Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          tyWeYBu8VNEO0Va/nBuwJFy4KxJ4xljJ2UkoboQjKKY=
Subject key identifier:   07:A0:C7:D8:0B:26:8D:75:6E:0C:7B:15:D6:86:9C:14:6F:BA:EE:C4
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          0975
Signing time:             Fri 22 Aug 2025 20:37:16 +0000
Manifest this update:     Fri 22 Aug 2025 20:37:15 +0000
Manifest next update:     Fri 29 Aug 2025 20:37:15 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: oHV7r3hnxqSitXZzdgm1i+ZSPNDwD4KOBbNB02chbLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: Aug 22 20:37:15 2025 GMT
            Not After : Aug 29 20:37:15 2025 GMT
        Subject: CN=68a8d4fb-970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:20:46:0f:cb:ea:a2:5d:e0:cf:47:88:12:
                    0e:e5:f0:15:0c:3f:20:73:99:f6:f0:1c:8e:9e:57:
                    17:31:d4:17:2a:d6:78:75:b1:bf:b6:c8:a3:41:2b:
                    70:08:91:68:8d:22:84:ee:89:e2:10:10:d2:51:ec:
                    aa:f5:09:16:fe:cf:99:25:e8:14:26:1b:4e:1c:cc:
                    b1:70:6f:5c:d7:a6:2d:60:36:1f:b2:1b:63:7b:e8:
                    bc:6e:a7:8f:bb:2e:fb:c1:22:00:f5:f2:77:5e:a5:
                    27:ef:e2:52:42:6f:55:44:7a:35:5d:0e:a1:c9:5e:
                    50:2f:c7:02:c1:f2:cb:ef:6d:8f:32:f9:a5:f7:af:
                    64:e7:f7:28:a6:4f:2a:2d:ae:33:a8:a4:0b:6a:17:
                    61:7e:03:2e:94:bb:70:97:d5:ce:da:d0:4a:31:18:
                    ae:2d:8e:25:fb:a8:43:18:a3:f0:31:f7:c9:a4:0a:
                    52:43:aa:6e:49:30:8e:18:e0:a7:4b:c0:d3:6e:32:
                    5a:a2:85:9e:b1:f3:bf:72:0e:2a:19:01:fe:81:67:
                    80:19:d4:b1:d2:5b:d4:88:07:f9:1a:a8:dd:61:9f:
                    94:11:5e:bf:12:eb:51:8a:e1:37:d9:42:3e:00:80:
                    4c:15:34:94:d9:e7:bf:95:32:7f:ed:e6:00:c8:4c:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A0:C7:D8:0B:26:8D:75:6E:0C:7B:15:D6:86:9C:14:6F:BA:EE:C4
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e6:c9:8c:18:b5:8e:e7:a4:4d:02:87:08:3d:07:a0:5e:f2:
         f9:de:52:d4:c7:cc:9b:b9:0c:dc:96:46:48:14:cc:57:12:0b:
         8e:fa:e5:da:e9:f5:bd:1c:a7:6b:90:35:d5:fd:ee:e7:06:7a:
         c0:f4:19:8c:af:62:01:f2:a4:0f:4d:45:71:db:db:63:c3:9f:
         fd:b0:be:97:be:a7:49:8d:9b:39:a3:d4:b5:dd:cc:f4:1f:20:
         d2:80:38:ee:53:c7:37:7f:0c:92:f4:79:1c:17:0e:f8:1a:85:
         de:84:7a:d0:b1:9d:35:51:02:ea:48:f3:29:2e:58:15:f2:bd:
         00:6b:c8:f8:7f:ae:49:ef:e6:ff:8d:8d:e0:5f:20:7a:06:6a:
         e8:12:a4:34:a7:68:b1:e0:3d:b8:43:00:72:4b:be:83:88:99:
         e0:32:ba:99:4a:6b:a7:c2:f3:b1:00:68:f0:58:e2:bb:81:c2:
         61:b6:f9:d5:0b:fa:b8:1b:11:43:89:75:f4:f8:e3:b8:15:98:
         80:9b:fa:41:f1:8c:08:10:27:e4:48:80:a2:99:63:b4:85:5f:
         6f:73:86:be:ee:37:0e:3d:e9:de:ed:6f:0a:d0:e2:ff:89:40:
         fb:28:0f:2e:81:48:c1:cb:7b:a8:b4:66:dd:b4:41:af:62:4d:
         c2:a7:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:11 2025 by rpki-client