Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File:                     wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier:          5MarimI6pZtHP3trzYF+dTGRX0B+RvYHEVp8wfOKwuc=
Subject key identifier:   33:BE:4E:24:9D:9A:B9:DF:8C:32:76:C0:1B:A0:B8:0F:12:5C:29:B5
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer:       /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number:          0576
Signing time:             Fri 08 Aug 2025 23:45:04 +0000
Manifest this update:     Fri 08 Aug 2025 23:45:03 +0000
Manifest next update:     Fri 15 Aug 2025 23:45:03 +0000
Files and hashes:         1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: 3YuzDwx4tW7UShDr+/tBfQ6adMfILcWZGkI5XTjLnHM=)
                          2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: bEuAdA3yRgHUx1B8M9eSaNpdhvP9aDsmMm6seL8p7oY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
        Validity
            Not Before: Aug  8 23:45:03 2025 GMT
            Not After : Aug 15 23:45:03 2025 GMT
        Subject: CN=68968c00-7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:37:f9:97:63:dc:b3:28:3d:29:62:2b:c8:
                    1f:38:1f:fb:d2:18:83:84:e2:05:83:6d:32:dc:ca:
                    ee:a4:32:4a:3d:f6:f5:6d:e6:11:98:f0:9d:23:59:
                    22:4a:92:44:41:9a:26:ef:fe:60:9f:1a:96:4a:e1:
                    60:21:ee:38:fc:43:49:27:1d:d5:9b:e2:f7:96:d6:
                    5f:bb:a9:da:60:45:2d:c7:b7:ff:89:84:0e:66:8b:
                    61:43:27:44:86:5f:bd:4a:14:9b:29:1d:b8:fd:ac:
                    f3:6e:be:ab:27:e0:86:09:4c:83:c3:85:ca:2c:04:
                    c1:25:25:68:99:93:09:7c:7c:d2:41:e9:20:f0:e4:
                    cb:63:3c:7f:82:50:a8:0b:f5:80:99:64:4f:00:32:
                    b9:bd:f9:84:af:b6:c5:e2:b8:6a:58:4b:ef:97:43:
                    7d:a8:91:bf:e6:be:d7:f2:b3:81:ed:b1:98:18:04:
                    94:0b:d6:35:b3:68:bf:ac:d2:9c:5d:14:39:cd:16:
                    8e:eb:f8:86:3d:3b:a5:cd:60:ef:b5:75:9d:00:35:
                    fc:9b:2e:ce:c0:4d:0b:ec:87:15:e9:81:c7:bb:2e:
                    48:8d:47:55:00:53:24:8c:df:a3:a9:1e:54:7f:80:
                    74:c3:c4:8c:43:98:76:81:a2:49:54:8e:40:88:90:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:4E:24:9D:9A:B9:DF:8C:32:76:C0:1B:A0:B8:0F:12:5C:29:B5
            X509v3 Authority Key Identifier:
                keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:4f:55:e5:99:62:43:e1:07:82:7e:d5:84:ab:6c:b3:80:
         e8:17:6c:0d:b6:58:44:7f:ac:c4:0c:1d:5e:92:e4:0f:af:1f:
         cb:e6:0a:28:11:8d:9b:5f:80:7e:c7:c9:2e:bd:53:cb:6f:b2:
         a4:74:eb:07:20:bd:d2:94:f8:98:30:58:9d:9f:b8:88:b3:9d:
         26:22:e8:ca:da:5f:c4:70:ab:e8:be:06:22:23:32:f7:35:9b:
         95:55:9b:9f:b3:55:d5:67:90:b5:fb:44:39:de:16:75:ca:f7:
         b8:54:9b:ef:18:74:c8:b4:80:16:16:45:fc:da:70:29:b7:ca:
         58:97:d3:cd:d8:10:06:a1:77:a0:68:ec:3c:12:29:70:68:e6:
         6f:59:dd:73:ca:f7:a2:bc:91:1c:82:de:e7:7b:a8:2b:7f:a1:
         d7:bc:4f:b5:e0:88:e7:3b:13:f2:bc:d4:cd:6b:b8:e7:0e:5e:
         97:b7:76:42:11:cc:35:d1:12:01:8a:3d:d9:6f:06:d6:cf:59:
         ba:1e:86:0a:bd:ba:92:50:b1:a8:6f:ab:6e:fd:f1:00:ae:d2:
         68:e9:07:43:22:ec:33:b6:57:df:7b:c8:47:32:1c:d5:fc:e2:
         89:e7:11:ee:4c:a9:26:fc:fb:ed:83:69:b0:59:91:7f:60:d2:
         2b:36:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:18 2025 by rpki-client