Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
File:                     RWxgg2WE6Qooop0Ci1snYBqT1EY.mft (raw, json)
Hash identifier:          8jx2cyJ7q24zm58GuqX4XHBFqjOzNpA3sn0eHk9R29Q=
Subject key identifier:   EA:78:4E:8F:CB:1C:85:25:27:E2:3A:23:75:4D:58:CD:28:07:2F:8B
Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
Certificate issuer:       /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
Manifest number:          3A
Signing time:             Thu 03 Jul 2025 07:48:07 +0000
Manifest this update:     Thu 03 Jul 2025 07:48:06 +0000
Manifest next update:     Thu 10 Jul 2025 07:48:06 +0000
Files and hashes:         1: RWxgg2WE6Qooop0Ci1snYBqT1EY.crl (hash: V441KqdC2JcW9kiZyl7HOWEjSSzYiRwTg9PfH8dNhcc=)
                          2: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (hash: tVDbnB/oVjQqBCd2UeAI1BWWN7K0TVLfW0PjLHaDZvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
                          rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446
        Validity
            Not Before: Jul  3 07:48:06 2025 GMT
            Not After : Jul 10 07:48:06 2025 GMT
        Subject: CN=686635b6-2cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:f0:e3:26:5a:43:ad:98:fd:3a:f3:9f:f5:
                    0a:78:86:5e:47:f8:71:30:a9:e8:38:5c:96:0f:3a:
                    d2:c5:a5:4b:32:cc:10:45:93:e0:b9:db:24:b0:32:
                    a0:87:ea:17:d8:00:a6:2d:e4:2f:dd:fb:82:ed:9a:
                    42:54:cb:a7:77:ea:87:e1:04:8a:88:fd:d4:3a:ee:
                    ad:31:43:c5:39:bf:4f:ce:54:19:d7:e7:56:35:e5:
                    00:08:ba:fc:c7:b1:2f:f7:45:66:b8:39:39:c9:ef:
                    bf:1a:94:9f:79:b8:71:30:42:88:4f:0d:eb:f7:51:
                    e3:21:e8:05:64:8b:0c:a0:e2:a3:cb:57:91:79:8d:
                    a7:ca:4c:52:37:a5:60:61:00:2c:ff:15:53:29:52:
                    1d:71:c7:b2:4f:de:0a:f2:4a:57:27:0a:2e:81:f8:
                    47:7d:9a:dd:63:68:d9:9f:80:1e:ab:5a:9f:02:59:
                    fa:c3:ac:9c:53:29:23:e2:ce:83:4e:e2:31:3f:e9:
                    03:70:e0:63:c4:6c:26:8a:ea:e8:2d:e6:a3:da:3d:
                    2c:f8:02:5e:94:77:dc:d7:9a:28:99:ea:47:41:d1:
                    dc:a6:75:f0:92:30:c4:0c:0a:83:12:f4:13:cc:38:
                    22:3a:ad:bd:0b:5a:86:86:b0:21:55:a8:b4:7a:0c:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:78:4E:8F:CB:1C:85:25:27:E2:3A:23:75:4D:58:CD:28:07:2F:8B
            X509v3 Authority Key Identifier:
                keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:ee:ef:19:8d:55:36:64:1c:9b:4d:54:b9:17:6d:95:62:58:
         65:4e:bd:a1:cf:c1:a4:9d:f6:53:92:4c:4d:5a:11:67:3e:12:
         9c:e2:c2:01:31:23:e3:93:47:a7:3e:d1:25:96:76:4e:30:17:
         3a:eb:8d:e6:6e:a8:14:5c:30:30:54:7f:0f:f8:d3:63:7a:14:
         c2:f7:48:80:77:ee:32:7d:ce:37:29:b2:68:f7:ae:43:f4:38:
         5c:66:4b:f3:57:b5:6f:e6:85:13:b2:7c:0b:bc:44:19:4e:29:
         60:da:ae:40:74:16:3e:82:07:5d:a9:e6:d1:2b:cb:32:f6:8d:
         01:f5:8a:f6:28:4c:25:81:f1:3d:0e:5c:15:05:c6:e1:64:63:
         73:52:0f:bf:cc:1b:73:32:33:ba:12:eb:18:49:7f:f4:09:ec:
         f9:51:4f:c0:6a:9a:5c:bd:cf:a8:dd:ba:49:b3:f6:6e:23:c4:
         be:1a:74:07:ce:f5:8f:1e:d2:6d:3f:d6:e6:d3:e7:87:48:4d:
         64:c2:2a:82:c4:37:32:2d:c8:19:22:2f:78:a5:97:f5:20:95:
         4f:ad:26:47:df:ec:bb:fa:fd:23:86:d5:7e:8b:df:de:7d:66:
         df:99:e4:20:b9:eb:43:a2:c0:be:c5:e8:b1:27:13:05:cb:01:
         ef:b2:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:40:56 2025 by rpki-client