Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File:                     WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier:          oEFmt8bCgvySRNiJxOUuwkkAQ6epMlO1p3InU7Sib/Y=
Subject key identifier:   BF:A6:DE:04:62:E0:EA:57:65:00:06:DE:FF:A0:6C:BD:7C:7B:8D:6A
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer:       /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number:          0311
Signing time:             Sat 23 Aug 2025 01:26:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:26:51 +0000
Manifest next update:     Sat 30 Aug 2025 01:26:51 +0000
Files and hashes:         1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: DZuiE38+S6twVYtm7WTX2hSxGNUuSxNAQxigqSwFZK0=)
                          2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: WrNqwpKibajA317uV8R1n49/EqSR3J93tv1ZPGtLnSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
        Validity
            Not Before: Aug 23 01:26:51 2025 GMT
            Not After : Aug 30 01:26:51 2025 GMT
        Subject: CN=68a918db-e03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:ef:3a:04:be:bd:25:27:9f:60:21:45:4b:
                    62:55:7c:7e:0f:3c:b8:3a:5e:93:30:1a:60:75:8c:
                    00:2f:2c:ff:f3:8d:a7:f8:b2:03:d3:6b:db:b4:22:
                    8e:31:7b:53:87:09:bf:b9:5b:a2:60:31:96:61:56:
                    8a:bd:f4:53:81:ee:72:94:41:92:1b:68:9a:22:90:
                    85:bd:f4:39:29:ac:84:17:90:73:60:15:cc:74:66:
                    38:31:6c:0f:17:5e:ef:96:7b:33:f9:7d:de:90:33:
                    8a:e8:14:6a:9f:1d:bc:78:4f:84:02:c0:3d:ba:51:
                    fd:6c:4e:7a:61:00:85:bc:a9:2c:27:22:f8:4e:7a:
                    89:ae:a2:98:c0:17:2a:2b:df:21:e4:48:0e:36:ae:
                    c4:48:04:50:34:4f:4a:61:90:e6:df:19:95:7d:c6:
                    7b:8d:be:c4:13:ab:aa:82:ac:c2:ed:f5:05:78:ba:
                    60:e3:a8:b2:47:e2:11:2a:c3:44:af:8d:49:ea:67:
                    27:b6:57:17:61:8e:bd:e6:0c:35:e5:da:b0:a3:fe:
                    26:19:ec:12:90:a6:d5:1f:0a:d9:1e:8f:54:ef:b0:
                    f3:0f:39:57:7f:28:c9:db:3b:1c:18:32:97:c4:2d:
                    9e:80:b7:4b:c0:59:d8:68:82:01:82:22:d9:e1:58:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:DE:04:62:E0:EA:57:65:00:06:DE:FF:A0:6C:BD:7C:7B:8D:6A
            X509v3 Authority Key Identifier:
                keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:49:39:be:73:8b:c7:89:1c:6e:e1:21:be:84:c0:18:5f:
         02:ea:29:1a:05:32:61:25:d2:c4:ec:56:43:09:10:f4:1f:08:
         67:e6:1e:10:8d:41:81:25:4f:1d:e0:c6:a8:60:f1:3a:3c:c6:
         c8:6e:40:a1:ab:54:55:7e:50:3d:04:69:3a:5a:41:8e:f4:6d:
         9a:8d:6b:05:46:2c:7a:fe:b9:d6:01:5c:52:60:56:c3:17:1f:
         91:76:85:8e:70:f7:38:6d:b0:05:ba:2f:66:da:24:cb:dc:10:
         05:bb:10:0b:7b:8d:d5:d8:89:25:1d:80:c2:1e:1d:ae:93:ae:
         97:0f:8e:a2:cb:c5:65:2d:f1:e8:4d:60:76:b3:f2:b4:76:be:
         b1:aa:31:3e:aa:37:88:46:21:27:f5:bd:0b:8c:f8:cb:a1:3e:
         a9:cc:4e:43:ce:45:67:22:42:ec:7b:71:96:16:8d:41:5c:a1:
         db:2d:2b:20:b9:b3:c8:b9:54:19:cc:b7:0d:18:76:d2:ea:c4:
         e2:73:41:da:4d:53:79:e6:26:ad:3f:45:ae:bf:a4:1d:dc:bb:
         db:04:74:e4:23:84:3e:f7:4a:78:72:c3:57:8a:2a:5f:a4:4b:
         6f:0e:32:27:93:28:63:61:44:35:b1:f8:da:2e:f8:9f:bf:34:
         4d:3b:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:51 2025 by rpki-client