Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
File:                     WFTG2IaugFcOzmJHTVQZnE6CnKs.mft (raw, json)
Hash identifier:          LB7VDNR1vBJbJMWYMh3QjGwRipV3hAbSS72+dSDA4Pc=
Subject key identifier:   95:CB:BB:7E:6A:16:90:8E:6B:AF:0E:5F:26:4C:A1:70:E2:50:0F:74
Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
Certificate issuer:       /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Certificate serial:       0692
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
Manifest number:          068C
Signing time:             Fri 22 Aug 2025 22:29:25 +0000
Manifest this update:     Fri 22 Aug 2025 22:29:24 +0000
Manifest next update:     Fri 29 Aug 2025 22:29:24 +0000
Files and hashes:         1: WFTG2IaugFcOzmJHTVQZnE6CnKs.crl (hash: WQnV+V4c6Bt7Q32KwFD1Sm3K0oK1USAs5ZYhUdRmvXk=)
                          2: 5F38A4F082D611EB802C1A55C4F9AE02.roa (hash: 2g+AtJOcqM3v8sCGPb20uEjt/EFg/UdlgUuuLVPXSl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
                          rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110AD1, serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
        Validity
            Not Before: Aug 22 22:29:24 2025 GMT
            Not After : Aug 29 22:29:24 2025 GMT
        Subject: CN=68a8ef45-a34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:c3:68:25:fe:f4:d3:ce:f3:7a:40:c4:7e:
                    74:98:6b:69:7b:ba:a2:11:4f:91:28:ec:b8:4b:c2:
                    0b:ff:a0:69:83:ec:23:8b:3d:c2:71:9e:6e:7e:ca:
                    ef:52:8a:04:32:60:4c:5d:75:62:83:f4:1b:d6:83:
                    0d:69:b3:da:31:70:a1:16:98:0d:a0:a0:85:33:f9:
                    82:d6:27:c7:42:aa:5d:ec:fa:24:56:e5:0e:62:a6:
                    0d:70:72:15:b9:d1:e0:f5:74:c5:72:19:87:10:6b:
                    d8:e4:84:1a:d1:bc:e3:a8:39:d7:3b:6e:f8:02:93:
                    3a:d0:1a:10:63:a2:1c:54:b6:83:97:5f:de:d6:b9:
                    0d:ae:c4:e4:f1:42:03:54:6e:17:30:f3:43:93:39:
                    5d:ab:b4:1b:16:66:b3:3f:ea:af:e0:fc:79:c0:0a:
                    80:e8:ed:b4:a1:c4:a8:b6:95:0e:0e:ec:5b:a4:5e:
                    25:35:8a:7b:41:4a:b3:3e:a2:5b:a7:ab:f8:7c:de:
                    62:af:42:8c:56:1d:e1:bc:a9:c1:e8:c3:e9:99:a8:
                    89:41:11:37:88:6a:24:ba:40:d8:49:2e:d7:85:e6:
                    95:79:28:e1:36:13:6c:26:e7:8f:e2:02:3b:97:90:
                    f9:5c:f6:bd:aa:a4:62:cb:bc:1b:6f:45:0d:d0:41:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:BB:7E:6A:16:90:8E:6B:AF:0E:5F:26:4C:A1:70:E2:50:0F:74
            X509v3 Authority Key Identifier:
                keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0c:8d:86:4d:1d:51:cc:ed:7b:73:55:04:66:b3:f9:ae:76:
         d7:da:29:83:eb:ad:03:c4:1a:fc:a9:fc:68:91:96:3d:94:38:
         c8:4c:56:4c:3b:c2:5a:c3:83:8d:26:73:0c:16:6b:d7:4e:b7:
         43:66:8f:5f:c0:0a:ad:cc:92:bb:b5:52:33:41:7a:1a:71:99:
         cb:95:9f:59:e7:ec:f3:10:5d:26:27:fa:ed:84:f4:14:47:d7:
         2c:fe:68:9d:f3:4c:36:64:93:33:17:2c:7e:3d:59:a9:d7:8a:
         0d:1d:64:1c:2e:bd:d8:c5:2d:32:2a:af:7b:be:8b:b8:35:a0:
         04:6b:be:29:b9:91:da:2d:53:f8:50:ca:ac:5f:16:e8:02:70:
         17:db:7e:ee:3e:4c:a0:a5:6b:f3:56:f9:30:ea:ba:2f:a8:ba:
         07:7c:62:cc:f3:c1:34:36:e0:4f:df:b2:2f:33:c0:98:19:fd:
         cb:58:e7:64:df:4a:a7:04:98:32:91:b6:cb:17:7e:f8:f1:10:
         bd:55:44:2a:ae:81:05:27:b2:e6:1a:28:9c:8c:3f:b0:2a:0e:
         97:ea:ed:ec:b7:c9:a5:bc:20:04:37:6d:14:c2:92:fe:fa:20:
         54:74:90:1d:d3:71:49:ee:c1:d6:dc:9b:7e:dd:e4:6d:04:76:
         aa:83:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:57 2025 by rpki-client