Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
File:                     wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json)
Hash identifier:          xXCgDffMwfHBtCLOHT8EeMuO/xctgw4vfJQojOGghcs=
Subject key identifier:   D8:1F:33:87:A3:B7:27:C2:E4:F8:4E:75:5A:AD:F5:98:DC:1F:78:EE
Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
Certificate issuer:       /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Certificate serial:       0FBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
Manifest number:          0FAD
Signing time:             Fri 22 Aug 2025 17:39:25 +0000
Manifest this update:     Fri 22 Aug 2025 17:39:24 +0000
Manifest next update:     Fri 29 Aug 2025 17:39:24 +0000
Files and hashes:         1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: HqwHN847k+lNP84hurgysZYAR6SyXYwfw2ZQBI/wBLw=)
                          2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
                          rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4031 (0xfbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
        Validity
            Not Before: Aug 22 17:39:24 2025 GMT
            Not After : Aug 29 17:39:24 2025 GMT
        Subject: CN=68a8ab4d-f466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:66:56:80:28:6f:f2:31:d9:da:02:01:3b:
                    e1:97:0a:df:1f:19:8f:12:5a:a8:7e:c8:47:23:86:
                    f4:7a:5c:71:aa:5e:40:83:f4:9a:ad:cc:b9:c1:e1:
                    78:51:71:86:69:4c:44:0f:69:3e:4b:f5:0d:6b:68:
                    0f:9b:4f:36:87:82:36:7b:e4:ec:6b:c6:c1:fe:75:
                    c2:ae:ee:87:d8:47:36:b3:88:b1:02:a6:b6:de:86:
                    2e:b1:e2:0f:28:e6:50:48:73:80:aa:cd:f7:0f:40:
                    ad:09:cd:7a:3e:d7:f2:62:3e:ac:98:21:24:48:8f:
                    cc:40:5c:c2:24:c0:c1:25:be:07:90:49:70:62:9b:
                    26:77:48:e1:19:c0:f3:ef:16:ed:9b:07:28:2a:97:
                    8c:38:10:6f:28:6c:11:3a:3d:c0:50:82:6d:e3:7c:
                    23:1f:0c:28:52:ac:4b:2d:c5:9d:a5:a4:b4:4e:10:
                    ef:b6:5c:f8:96:bb:17:d0:f5:b5:f5:c1:df:85:af:
                    85:65:dc:6d:c5:c7:df:14:5d:ee:c2:ff:b2:05:67:
                    57:59:6a:86:44:6d:4f:0a:a0:bf:fc:7b:ef:ab:0d:
                    67:05:95:8b:87:f8:ca:ad:43:b4:03:a7:3e:a0:3f:
                    50:fc:32:ff:a7:71:ba:b3:96:3b:42:d5:40:5b:c0:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:33:87:A3:B7:27:C2:E4:F8:4E:75:5A:AD:F5:98:DC:1F:78:EE
            X509v3 Authority Key Identifier:
                keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:b6:0c:80:c5:f3:5a:7e:58:6b:e9:39:12:5a:2e:5f:2b:
         ef:6f:5f:b4:dc:14:c3:07:25:9d:5c:77:46:f6:8a:14:4e:ab:
         a8:ac:47:24:02:64:52:91:9e:52:9c:ba:90:68:65:83:ed:95:
         63:27:e2:95:a7:59:b9:41:da:f1:63:d8:7d:7a:01:20:03:99:
         b0:61:10:99:2d:0c:a7:8b:0d:96:c8:c0:de:b7:f5:2c:e2:bc:
         a3:01:ee:3d:f9:99:21:3c:3a:b6:04:f7:33:cb:7d:6c:37:97:
         48:c4:b9:83:76:1f:59:1d:c5:63:f8:80:ce:ed:fe:50:29:d4:
         32:72:c6:d4:f4:72:20:d0:9e:46:9c:2d:74:08:db:48:05:bf:
         ad:91:c1:de:48:9b:ff:80:56:76:6b:4e:75:5a:27:a9:c7:71:
         a3:87:c1:b6:b9:25:07:77:2f:0e:e6:4b:6c:4e:55:28:3b:ba:
         2c:1b:fa:95:50:26:94:53:f8:02:a8:d6:5c:62:eb:a0:1a:12:
         71:3d:4f:53:62:93:83:32:b7:62:12:05:74:ad:c3:68:3f:32:
         c9:c7:e4:d6:34:56:e5:fb:51:fb:23:8a:ac:8f:bc:0e:97:21:
         4e:13:c6:a1:17:f7:38:2d:31:fe:11:60:6f:1f:16:3b:cc:06:
         2e:75:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:39 2025 by rpki-client