Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
File:                     WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json)
Hash identifier:          j73wEZWdiXmiickBFF6+Lc6+30zhA+18NoZdUdauTnA=
Subject key identifier:   D2:CE:9C:5A:F8:88:D5:E7:3E:2B:62:03:E3:AD:81:B5:9B:B7:E0:5F
Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6
Certificate issuer:       /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
Certificate serial:       0967
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
Manifest number:          0961
Signing time:             Fri 22 Aug 2025 20:17:21 +0000
Manifest this update:     Fri 22 Aug 2025 20:17:20 +0000
Manifest next update:     Fri 29 Aug 2025 20:17:20 +0000
Files and hashes:         1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: YIBIbmWMjFGIBTtpj9ibxn94TbNTwML+50I96O9XSC4=)
                          2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: lX+JZDDq3ZYyafGSIvld6YBtL+lupg7yLEB2CMhRXcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl
                          rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7CB, serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
        Validity
            Not Before: Aug 22 20:17:20 2025 GMT
            Not After : Aug 29 20:17:20 2025 GMT
        Subject: CN=68a8d050-b672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:4b:a4:11:8a:7e:29:43:9c:08:aa:90:8c:
                    c1:f3:e1:1c:e2:2b:6b:1d:6e:f0:3c:88:56:97:75:
                    8b:5e:6f:33:b5:c8:c1:95:d3:2f:04:aa:a2:20:a7:
                    ab:f0:af:26:82:c7:0a:ba:9a:58:66:2b:ef:3f:97:
                    6f:3d:1a:b2:2e:45:cc:8c:7f:d2:2f:4e:26:46:1f:
                    f3:9f:44:36:f7:00:d0:82:f8:2c:2f:4a:3e:ad:0c:
                    94:b8:cc:09:cb:15:f8:4c:f3:25:85:21:bb:dc:25:
                    38:42:90:1d:e5:bb:a1:af:00:d6:49:af:6c:63:92:
                    8e:70:bc:98:dd:e4:64:55:58:3d:b3:93:ea:14:3a:
                    72:3e:0c:52:fc:57:19:0f:2c:ac:64:a8:f9:63:03:
                    60:5b:a7:36:2c:ce:62:50:6e:93:22:42:55:3e:f2:
                    eb:b1:05:d8:2b:8a:a7:b0:b4:d2:b8:d4:ff:d6:c3:
                    36:50:f0:86:7d:85:bf:00:5b:9f:51:a0:b3:38:da:
                    b4:e6:be:e4:ba:69:83:33:f6:31:d0:03:16:1e:e4:
                    76:9b:4c:fb:57:6b:a6:67:e7:78:48:e1:d7:16:a2:
                    bc:f4:b3:9b:5b:d3:87:ee:6a:b0:d0:e9:2a:92:c1:
                    78:e4:75:3f:cb:55:64:db:c0:fc:41:fe:ec:4e:ad:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CE:9C:5A:F8:88:D5:E7:3E:2B:62:03:E3:AD:81:B5:9B:B7:E0:5F
            X509v3 Authority Key Identifier:
                keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:94:31:4c:5d:42:46:3e:9e:54:50:b9:be:79:a4:42:7a:
         57:29:e6:69:06:a7:2e:aa:dd:86:7e:b8:9a:f3:83:9d:59:08:
         ff:04:0e:92:10:37:f9:ef:3b:8c:4a:da:a2:2d:2f:35:40:86:
         71:57:98:6b:9d:03:03:ed:fd:4a:5f:2d:22:40:41:e8:74:5d:
         f2:6d:54:36:ec:5f:ab:01:bd:3f:7a:8d:76:f0:7b:30:aa:25:
         54:64:6f:7d:9a:b6:04:f6:78:b3:49:50:a4:6c:0a:f8:fb:af:
         5e:0b:44:2e:40:dd:81:3b:3e:fe:32:97:e1:c1:95:1b:20:ff:
         89:93:40:bd:93:be:8b:5c:c5:0d:63:c1:15:5b:dc:fb:c9:a0:
         17:5a:7f:ac:13:c9:67:8d:86:99:15:47:21:8c:1f:aa:c2:3c:
         48:d2:85:af:6c:ba:6e:59:5a:77:00:99:10:7b:06:f0:e1:17:
         b0:a4:36:93:80:62:ce:b5:27:9b:b4:77:ae:69:e5:54:a7:3e:
         bd:28:62:e8:d4:3e:ed:b9:5d:27:9c:ed:59:42:52:52:80:55:
         36:86:85:15:13:47:a2:05:82:19:1b:4c:d1:31:dd:e0:fe:dd:
         1e:84:b2:9c:79:36:28:44:0d:21:e3:d5:70:e5:6f:73:80:5c:
         b7:b7:64:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:10 2025 by rpki-client