Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File:                     WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier:          ysCLZIoDBQmB5Ns5ZQfYl1DJ8fq1/++zlDomLqKXX/g=
Subject key identifier:   C1:61:19:E5:3D:D4:4E:D3:CD:25:61:F3:AE:B1:13:FC:13:52:CC:AD
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number:          0459
Signing time:             Thu 03 Jul 2025 00:30:17 +0000
Manifest this update:     Thu 03 Jul 2025 00:30:17 +0000
Manifest next update:     Thu 10 Jul 2025 00:30:17 +0000
Files and hashes:         1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: l3QfGFMlt6Ahvt9+3kexxcAITYluYulqR/PVyCOrmkc=)
                          2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Jul  3 00:30:17 2025 GMT
            Not After : Jul 10 00:30:17 2025 GMT
        Subject: CN=6865cf19-2d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:00:b3:34:2d:2f:7a:79:1a:fb:83:d3:8c:
                    6f:e4:e3:15:c0:1d:62:bb:c8:56:b3:06:f1:96:10:
                    54:78:ea:fa:80:a3:26:27:c0:4f:81:b6:bd:93:bf:
                    02:2b:f6:05:ed:19:cc:8e:ee:c6:4f:65:c7:ce:98:
                    c9:8c:78:32:2e:ce:3f:a5:eb:45:04:51:96:8d:27:
                    6a:1d:93:b6:da:31:93:a8:54:11:a6:30:bc:2a:89:
                    cb:f6:87:4f:62:e0:5d:3d:3a:89:5f:d4:3b:3d:03:
                    d7:9e:a7:fe:1d:5d:6a:c5:e3:fb:59:44:09:85:57:
                    30:af:a7:38:55:53:e4:8a:6c:65:ab:d4:0a:c6:19:
                    48:3c:dc:9f:b3:ef:b7:42:a3:bc:1a:02:bf:61:6b:
                    15:b8:50:c0:46:c0:51:3d:8b:c6:e3:42:8c:d6:12:
                    71:89:e5:40:e7:1e:dd:da:aa:38:83:7e:d0:2d:7f:
                    cc:1f:dd:16:87:21:d0:4c:b3:c9:9c:bf:c8:42:ee:
                    c9:a0:c4:1b:b6:73:01:84:6f:9a:d4:4e:2a:8d:c3:
                    a3:79:48:72:86:3d:28:98:cd:22:27:91:75:65:14:
                    c1:e3:c8:a8:99:5c:37:ee:2f:4c:35:1c:b4:31:45:
                    16:45:46:b1:92:36:d3:0e:42:16:48:f3:52:31:cc:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:19:E5:3D:D4:4E:D3:CD:25:61:F3:AE:B1:13:FC:13:52:CC:AD
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:c6:a4:57:6d:4f:17:38:5b:6f:3b:67:bb:67:c6:a0:9f:
         6d:10:10:0e:5a:40:8a:13:45:03:c7:0b:08:bf:a1:6b:fd:a6:
         26:0d:92:e3:ce:34:3a:a6:b5:b0:aa:cc:a3:75:e3:c1:ef:e5:
         c4:6d:1a:83:9f:e6:40:e4:3a:11:5c:57:96:5c:f2:1c:68:c4:
         5f:1c:66:5a:0b:00:f5:dd:93:87:4e:fb:d9:4a:54:71:32:e9:
         60:e0:b6:fd:fc:14:3f:a9:25:09:37:e1:6d:b4:b5:9a:1d:37:
         f3:c1:98:23:e9:17:83:bc:50:72:6f:d3:bd:0a:61:c4:cb:ca:
         b5:7f:0d:32:14:7b:9d:db:2a:16:0b:7a:9a:08:02:6d:bc:7b:
         64:93:0e:9f:e4:73:6d:5a:77:46:6e:f3:cc:8f:6f:89:3d:ed:
         39:1d:91:e5:09:33:e4:d1:2f:d8:77:b2:e0:b8:1c:dc:4f:5c:
         fb:17:fd:5d:ba:34:c1:0e:95:d5:a1:61:63:3c:9c:b3:7e:e4:
         00:19:4d:3d:78:17:de:be:b1:f5:49:4d:ca:d2:4f:8e:1e:ef:
         e1:32:74:4c:aa:98:84:2d:9e:0e:4a:e4:93:8d:b9:a2:8a:fb:
         2a:a8:0d:2c:45:34:e4:0b:60:be:f1:41:1f:58:e2:dc:09:bd:
         5b:13:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:47:32 2025 by rpki-client