Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          wxY4sb0B40Ms17iJKH7v8FGpp5aMt+U2fOjAzs+fG4Q=
Subject key identifier:   EC:8E:24:5E:8D:8D:0B:E2:AC:48:DC:D1:93:66:28:F2:22:5B:1B:8E
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          07B4
Signing time:             Mon 30 Jun 2025 21:24:51 +0000
Manifest this update:     Mon 30 Jun 2025 21:24:50 +0000
Manifest next update:     Mon 07 Jul 2025 21:24:50 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: rjnq4GGliS58br3jHLck97EqJ2fwdlaEU4ZE/Hqz1Rg=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 21:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Jun 30 21:24:50 2025 GMT
            Not After : Jul  7 21:24:50 2025 GMT
        Subject: CN=686300a2-fc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:61:07:01:38:11:2c:d8:48:17:af:25:04:
                    5f:2c:d3:2d:74:27:51:1f:34:98:2c:41:38:e9:b4:
                    e7:a3:0b:6c:b8:cd:d2:97:c8:f3:f1:a2:24:d5:6e:
                    9a:0a:45:1c:aa:1f:31:e8:42:cb:69:fb:02:61:86:
                    f1:2b:13:fd:04:32:84:b8:6c:2b:83:85:25:ef:cd:
                    41:e1:0c:32:da:81:d6:67:22:5c:ed:40:b1:26:3c:
                    47:9f:35:67:a2:e5:47:4b:1f:b0:cd:9b:44:1b:24:
                    89:0d:62:f2:b6:d6:45:50:5e:6e:97:c1:11:9c:83:
                    f9:1a:9e:dc:82:a9:9c:78:30:f1:d0:01:b5:03:cd:
                    e7:59:d8:4f:a5:64:3b:d2:9f:14:df:8f:c0:15:8d:
                    32:13:d0:6e:f2:c2:9c:d4:0c:d0:f9:a1:3a:11:47:
                    94:d4:59:73:81:1a:4a:e9:4b:b4:8c:b5:8a:3f:2d:
                    3a:95:6d:6c:f8:27:4e:84:54:b1:19:c7:88:29:2d:
                    39:df:2e:0d:f8:08:c2:34:75:50:00:a1:5a:80:c2:
                    2d:34:34:59:eb:49:f8:72:1e:6b:03:4a:f9:61:c1:
                    12:32:56:28:2e:61:8c:38:86:c9:43:f9:d9:15:f9:
                    d7:49:83:a5:32:ce:08:0d:16:5e:ce:37:2f:02:1f:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8E:24:5E:8D:8D:0B:E2:AC:48:DC:D1:93:66:28:F2:22:5B:1B:8E
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:0f:b9:46:21:40:8d:b8:1f:d9:17:5c:4f:00:4f:7b:ba:
         88:5c:ab:02:3f:f4:bd:db:eb:61:d9:69:36:2f:d1:aa:2c:ea:
         b6:fa:83:65:ae:02:96:d4:8a:75:51:71:62:f1:31:46:b0:c3:
         e3:b9:87:06:a9:2d:4c:1f:d0:1b:c1:c9:75:89:4d:35:cd:3b:
         25:c6:c8:7b:e4:11:f0:ae:d4:1e:d5:fa:aa:1a:00:4c:65:f8:
         9b:00:c4:6f:e0:46:5d:73:09:b6:76:1d:56:56:28:4a:46:65:
         fd:d3:f9:6d:78:0a:d4:db:22:95:1b:35:7d:60:13:03:72:83:
         d8:78:de:e0:fb:60:a7:0a:01:a0:d9:6e:16:86:ca:80:46:d9:
         3b:ff:d2:81:bb:1c:a2:e1:3c:c8:8b:7c:ae:60:4a:a7:0d:cf:
         0d:ab:6d:0c:b4:7c:59:d1:0c:62:4b:08:57:56:f5:15:9b:fc:
         e7:60:db:a2:fa:76:95:fc:23:8d:45:e3:d6:17:16:06:c5:71:
         5b:b7:58:41:cf:66:4c:a1:ac:67:83:ef:20:c7:c8:9e:5a:8f:
         63:b6:71:57:40:4b:a7:d4:6d:35:13:c2:21:c8:f3:4a:0f:bd:
         48:fe:74:69:db:53:de:7d:fe:eb:f3:56:69:c5:50:3d:54:ba:
         1d:7a:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:20:23 2025 by rpki-client