Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          0ZtHZdrIggSY1N1nTn4uLgwkHTr++BDL05gwzDJC4Kk=
Subject key identifier:   B3:90:15:A9:48:D6:D0:BD:F7:EA:AA:87:DC:03:EE:41:6B:F2:FC:87
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1241
Signing time:             Fri 22 Aug 2025 17:19:27 +0000
Manifest this update:     Fri 22 Aug 2025 17:19:26 +0000
Manifest next update:     Fri 29 Aug 2025 17:19:26 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: 3Plq9XLj5HJGnmJiEzYppcPcDS3wjsDzBOpkvx3Q5Ig=)
                          2: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          3: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: es46bP4peX2odqPFusPLnzVYq4GkhaY4WJQy30cV3Cc=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: JTvl8U3RWCnUN10nfObiok3Mo+lFaXJW18PZyesoW7g=)
                          11: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: YrBzsx8D0fOvnrE97Y0I7HnqAFhQ8Lr/bVnUo+wscZA=)
                          12: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          13: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          14: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4946 (0x1352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 22 17:19:26 2025 GMT
            Not After : Aug 29 17:19:26 2025 GMT
        Subject: CN=68a8a69f-18f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:6a:3c:c1:7c:ff:ed:3d:c0:b6:93:a4:e7:
                    e6:72:7d:de:66:25:87:bf:0d:26:fb:42:68:97:dd:
                    23:31:c6:f6:c8:3a:c8:7b:58:3d:5d:51:49:b4:7e:
                    68:f0:5a:4c:10:89:ca:87:3c:b0:33:ce:69:61:a5:
                    55:27:1f:6a:aa:24:5a:08:7c:44:ab:9e:65:4a:7e:
                    a3:62:be:e3:c6:83:09:7c:fb:9a:34:3d:e6:6d:c0:
                    e8:f2:45:30:65:b4:36:30:1f:33:3d:21:61:ba:41:
                    c7:de:06:6d:47:2e:c8:9a:6f:cf:5b:90:c5:db:d2:
                    f1:22:0e:2b:78:4e:c6:51:88:64:64:ef:47:55:38:
                    5a:cd:cc:cd:f0:1f:55:b9:6a:c6:db:e7:76:00:f7:
                    14:46:fd:52:0d:7c:42:41:f0:71:fe:82:b2:38:69:
                    f7:91:58:a1:bf:34:9c:73:93:ab:8d:81:08:27:1f:
                    28:b2:6a:71:bf:c6:66:fe:d0:a1:6b:09:fd:74:60:
                    1d:52:d7:ed:ab:e9:0d:cc:de:f8:ea:56:d3:ce:b4:
                    e1:9f:ec:e7:34:bf:0a:7d:33:04:6e:dd:6a:79:15:
                    98:30:88:80:54:b0:ea:24:32:9d:84:fa:87:ff:c1:
                    29:ba:55:10:e9:33:ba:c6:54:4b:cc:9d:fe:cf:23:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:15:A9:48:D6:D0:BD:F7:EA:AA:87:DC:03:EE:41:6B:F2:FC:87
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:70:f5:46:40:b2:c0:1e:6b:22:d2:48:07:df:63:bb:ae:b0:
         7c:04:92:8f:76:e8:ad:4d:71:d6:54:db:58:ee:f5:a1:0a:30:
         c8:7d:65:f3:e0:50:1a:f4:0d:5f:3d:d4:02:7d:23:63:44:9f:
         1a:81:14:c1:82:74:65:5b:6c:08:ab:90:44:7f:75:20:c7:81:
         cc:ea:19:50:62:95:ed:25:80:4e:87:b3:b2:d1:ce:f8:71:b1:
         fa:b6:93:1e:8e:1c:3f:68:f8:88:bf:5d:f8:75:3a:6c:bf:60:
         4b:ef:80:3c:32:8e:3a:60:b4:4d:ec:86:49:57:79:b5:fb:30:
         39:39:e6:bf:e7:4f:75:1d:a4:97:bf:2c:92:47:85:d5:1e:3e:
         ac:00:67:d1:4c:c6:53:dc:35:9a:0a:30:92:8f:6c:13:f9:e4:
         f0:29:ed:b6:19:89:dd:8d:cf:cd:a3:16:c3:ee:2e:2d:c7:7b:
         c5:e9:c7:6d:77:e9:86:de:17:30:f7:b9:dc:8d:57:9d:f7:37:
         2f:8e:b9:5a:0c:3c:12:c3:b9:0d:eb:e5:79:ef:73:7d:07:78:
         5f:31:67:89:48:41:d4:29:d5:93:0c:e8:9a:8e:66:73:20:60:
         b5:0a:a6:3c:00:f0:1b:45:fa:14:ae:80:66:b8:4d:32:7c:0d:
         fd:d5:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:36 2025 by rpki-client