             Sat 14 Jun 2025 23:07:35 +0000
Manifest this update:     Sat 14 Jun 2025 23:07:35 +0000
Manifest next update:     Sat 21 Jun 2025 23:07:35 +0000
Files and hashes:         1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: 5TL97EPi28k4DOh2f/+wYNJ5rY0aWSZ9FYDB6wuFvh8=)
                          2: EDA4BE18EF8711EBAF811557C4F9AE02.roa (hash: XzFg7Hp2s0t/ygNB9X7ACgOTOxQW40ffh6L1IDqjhU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
        Validity
            Not Before: Jun 14 23:07:35 2025 GMT
            Not After : Jun 21 23:07:35 2025 GMT
        Subject: CN=684e00b7-8486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:27:53:84:ee:9a:60:6d:58:67:05:4d:7d:
                    2c:14:72:bf:d2:61:c2:73:38:0e:c6:f8:fe:12:a5:
                    db:1b:66:27:27:fb:b6:aa:24:21:c5:fe:54:6a:ab:
                    25:46:10:47:d5:af:c4:b2:51:88:a9:ad:35:03:59:
                    04:93:73:06:7f:10:c2:31:64:16:6c:a1:3b:1e:f1:
                    96:65:a0:1c:60:2f:15:5d:aa:d4:ed:5c:2e:3d:e7:
                    0b:dc:b0:10:cf:34:02:5e:c2:18:66:b6:c2:a5:31:
                    fc:32:a7:ef:55:27:b8:84:02:f2:4a:cf:37:a2:18:
                    e4:67:4c:5d:2c:3f:5f:75:24:32:e4:a9:31:41:08:
                    57:74:3d:a8:b4:16:90:ef:b2:2b:b1:ac:99:4b:0b:
                    88:de:9e:79:18:be:98:5c:ed:8e:8a:62:33:6b:35:
                    da:6a:d9:a1:dd:91:73:c8:23:53:1c:29:2a:20:ae:
                    2c:e7:9b:e1:ca:ed:fa:6a:b8:81:15:12:d0:b9:47:
                    19:82:e5:1c:5e:70:2f:e7:2d:2d:7d:56:05:df:9f:
                    b4:a2:a3:b5:a4:1c:9f:31:29:21:f6:e0:7f:00:1b:
                    c5:6d:a3:1e:85:20:1a:6b:60:1c:27:7a:f2:64:d8:
                    2b:6e:fb:5f:bb:82:ba:51:62:4e:8d:95:1e:64:78:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:C5:F7:BD:C7:D8:96:FA:93:7A:7C:D1:13:11:28:16:F3:E7:71
            X509v3 Authority Key Identifier:
                keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:e8:a4:16:b5:f6:f2:7b:9b:ba:45:ea:da:af:57:5c:70:
         76:1f:84:96:7c:25:6d:f5:b7:f8:b2:fd:8b:37:ed:3e:d8:0d:
         d7:f1:f7:cc:40:bb:67:11:89:ec:ed:08:10:f9:0e:e3:97:62:
         b1:82:87:fd:6d:d8:20:89:aa:49:06:9b:2e:e9:d4:af:dd:8d:
         ba:d8:d8:08:ab:e4:a0:59:a5:60:cd:ee:f6:e3:0c:d6:1d:5c:
         3f:88:86:fc:41:14:6d:2a:be:bf:18:09:29:af:97:90:7a:36:
         54:82:18:fd:8c:96:db:fb:5c:3e:a2:62:25:a0:83:3e:1e:bf:
         46:eb:61:39:3b:4a:d3:a4:47:53:73:7a:88:57:96:2f:2c:51:
         25:50:70:1c:2d:3a:20:46:41:74:bd:72:2a:ad:31:9a:2c:53:
         aa:69:03:78:51:fb:72:88:b3:00:e8:ea:6f:de:5f:75:22:d1:
         06:c6:db:10:fb:dd:17:af:5e:08:ee:ab:6f:5e:f7:6e:5e:95:
         f0:f1:5c:32:9f:cb:b4:23:74:88:4f:3b:65:9f:66:c3:29:91:
         21:23:e3:a8:34:4a:19:99:81:de:f8:d0:e5:77:2c:3f:82:0c:
         77:42:f8:fb:1f:57:1e:97:80:62:01:82:78:db:58:3f:c0:14:
         0e:68:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:30:22 2025 by rpki-client