Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
File:                     wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json)
Hash identifier:          y4KqBhVFNhL1Gx+2stm+r05ILeD/n/aliCU6N75QLII=
Subject key identifier:   48:20:04:75:95:28:42:7B:5A:EF:F6:87:C3:2D:BC:CD:5D:7F:C7:8B
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       04F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
Manifest number:          04E7
Signing time:             Fri 22 Aug 2025 23:56:48 +0000
Manifest this update:     Fri 22 Aug 2025 23:56:47 +0000
Manifest next update:     Fri 29 Aug 2025 23:56:47 +0000
Files and hashes:         1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: lD0271AjI3nsDiQz+I+bQ5fKSAAIqrYzKV6qB46V3c0=)
                          2: 20B772FA7F4411F0B804E363C4F9AE02.roa (hash: THjHA4guYY5uJuJ175z9tOk8R5b9GNGyznT6U7OeFNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Aug 22 23:56:47 2025 GMT
            Not After : Aug 29 23:56:47 2025 GMT
        Subject: CN=68a903bf-7659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:00:c9:ca:4a:d5:ef:ab:02:5f:79:88:62:
                    1d:d8:78:01:af:9e:b8:4b:93:e6:c4:6c:0a:2e:c2:
                    99:b1:eb:d4:a0:b7:ba:4f:ae:aa:e3:84:9a:a6:0c:
                    a2:c6:8f:eb:e8:8c:85:4a:df:60:df:12:85:d5:1e:
                    dc:34:d5:92:f8:a9:f9:a8:3e:fe:87:96:51:4f:da:
                    e0:7e:be:c5:26:ec:51:47:78:9e:35:12:25:d0:b6:
                    5a:f4:c9:99:a7:62:0a:56:94:c3:d4:b5:ed:82:b4:
                    17:bb:ed:f1:a3:12:a5:e0:19:b1:e0:bf:be:fc:66:
                    6f:99:23:6e:53:7f:ab:1c:58:ff:a5:46:a4:85:e6:
                    cc:ea:c2:37:f1:00:51:3d:58:83:db:e1:cf:44:c7:
                    cc:3c:4e:e9:b3:81:9a:5d:99:4f:99:f2:12:af:77:
                    c3:e2:81:4a:15:29:ce:20:c0:fe:d5:73:58:f1:98:
                    42:47:30:bf:ac:fb:f3:d3:47:8b:bd:94:28:4f:52:
                    3a:96:d6:90:60:bc:13:25:de:35:fa:fe:8b:85:88:
                    3e:25:ab:70:4b:68:dd:01:36:86:67:bf:da:85:d1:
                    91:4e:50:0b:22:5e:97:ed:9a:18:4f:89:0b:c0:10:
                    02:2d:3b:c6:46:a2:cd:d4:cb:35:5c:b1:8b:1a:1b:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:20:04:75:95:28:42:7B:5A:EF:F6:87:C3:2D:BC:CD:5D:7F:C7:8B
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f1:c6:de:c7:a0:77:68:cf:1c:54:4e:7c:c6:86:e4:4f:72:
         94:1a:26:0b:1e:3f:69:28:57:d4:9a:06:60:d9:62:27:ee:a5:
         b1:b9:88:49:51:6d:8b:92:fd:9c:8e:ea:8e:fb:dc:b9:a6:e9:
         8d:24:e1:09:07:2b:10:7e:4d:f0:9d:f8:4f:1d:f7:1c:72:7e:
         0c:67:33:dc:e1:14:39:1d:61:f8:25:1e:dc:95:5b:0c:34:e6:
         41:5b:2c:5b:21:59:40:07:69:8a:fd:da:aa:3a:bf:38:e2:3e:
         7d:44:06:f6:17:e5:62:77:00:5d:40:a5:4a:41:f0:61:91:6d:
         07:3b:ca:d3:fb:fe:30:68:d8:67:3e:f9:04:98:87:17:e1:be:
         8f:e9:e9:a6:47:42:2d:42:8f:7a:2f:e8:40:c4:f5:7d:48:2a:
         ec:d7:c2:b3:80:7d:3b:4d:9b:87:f3:c8:0c:24:83:2c:07:5b:
         d3:da:34:7c:61:13:d9:5c:9c:55:ea:42:50:cc:90:87:96:d7:
         57:f3:16:8a:4f:84:c9:0f:31:f8:5d:b2:e2:e6:50:3c:1f:e4:
         54:e4:0c:2f:a9:a4:a9:90:4f:93:44:ac:7f:41:25:23:16:e0:
         95:d6:33:cb:71:15:43:5f:ff:60:c0:40:bd:d1:1c:40:89:d2:
         de:42:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:43 2025 by rpki-client