Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
File:                     Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft (raw, json)
Hash identifier:          9snc490SM50yYjVV00F5PV4q1yQrSXbcj8sh+rV8vhE=
Subject key identifier:   41:C3:1B:F6:B1:90:F7:D1:22:3B:96:EB:8F:4B:62:4A:F5:09:8D:09
Authority key identifier: 5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94
Certificate issuer:       /CN=A9181CB2/serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
Manifest number:          40
Signing time:             Sat 23 Aug 2025 07:46:52 +0000
Manifest this update:     Sat 23 Aug 2025 07:46:52 +0000
Manifest next update:     Sat 30 Aug 2025 07:46:52 +0000
Files and hashes:         1: Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl (hash: JTly/4aSmVaKxAcMx4oC0k+gMtAuUy6SHXXuL2Qdfqc=)
                          2: 45A63E5E34C911F09E00523CC4F9AE02.roa (hash: UgHJ4HCtUSU7Mhsy3F8cs/81Xi5bIE2mJ11AdKYHzQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CB2, serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
        Validity
            Not Before: Aug 23 07:46:52 2025 GMT
            Not After : Aug 30 07:46:52 2025 GMT
        Subject: CN=68a971ec-1351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:a0:b1:7a:38:cd:a7:75:41:f9:e3:57:6b:
                    8f:85:45:f4:62:cf:21:b1:a3:b9:1f:42:c8:6c:cf:
                    94:e1:39:22:62:75:b8:77:2e:17:17:ee:d5:24:7d:
                    2b:57:be:1e:41:1a:26:68:c5:be:d7:a7:24:ca:95:
                    ef:1f:b4:8d:c8:77:63:a7:53:1a:0a:a8:9a:42:89:
                    25:73:03:24:7e:fe:a3:d8:24:53:e6:d5:c0:bf:f7:
                    7e:ca:4c:ec:6e:fd:23:f7:4a:1b:e4:64:aa:96:f4:
                    e9:b3:49:a0:b6:78:60:58:2d:c9:f1:b3:8b:52:10:
                    9d:0f:62:30:1e:ce:6f:98:a2:24:bf:fd:5e:8b:f5:
                    b8:6b:18:ad:3d:74:8f:55:05:d7:fd:b8:d1:d5:4d:
                    43:81:b8:6c:ce:76:e5:54:e7:67:e5:1c:e0:1c:68:
                    ad:d8:dd:74:5f:b0:8f:fa:b6:7e:68:2a:94:f8:be:
                    c3:5d:0f:7d:70:4e:3c:91:4a:9d:32:14:d8:dd:8e:
                    2b:37:92:5b:9e:49:af:b9:72:eb:99:42:0d:13:f7:
                    cf:dd:68:ba:ab:d9:db:39:fe:27:50:f0:a5:4b:63:
                    c8:24:b9:ad:d5:b2:dc:cb:44:54:b1:f3:dd:de:d7:
                    68:2e:1a:d0:bf:7c:66:65:d9:5d:81:a1:b6:52:92:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:1B:F6:B1:90:F7:D1:22:3B:96:EB:8F:4B:62:4A:F5:09:8D:09
            X509v3 Authority Key Identifier:
                keyid:5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:74:62:f0:6f:3b:1c:c4:16:40:2f:a2:7e:25:2b:fa:75:
         2d:55:0a:74:47:f0:e0:e4:de:06:b6:32:23:19:96:b3:22:c5:
         5c:4a:26:b1:f4:5c:e1:27:46:20:40:62:77:4b:95:64:91:e6:
         7d:c0:e5:41:f2:62:95:6b:af:5c:23:b1:77:f4:f4:a5:3b:36:
         5f:d0:4d:93:8c:50:1f:d0:f9:cb:2e:5e:8c:79:70:6f:c7:dc:
         87:ca:ae:8b:b2:4a:a3:6b:5b:39:e5:36:00:9e:99:87:22:1b:
         ed:3f:5c:89:b1:80:86:88:f4:4d:2b:56:0d:ba:83:a1:46:ac:
         79:3e:18:11:9f:7e:c7:05:d1:16:c4:8d:3c:4e:98:f0:19:33:
         a1:c2:87:23:9e:de:1e:08:24:c8:f6:18:29:47:46:c6:29:e4:
         d2:d7:63:48:02:e1:61:9f:b5:7f:bc:5c:9f:bf:93:18:db:43:
         a3:62:a5:11:1c:d8:1f:7d:e0:b9:c8:3f:c5:b6:80:69:3f:c6:
         54:3d:5a:03:be:2c:b6:2d:62:bc:e3:db:d7:38:05:e4:f0:51:
         63:2d:db:25:d2:df:cb:b9:1a:47:86:00:fd:1d:0b:db:99:31:
         00:01:bd:b3:c2:a3:37:ab:a6:68:11:b1:31:60:ed:8d:22:da:
         fe:24:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:22 2025 by rpki-client