Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          tChX80OTTuWhyYoH/JoIqIm59m52SXRGZ1RK68M9omQ=
Subject key identifier:   11:36:9D:1A:2A:BD:EE:3D:FF:62:21:37:34:EC:97:58:5C:79:DF:40
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          77
Signing time:             Thu 03 Jul 2025 07:00:44 +0000
Manifest this update:     Thu 03 Jul 2025 07:00:44 +0000
Manifest next update:     Thu 10 Jul 2025 07:00:44 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: sdI7RfFKfmlpBUzjOLcAkWHgELhec2dm+tdK+mIKumA=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Jul  3 07:00:44 2025 GMT
            Not After : Jul 10 07:00:44 2025 GMT
        Subject: CN=68662a9c-4121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:f5:de:66:50:c9:e9:d2:c7:3b:2f:ef:c7:
                    87:87:40:37:6e:a6:c8:9a:86:2d:18:5f:8f:b3:df:
                    06:72:34:0e:8f:fc:2a:bd:84:97:6d:92:c7:2a:eb:
                    62:61:bd:aa:3d:f3:06:74:70:0d:8a:e5:06:cd:dd:
                    e8:8b:af:f2:1e:fb:39:b7:9f:3b:49:ef:fd:6b:77:
                    35:8c:ef:00:9c:0c:b4:a0:e1:bd:1d:bb:e1:ed:cc:
                    18:f5:dc:e6:3b:1d:79:92:3e:c4:ee:71:c6:ba:3b:
                    bd:9b:76:34:d2:eb:37:a4:3f:73:8b:19:cb:e1:f9:
                    88:15:fe:f1:87:79:3a:11:15:31:51:2d:6e:24:71:
                    14:42:2e:59:c2:55:32:e8:84:75:9e:6c:aa:fc:bc:
                    05:b2:a0:b1:14:e9:ae:46:25:a3:b0:96:23:16:e1:
                    cf:71:5c:a2:9f:c1:f9:88:73:e7:e3:64:45:6c:1f:
                    3d:7b:60:28:d9:57:1d:89:87:0a:5e:2a:45:ef:4e:
                    48:b2:50:cb:91:0c:3d:21:33:5f:fa:bf:bd:f4:7d:
                    85:f3:aa:46:59:ce:1a:16:d5:4d:5c:b1:c0:ef:07:
                    36:52:24:7b:46:d3:4c:28:c9:ec:01:40:51:95:0b:
                    f9:99:c6:df:d6:54:87:1d:06:fc:b1:3b:01:b9:8d:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:9D:1A:2A:BD:EE:3D:FF:62:21:37:34:EC:97:58:5C:79:DF:40
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:d6:c9:ef:6d:19:e8:bc:64:db:cc:a0:90:0e:4f:cf:5c:
         2a:42:29:ce:4a:a5:af:54:f1:8d:cc:e5:85:f3:22:c0:4b:bc:
         f9:74:30:b6:58:50:41:e4:d3:ab:3e:b7:c7:d3:11:0b:23:2b:
         09:ef:9e:ef:6e:1d:6f:7c:d9:8c:38:a5:e3:b2:e1:1a:c5:99:
         15:c5:37:32:a9:cb:3d:98:db:cf:68:3a:3c:80:ae:ae:2c:5c:
         81:64:58:7e:7c:5a:ac:25:0a:cf:47:0c:f0:0b:5f:85:f8:2e:
         72:84:59:c2:e7:43:93:61:e1:2e:79:05:b3:f9:2e:f4:45:50:
         96:37:36:7a:60:e7:34:52:f9:99:b0:d1:5b:2e:4a:ee:34:bc:
         66:58:ef:47:c1:f6:7b:14:ef:77:c5:9c:d9:aa:22:66:45:f2:
         60:ad:49:ed:ee:4d:98:83:99:e9:2c:33:c6:1e:35:c1:df:2a:
         9b:19:1a:01:38:01:7e:a6:f2:8e:0b:f0:46:d7:9b:de:28:93:
         ca:d2:a5:fa:17:1d:0f:e5:02:a2:5b:54:b0:0b:2a:83:fd:61:
         29:52:f0:f5:b6:17:95:7f:b9:5e:ed:4c:53:17:7e:a2:07:41:
         68:6b:c2:a6:74:57:50:5a:39:e8:83:30:af:49:36:79:04:f2:
         e3:f5:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:46:11 2025 by rpki-client