Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
File:                     WuYzaTnqj177KiHkMGc_gMzVBVo.mft (raw, json)
Hash identifier:          BKcp10RU21TMZWoX2YYw5SkmVm32LCEUP0O7q8oHvWY=
Subject key identifier:   50:D5:EA:5A:24:4B:3F:7B:0B:F5:01:40:31:DE:19:09:1D:D2:2E:F4
Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A
Certificate issuer:       /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
Manifest number:          081E
Signing time:             Fri 22 Aug 2025 22:48:47 +0000
Manifest this update:     Fri 22 Aug 2025 22:48:47 +0000
Manifest next update:     Fri 29 Aug 2025 22:48:47 +0000
Files and hashes:         1: WuYzaTnqj177KiHkMGc_gMzVBVo.crl (hash: vGq+hmEtKwRy2wd38oKnc5gzyA52hM5hBoUkpF0xRBw=)
                          2: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (hash: Jae4zNS7emLW9efU6dooaK3X57ZozB+vUZsfQgGmkgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6DE, serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A
        Validity
            Not Before: Aug 22 22:48:47 2025 GMT
            Not After : Aug 29 22:48:47 2025 GMT
        Subject: CN=68a8f3cf-b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:7e:2c:2d:93:65:94:90:27:4a:1a:f2:56:
                    ff:28:33:d9:43:2c:be:f9:83:28:77:63:3d:23:a4:
                    27:4a:57:c2:29:be:7d:a9:c0:08:9f:53:8d:99:2d:
                    c7:21:24:91:e1:75:b3:84:8b:b7:34:f5:fb:73:60:
                    91:cd:ab:ba:7a:fd:dc:29:fc:aa:d4:cb:2e:1e:ed:
                    b0:bd:b4:aa:86:a3:50:2e:91:4b:51:4e:9d:7c:dd:
                    87:33:58:73:c7:0c:a6:4f:d9:4b:13:91:32:21:25:
                    59:e1:f0:92:8d:bc:26:b8:d5:96:7e:96:dc:ba:44:
                    a1:ba:cf:69:d3:37:b0:4d:47:a1:24:24:91:38:13:
                    f2:1b:8a:3d:43:1f:90:e5:3c:96:a1:ff:e4:7b:c2:
                    96:ce:09:d1:31:9d:2e:b8:ad:96:c2:d7:96:b5:9e:
                    2e:cc:c0:e3:96:a7:da:86:9a:d0:4f:44:19:c4:69:
                    6b:25:7d:e4:d6:02:25:55:29:a9:33:f5:12:ec:53:
                    f8:fc:55:db:16:21:30:fc:e0:78:d2:ae:fd:26:0b:
                    ea:93:86:62:b2:59:8d:7a:cc:a4:84:08:70:1d:ac:
                    57:c2:67:3f:e9:7b:dc:3d:7e:a5:c9:98:67:14:7f:
                    e0:0f:cf:e9:b1:f4:a7:db:7c:3d:ec:26:0e:96:bd:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:EA:5A:24:4B:3F:7B:0B:F5:01:40:31:DE:19:09:1D:D2:2E:F4
            X509v3 Authority Key Identifier:
                keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:5c:a6:b8:04:bb:f3:f7:0a:2c:41:40:9f:e0:dd:c4:d1:
         07:1a:80:de:9e:25:7a:e3:c6:13:b6:ed:49:07:21:6f:21:ff:
         92:78:0b:d0:5f:ac:21:e2:6d:72:63:22:94:0e:07:1d:0c:10:
         e9:92:61:97:4c:a3:6d:59:68:da:1e:77:e9:fa:dd:94:c6:47:
         0f:c2:64:e1:4e:1e:28:71:14:9b:25:7a:9c:c7:90:a3:8d:75:
         cc:fd:db:21:ba:5b:73:9d:f5:87:f9:fd:00:4f:23:e6:14:5b:
         20:a2:ca:32:95:60:05:c6:9b:a7:dc:27:de:54:ee:58:03:79:
         6d:2c:2c:b2:ce:25:81:48:0b:c4:93:92:e1:c1:77:00:cd:d9:
         cb:6a:93:b9:eb:63:9f:c0:f3:e9:4b:73:53:42:4b:c3:15:e1:
         26:0d:26:ff:7b:56:c1:3f:30:3b:e7:19:1c:b9:4f:66:60:a4:
         ba:04:ba:3f:32:1f:07:de:ed:bc:cf:14:91:6d:92:7b:37:1e:
         95:25:14:ea:30:2a:d5:42:e5:bd:a8:b2:f3:7c:b2:62:61:be:
         6e:99:e2:88:ce:88:24:66:33:c9:a3:b3:c6:40:50:d8:fb:4f:
         9f:f4:94:a5:f7:72:82:17:ae:ee:ed:39:2e:2a:09:1e:cd:5f:
         70:fd:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:30 2025 by rpki-client