Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
File:                     WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json)
Hash identifier:          FjLFsQ+Kw4uzxjYAtyNIdv09lIHJGDEw8JQpLomvwjA=
Subject key identifier:   85:DB:0F:DA:EE:06:0D:52:1A:B7:C6:BB:6A:7F:D3:CA:56:94:26:3E
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Certificate issuer:       /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
Manifest number:          03E5
Signing time:             Sun 29 Jun 2025 00:53:15 +0000
Manifest this update:     Sun 29 Jun 2025 00:53:15 +0000
Manifest next update:     Sun 06 Jul 2025 00:53:15 +0000
Files and hashes:         1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: 5VQcb8sRdsmNGtBdDuwiDFtsplTkV7P+j0MWPN6ACxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
                          rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 00:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
        Validity
            Not Before: Jun 29 00:53:15 2025 GMT
            Not After : Jul  6 00:53:15 2025 GMT
        Subject: CN=68608e7b-f79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:23:91:af:59:2f:92:49:20:1d:9a:f8:ad:
                    6b:dc:b8:f6:1c:a5:a9:8a:55:de:e7:c2:39:66:b6:
                    1a:02:58:d1:25:f1:da:a7:01:18:a4:da:ae:7e:90:
                    dc:e0:32:8e:50:60:43:b2:76:f6:9e:2a:b7:33:c1:
                    4f:46:5d:66:99:0f:9d:dd:94:c8:10:ec:a8:e7:d5:
                    2b:65:1b:62:45:3a:c4:6f:ad:69:55:32:a6:1e:f6:
                    86:1c:8f:50:c4:7e:39:7e:ce:7b:20:9c:62:f6:9d:
                    84:72:c6:c3:1d:78:6d:88:0f:e4:d9:a0:ae:c0:d3:
                    8f:da:14:f6:4d:30:3e:2c:b6:43:7c:8a:3e:1a:0b:
                    63:e0:f9:44:b4:36:8c:de:01:a1:bb:0b:8c:5a:c0:
                    ef:60:b1:73:76:63:f5:f1:fb:71:2c:88:19:06:87:
                    8a:36:e3:69:4d:2b:5b:e7:46:f6:1d:1f:57:36:1c:
                    73:30:92:0f:c5:34:2b:46:09:f1:e0:46:34:37:a7:
                    bb:db:bd:8a:8d:6c:5a:2a:0d:db:08:6d:a4:51:b0:
                    38:9c:e9:1b:5f:52:ba:c6:9a:27:e5:9a:6d:65:16:
                    bc:5e:17:2d:98:0d:3e:e1:e3:d4:d2:e5:15:97:ad:
                    8b:69:a5:6b:07:01:fc:86:e4:47:33:e0:14:9e:31:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:0F:DA:EE:06:0D:52:1A:B7:C6:BB:6A:7F:D3:CA:56:94:26:3E
            X509v3 Authority Key Identifier:
                keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:68:51:d0:24:16:e9:94:43:95:23:f7:cd:47:71:0b:27:
         69:63:46:61:dd:5a:92:99:73:40:9b:c7:2c:0f:cd:02:f6:7f:
         7c:f3:b4:00:6e:6b:ae:73:14:dd:92:df:74:96:29:f7:30:af:
         a0:0b:e0:bc:af:a9:0d:4e:88:9c:1a:33:e4:58:3b:7b:cd:49:
         2d:4c:9c:6d:78:1a:5a:2e:54:f9:90:ff:47:aa:4b:76:df:53:
         11:4b:7a:31:e5:c2:3a:ef:61:32:4a:e7:9e:63:b9:a8:10:83:
         00:b5:19:09:0d:cb:86:8f:4c:04:ed:bf:64:42:42:cb:78:df:
         6b:9c:9b:b2:68:69:c5:3f:56:a9:fa:05:67:96:12:0d:a0:f2:
         e9:19:f1:17:82:63:38:34:9b:09:21:8f:4f:c3:58:bc:f9:11:
         2a:b5:c9:17:36:67:9c:be:aa:b3:a2:c2:76:10:84:29:fc:c5:
         71:3e:a4:e9:23:1d:66:93:ca:40:68:27:a1:2b:67:27:94:ba:
         c6:4b:5a:ff:9f:0d:6c:77:35:0b:2b:9f:e6:07:36:18:7f:d4:
         21:c8:3d:31:a8:af:d1:a6:11:76:1c:47:4d:3e:3c:79:01:4b:
         da:51:38:b0:62:24:fc:47:d1:75:5a:3a:ae:81:9f:ce:75:60:
         5f:0d:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:48:29 2025 by rpki-client