Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          VP+kgB13vzHxVUxfBaR1xiimpcKHodFFt99WTePheDc=
Subject key identifier:   70:4E:64:08:B2:45:E3:13:9B:14:0E:EC:7C:ED:5F:5B:53:FF:FD:48
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          0137
Signing time:             Tue 01 Jul 2025 04:57:14 +0000
Manifest this update:     Tue 01 Jul 2025 04:57:13 +0000
Manifest next update:     Tue 08 Jul 2025 04:57:13 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: nvwWsLc5STtGxGUV3lby7hcQ1lwj4qYYGyAL9soyg/o=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Jul  1 04:57:13 2025 GMT
            Not After : Jul  8 04:57:13 2025 GMT
        Subject: CN=68636aa9-a2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:5d:95:da:5d:22:ab:c8:bf:4f:af:ef:5c:
                    b2:10:cf:77:49:18:22:73:2d:1e:21:3e:83:e9:69:
                    3e:a7:91:01:fd:1f:bf:40:20:a2:19:01:5c:d3:00:
                    e1:21:16:3c:4b:23:ee:b3:e3:1e:31:81:49:02:33:
                    3a:14:54:3e:a2:f5:08:64:28:ab:37:25:9f:0e:d1:
                    e2:3f:02:95:b8:17:0a:e3:78:e7:fa:e7:93:60:29:
                    1b:8e:37:9e:f8:ab:0c:c9:7b:6f:5e:db:b5:7b:26:
                    d4:37:67:70:3c:80:09:f2:1f:a2:7b:dd:ac:1f:54:
                    cd:6d:c6:8b:c2:7e:74:a6:84:ca:c0:d9:cb:81:86:
                    f1:9c:63:d3:37:93:59:af:7c:7c:f7:11:17:81:19:
                    db:4b:f0:dc:f0:d6:7e:38:18:35:eb:ff:2f:e5:a8:
                    a8:da:78:d9:da:1f:a3:f2:74:2a:0a:59:2a:d3:0f:
                    f6:d5:74:d3:9a:f3:80:6f:b0:65:b7:1f:f9:cf:f4:
                    4a:4e:38:c5:d0:65:6c:db:cf:d0:28:61:9a:db:e1:
                    bd:d3:2d:80:1b:11:70:0f:d7:44:67:80:6d:50:6d:
                    29:8a:6c:37:47:80:6d:b1:c4:c5:52:ee:48:c5:e5:
                    bc:a4:c2:c2:36:37:fd:25:30:85:5c:c4:1d:50:1d:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4E:64:08:B2:45:E3:13:9B:14:0E:EC:7C:ED:5F:5B:53:FF:FD:48
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:5c:99:20:02:40:89:4b:30:c2:2a:1b:09:a5:a0:54:b1:
         41:62:70:74:6d:dc:ff:12:07:88:64:a9:d0:aa:00:ea:e6:d2:
         e0:a5:39:08:82:dd:4b:6a:55:73:01:09:ed:68:0a:6c:a4:4c:
         ea:f1:92:44:b2:58:7a:65:63:85:13:1a:03:98:62:48:c5:ba:
         e2:37:0a:81:65:66:3f:d4:7e:01:1e:5c:02:6c:44:e8:cf:a5:
         40:3b:77:7a:f8:1c:a2:b0:7a:01:29:c4:b6:d8:ac:48:73:12:
         d2:53:b6:f8:55:9b:f0:e5:2e:6a:fc:0b:3f:b3:e0:21:c4:c3:
         c9:36:26:17:85:22:07:ba:30:61:55:4f:5d:61:34:d5:9f:26:
         1b:db:60:a1:bd:85:ee:38:53:6d:eb:f1:a9:2c:66:60:c3:99:
         42:ab:59:4c:71:1c:b0:4e:ca:b9:88:d5:db:f4:19:fe:a3:68:
         e2:ed:22:b0:9b:9c:c3:78:be:b4:cb:86:ec:38:3d:72:8a:4f:
         91:ae:3b:7c:19:e7:23:f8:27:05:ba:c3:8a:a3:f9:56:c4:a1:
         0b:80:0d:8b:6b:ce:70:cb:ad:1c:60:a4:59:35:5e:6b:57:83:
         89:9d:7f:07:e0:16:be:dd:c2:6e:e2:f3:68:de:77:3d:dd:36:
         22:d2:b8:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3
NjFGREI1RDgwHhcNMjUwNzAxMDQ1NzEzWhcNMjUwNzA4MDQ1NzEzWjAYMRYwFAYD
VQQDEw02ODYzNmFhOS1hMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NVdldpdIqvIv0+v71yyEM93SRgicy0eIT6D6Wk+p5EB/R+/QCCiGQFc0wDh
IRY8SyPus+MeMYFJAjM6FFQ+ovUIZCirNyWfDtHiPwKVuBcK43jn+ueTYCkbjjee
+KsMyXtvXtu1eybUN2dwPIAJ8h+ie92sH1TNbcaLwn50poTKwNnLgYbxnGPTN5NZ
r3x89xEXgRnbS/Dc8NZ+OBg16/8v5aio2njZ2h+j8nQqClkq0w/21XTTmvOAb7Bl
tx/5z/RKTjjF0GVs28/QKGGa2+G90y2AGxFwD9dEZ4BtUG0pimw3R4BtscTFUu5I
xeW8pMLCNjf9JTCFXMQdUB1pqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBOZAiy
ReMTmxQO7HztX1tT//1IMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5
RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx
RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMAlyZIAJAiUswwiobCaWgVLFBYnB0bdz/EgeIZKnQqgDq5tLgpTkI
gt1LalVzAQntaApspEzq8ZJEslh6ZWOFExoDmGJIxbriNwqBZWY/1H4BHlwCbETo
z6VAO3d6+ByisHoBKcS22KxIcxLSU7b4VZvw5S5q/As/s+AhxMPJNiYXhSIHujBh
VU9dYTTVnyYb22ChvYXuOFNt6/GpLGZgw5lCq1lMcRywTsq5iNXb9Bn+o2ji7SKw
m5zDeL60y4bsOD1yik+Rrjt8Gecj+CcFusOKo/lWxKELgA2La85wy60cYKRZNV5r
V4OJnX8H4Ba+3cJu4vNo3nc93TYi0rjg
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:40 2025 by rpki-client