Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          +EtDJh02C4lmJo1DftXtg2KlBUS1jW1zs3ccmFp/lFI=
Subject key identifier:   F7:04:7B:F8:C5:D4:A8:7F:0E:39:5B:72:38:F3:7B:3F:ED:F2:CB:C2
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          8A
Signing time:             Sat 23 Aug 2025 06:48:55 +0000
Manifest this update:     Sat 23 Aug 2025 06:48:55 +0000
Manifest next update:     Sat 30 Aug 2025 06:48:55 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 8IWFN+atS62JC26QV8v0sxv5f4nyKNbNA/O8iaKlOhc=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Aug 23 06:48:55 2025 GMT
            Not After : Aug 30 06:48:55 2025 GMT
        Subject: CN=68a96457-a6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:67:1c:09:d5:79:88:09:9a:f8:a3:63:53:
                    b1:15:a2:29:cf:54:20:bd:0a:64:3c:a6:0a:f8:17:
                    3e:b0:f2:e7:82:9a:d8:fb:db:86:09:c5:f6:2c:f8:
                    af:b9:5b:7d:49:29:e8:a6:8f:dd:23:84:68:76:41:
                    e0:69:9d:fc:ac:0a:af:75:3a:50:ca:95:a2:40:67:
                    98:48:cf:15:3b:d6:cb:fc:8a:ba:70:40:1e:ef:db:
                    81:09:f8:50:45:7a:96:c3:f3:e8:9b:b6:03:c1:ef:
                    50:dc:50:59:a7:54:40:9d:03:7a:c7:f7:95:bd:d9:
                    66:83:49:47:21:21:43:b5:c6:67:60:37:e3:10:ad:
                    34:96:54:87:1f:a4:5f:45:83:3b:44:03:6a:25:af:
                    39:c9:69:07:92:8d:09:53:fc:d0:28:b8:d7:e2:de:
                    f4:e6:8b:ef:c7:1d:5d:55:52:27:8c:d1:99:fa:45:
                    82:86:ff:44:c8:46:05:b5:0b:89:02:67:ec:39:8d:
                    6d:01:e1:66:b0:c9:ab:5f:c2:d5:eb:2e:1c:30:45:
                    4a:b1:cd:36:c1:c0:e1:66:fb:fd:30:2a:36:4c:c5:
                    61:aa:6f:9b:8b:fe:c0:d0:39:fb:0c:6c:89:5d:d1:
                    e1:5c:47:fc:42:97:ad:0c:db:7d:3c:65:b0:f7:f9:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:04:7B:F8:C5:D4:A8:7F:0E:39:5B:72:38:F3:7B:3F:ED:F2:CB:C2
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:58:02:cb:8f:8c:24:ed:66:ff:e1:54:4b:4a:f5:0b:29:b9:
         d1:37:31:52:08:f2:3c:19:61:48:51:2b:31:8f:19:c6:a7:6e:
         ed:f2:06:13:09:e5:c4:34:64:fb:af:0c:07:91:ff:d8:96:61:
         31:0c:99:cc:cd:e0:30:96:92:aa:71:77:33:d8:96:3c:12:0e:
         77:8a:27:8f:03:b9:cb:40:1a:83:e7:51:9a:6c:32:e9:1e:f8:
         84:dc:74:78:eb:07:ef:89:2b:17:0a:c6:4b:d4:62:40:16:50:
         8b:4f:0b:54:72:09:ac:73:34:9b:57:3c:a1:c6:a3:8c:b2:69:
         2b:6e:cf:e6:eb:05:88:f0:b7:a0:2b:3d:f3:ba:69:00:3e:82:
         6f:34:3d:8d:e7:45:63:94:27:d8:52:40:db:84:bc:2b:b4:38:
         43:be:41:af:f9:9e:28:aa:11:ee:c6:86:a7:87:61:d1:a8:11:
         56:95:6b:c4:68:2c:a4:e2:50:cb:c4:27:0e:16:68:72:0c:1c:
         7b:5f:94:ec:ca:e9:6f:f1:6f:0d:21:5c:86:05:0c:1f:3c:a1:
         1b:0d:eb:27:99:d7:fc:92:23:c0:7b:77:cc:c9:c8:cb:90:39:
         56:83:c5:be:44:c9:88:f3:f0:28:0c:31:26:9a:42:25:f2:c7:
         1f:83:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:13 2025 by rpki-client