Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File:                     wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier:          phJwlB+mjBHNBp7UwYgeepXgMiUAon9tpvkyzksCBs8=
Subject key identifier:   72:C3:64:42:08:0D:08:70:4F:57:31:B7:C8:6A:79:34:7D:D6:02:D0
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer:       /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number:          0A3F
Signing time:             Thu 24 Apr 2025 19:37:50 +0000
Manifest this update:     Thu 24 Apr 2025 19:37:50 +0000
Manifest next update:     Thu 01 May 2025 19:37:50 +0000
Files and hashes:         1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: x3RLqAeY8hPkbIjHxP+4xPIT7St1PcGafyjo9T4hie4=)
                          2: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: bbsqzdWTrHCUcjDQ3qFOyBjJItBXTD8UAHJWnxMcjUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
                          rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
        Validity
            Not Before: Apr 24 19:37:50 2025 GMT
            Not After : May  1 19:37:50 2025 GMT
        Subject: CN=680a930e-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:f5:2a:30:8d:7b:f8:32:2f:12:f0:f8:f3:
                    a3:c2:bf:f1:8f:5b:0d:b6:66:0f:ee:37:14:83:55:
                    59:11:14:e0:e0:98:62:6d:0b:77:4e:e8:16:6e:c0:
                    a3:49:5d:8e:61:c0:2e:d1:9a:1f:15:e0:d1:6b:e1:
                    70:1d:aa:44:8d:57:a9:60:24:8a:ad:37:10:5c:4e:
                    52:26:a1:6e:d7:a1:94:4f:4e:bf:82:e7:f6:40:a9:
                    80:2f:7c:64:c7:97:6f:78:f7:5b:fa:69:d6:3c:7b:
                    7e:3f:5f:9a:94:61:71:39:23:1b:8d:76:a7:37:ab:
                    8f:42:ba:26:a5:f1:aa:7a:69:1e:f0:b5:d2:d8:bc:
                    a8:ed:dd:a4:44:b2:ad:74:f0:15:ab:5b:09:02:58:
                    c0:df:9f:17:ab:dd:d5:12:c3:7d:c8:d2:d5:ae:44:
                    09:99:94:c2:1b:8a:86:57:5d:25:70:a4:06:5d:2d:
                    e1:63:88:9e:9a:d0:dd:97:57:3e:ab:e7:09:67:b2:
                    11:1c:46:17:c3:c0:ad:fc:7c:21:7d:32:f2:d7:c1:
                    0e:10:e0:f7:d5:da:39:30:ff:28:29:5a:57:49:87:
                    b4:9e:61:54:09:4b:25:75:24:08:2e:72:fd:06:d4:
                    dc:46:07:2b:92:79:96:22:07:ce:34:8e:c9:6c:7e:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:64:42:08:0D:08:70:4F:57:31:B7:C8:6A:79:34:7D:D6:02:D0
            X509v3 Authority Key Identifier:
                keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:29:90:cd:94:58:f4:67:46:5a:77:e7:4e:69:44:a2:ce:f4:
         d0:7c:5d:84:21:2a:fc:9a:1e:71:d0:2a:44:ae:95:d3:42:a5:
         f7:a0:e3:3f:45:de:aa:e3:14:7a:6f:72:fe:24:96:bd:87:40:
         6d:b8:fe:df:ba:1b:27:3f:ce:9f:c4:e6:22:b4:0d:88:98:c5:
         53:9d:b5:88:b6:93:b5:9d:a4:44:f2:3d:b7:ea:2e:9f:cc:27:
         fa:5f:2c:a4:10:20:fd:86:eb:df:58:2e:78:b0:ed:3b:2a:6d:
         ea:fe:ee:7c:ad:f9:f2:d4:3f:5e:74:ca:b0:e3:9a:b1:a3:8b:
         0a:7e:7b:22:6a:f0:cf:6f:33:ae:07:15:25:0f:e3:4c:62:cd:
         65:6a:05:9a:95:6d:2c:36:4a:b0:e2:62:6a:5d:b5:bd:14:63:
         d0:0b:50:ab:03:33:2b:64:06:8c:02:c5:6d:c0:23:ec:6b:67:
         f1:ed:16:eb:6b:72:80:3d:0e:e8:63:2e:b6:16:44:07:ff:b9:
         01:6e:b3:d8:be:66:e8:43:04:ee:c0:7b:89:f4:04:a6:4c:a1:
         f0:e4:13:c4:dd:88:3b:1e:9d:74:e5:ec:91:0b:54:9c:e9:b0:
         f6:9e:95:a4:1e:47:79:ef:87:e3:d1:8b:c2:48:a6:19:1d:33:
         33:1f:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:38 2025 by rpki-client