Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft
File:                     wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json)
Hash identifier:          Xy+C5JL1VaZYH9dv+0nh0IxLg2H8AJFLmjpsy98P5MI=
Subject key identifier:   2F:0A:0B:4A:54:4F:AC:32:23:7D:FB:97:5A:D1:DA:95:3D:05:0E:5A
Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7
Certificate issuer:       /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft
Manifest number:          DD
Signing time:             Sun 27 Apr 2025 04:23:55 +0000
Manifest this update:     Sun 27 Apr 2025 04:23:54 +0000
Manifest next update:     Sun 04 May 2025 04:23:54 +0000
Files and hashes:         1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: A3mXE53x7sP2pTcorzSH+8OPpDwiRAcNU7Or079qdqI=)
                          2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 04:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B2B, serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7
        Validity
            Not Before: Apr 27 04:23:54 2025 GMT
            Not After : May  4 04:23:54 2025 GMT
        Subject: CN=680db15a-f2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:b4:f0:fb:f9:f1:39:2f:22:7c:e4:bc:7a:
                    df:7e:f1:40:ec:76:0c:ff:23:9c:ba:47:d9:23:93:
                    34:0b:97:a3:20:12:a5:5c:94:5d:f1:8f:06:a3:2a:
                    ea:c9:b6:82:f1:35:44:58:4c:d4:e0:b1:05:87:ab:
                    fe:5b:4d:c7:04:8b:e0:f6:79:c2:d6:e2:01:3c:38:
                    5f:b0:05:65:e6:19:e0:a9:e6:5d:d9:a8:8e:c4:93:
                    fa:09:9d:0e:46:0e:77:43:57:30:cf:b6:11:18:31:
                    65:58:ea:1a:f1:e5:96:2e:39:84:20:a6:f0:69:46:
                    54:35:d2:6f:88:4f:55:2d:9e:43:71:bc:03:cd:65:
                    58:79:16:9b:39:e2:e7:fe:57:2f:c0:37:c2:4b:e5:
                    cd:dd:a5:8f:fd:e2:4e:43:47:06:73:b6:19:97:77:
                    62:a9:cd:57:73:c4:61:13:dc:ac:7f:33:a1:4f:c7:
                    63:01:22:ec:b4:1b:02:7e:e8:f1:2b:ae:43:98:f2:
                    73:eb:87:0f:13:ac:90:56:b3:8d:c1:80:ff:d8:64:
                    f2:21:65:dd:78:28:d0:ce:da:7a:c3:72:35:c8:4d:
                    00:6e:f0:dd:9c:1d:2f:6e:41:2a:59:e0:97:51:a2:
                    37:eb:21:c6:ef:25:5b:19:5c:93:e9:c4:4b:e7:77:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:0B:4A:54:4F:AC:32:23:7D:FB:97:5A:D1:DA:95:3D:05:0E:5A
            X509v3 Authority Key Identifier:
                keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:c6:2d:64:8d:46:ef:56:fb:81:ee:c1:56:90:f1:e4:12:
         cd:9a:32:0b:b6:a3:ef:4d:ef:55:6a:a8:e8:a2:2b:b4:80:47:
         fa:b6:d4:61:c4:0b:6e:5b:59:34:55:ec:89:c4:dd:26:20:06:
         5c:12:da:19:5e:d7:61:f8:0a:12:a6:1e:a2:8e:c3:0e:61:57:
         cb:08:1b:9c:b2:3d:ca:cb:f2:20:14:05:c8:f0:09:21:4b:95:
         81:ea:ee:82:1f:b3:9f:1f:1f:95:60:f6:88:f0:cd:3d:17:97:
         7e:2f:51:13:c2:e9:74:3c:d9:f9:1f:8b:cf:38:4f:ba:12:75:
         c3:5f:42:db:57:f9:85:aa:03:82:4e:40:62:31:88:96:d5:19:
         d6:14:c0:e5:40:d1:3a:07:31:6f:1a:d1:a6:c9:97:98:1c:40:
         2c:c0:7b:73:a3:7d:c4:aa:5f:7a:ef:14:61:80:a7:c9:ca:8e:
         4c:96:ae:e7:fa:88:75:98:81:bb:1d:89:32:31:cc:ff:be:08:
         cd:78:5b:35:90:11:b7:9b:1d:d9:9a:28:05:82:6b:61:04:73:
         8d:21:3d:13:cb:0a:f5:7f:85:7f:7f:2a:87:27:8f:ad:65:52:
         47:70:3a:bf:98:59:9b:68:13:56:bb:01:4e:e9:0b:ed:d5:78:
         ea:dc:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:39:40 2025 by rpki-client