Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
File:                     WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json)
Hash identifier:          rv+QSt8lCzrYWwlT/fzRLxSEMfYZITMM7F7gLttJT1g=
Subject key identifier:   92:99:29:92:BC:8A:E4:68:B0:09:EE:97:BD:6E:0A:24:8B:C9:3F:75
Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48
Certificate issuer:       /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
Certificate serial:       1982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
Manifest number:          2CC7
Signing time:             Fri 22 Aug 2025 16:31:39 +0000
Manifest this update:     Fri 22 Aug 2025 16:31:38 +0000
Manifest next update:     Fri 29 Aug 2025 16:31:38 +0000
Files and hashes:         1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: v68WQyKhWieGPUOIpfDlHv3DDhWAqUvFXCshJqwO5XY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6530 (0x1982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48
        Validity
            Not Before: Aug 22 16:31:38 2025 GMT
            Not After : Aug 29 16:31:38 2025 GMT
        Subject: CN=68a89b6a-6104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:f9:ee:54:86:17:d3:14:a3:57:80:ca:f0:
                    cd:45:cc:d0:d3:da:53:c2:cf:c8:79:56:41:97:70:
                    4f:06:a3:1c:11:fd:02:bd:fd:b5:29:a5:49:70:9d:
                    84:55:3e:de:67:17:cd:31:9b:9f:a5:80:f5:85:bd:
                    a8:8f:10:fe:18:34:66:bc:9d:b4:b7:25:a6:42:1c:
                    58:88:32:39:aa:82:6e:e5:d1:bd:8e:ea:6a:7e:7f:
                    a1:c0:99:56:bd:02:6e:f6:1f:2e:73:29:51:86:69:
                    ff:d8:27:c0:ed:d8:41:fd:93:85:ea:6a:8c:da:47:
                    35:e5:91:5a:36:d1:17:b3:94:65:cf:98:11:2d:84:
                    1b:16:f3:eb:f4:83:2c:a9:81:0e:83:c0:c1:01:69:
                    f9:c1:71:cf:cf:d8:ac:c3:d1:84:5e:cd:89:aa:2f:
                    f6:70:8a:d9:f0:ca:4e:90:aa:4d:63:02:2b:23:26:
                    02:aa:aa:08:8d:23:f3:0f:b8:51:1f:50:cf:96:de:
                    ae:fe:c9:2c:67:d6:a6:15:c3:54:6b:b5:b4:9d:19:
                    67:07:e7:f3:39:34:d5:82:25:6a:c3:17:be:1d:b8:
                    fb:3c:73:13:4a:d0:35:e7:d0:92:98:83:4f:d2:b7:
                    07:05:a3:74:e2:7a:99:63:d7:fc:b0:3c:5e:fd:1d:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:29:92:BC:8A:E4:68:B0:09:EE:97:BD:6E:0A:24:8B:C9:3F:75
            X509v3 Authority Key Identifier:
                keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:06:d0:00:9f:08:52:49:c1:c8:d1:f4:8a:c4:d6:36:b7:18:
         1f:48:c1:81:47:84:f3:01:2c:71:68:2f:a4:30:9b:bd:10:0f:
         5f:12:99:58:40:a2:42:7e:a1:5d:c6:fd:e8:74:52:7e:04:11:
         8d:87:9f:09:8b:e8:49:00:e0:17:ad:f5:c0:07:97:74:07:67:
         6e:ea:9d:ae:0f:94:04:3b:12:f2:0e:7c:0b:79:13:6a:a6:09:
         58:b8:fd:7a:4b:84:94:7b:5a:aa:08:71:05:bd:8d:3b:97:c9:
         86:1b:50:9b:5d:f9:32:6e:40:cc:5e:b9:7b:af:29:a4:26:07:
         92:e0:7f:6a:25:f4:a6:88:97:12:2a:db:80:f6:af:9d:99:00:
         50:8e:df:d5:fc:c7:1b:33:45:75:78:42:dc:f6:fd:7f:3f:6b:
         7f:db:3b:a6:23:97:96:0c:15:21:24:dc:1d:67:f8:a4:5c:dd:
         38:f5:eb:68:9b:df:cb:32:57:be:ab:5f:fb:77:75:d2:81:20:
         a0:c4:78:4e:f4:e4:4f:5a:a2:14:38:dd:46:a3:49:b8:f3:40:
         05:e4:f7:14:ed:14:02:84:d7:a1:bc:54:7e:e6:d1:be:ff:f7:
         ec:9a:b0:48:68:52:ca:8d:26:07:e0:d9:3d:87:58:1a:d2:b9:
         49:a0:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:28:16 2025 by rpki-client