Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          FqAvyr/8jXYTvCVJoN54YOxZ1ABok1hzlanmo2mIyt0=
Subject key identifier:   CE:38:83:EE:D2:0F:A5:F0:8B:34:EF:67:93:BA:4E:5E:E9:89:84:72
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       06B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          06A4
Signing time:             Wed 02 Jul 2025 22:29:21 +0000
Manifest this update:     Wed 02 Jul 2025 22:29:20 +0000
Manifest next update:     Wed 09 Jul 2025 22:29:20 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: iFn6wF4Rbc+0uR7PxIeVdIzhAriR8daDS7mmLVHLs28=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Jul  2 22:29:20 2025 GMT
            Not After : Jul  9 22:29:20 2025 GMT
        Subject: CN=6865b2c1-65e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:7c:e1:e0:04:35:27:09:5e:83:af:4d:76:
                    25:76:26:54:1c:bd:2f:ec:46:41:0a:3b:cf:40:60:
                    ce:9d:21:24:38:4c:6d:06:fc:c5:ca:ed:06:1b:99:
                    f9:86:cf:7e:69:c1:62:9f:03:82:c2:3a:19:01:37:
                    e9:2b:3f:83:21:09:cf:6c:a0:7a:98:99:e9:b0:57:
                    6c:47:af:9f:77:6b:6b:f1:ed:5e:eb:49:26:01:9e:
                    bc:ec:ea:dd:ff:bc:05:0c:31:51:7f:09:f0:d9:42:
                    ea:fc:7f:cf:13:88:84:f6:5b:78:94:bc:c3:ce:c4:
                    73:ad:4f:ad:03:1a:43:0e:73:ee:a5:e1:c0:26:91:
                    02:b9:43:76:57:66:92:50:73:eb:9e:57:c3:4b:3a:
                    f2:2f:5d:d0:d3:90:5d:28:4f:73:2d:75:8a:d5:54:
                    f6:c5:20:d4:7b:d4:bf:70:13:d9:8a:05:ec:7f:60:
                    d6:df:21:f2:9b:37:f5:6b:ce:75:5a:cc:4a:44:86:
                    d4:70:18:23:8f:a0:bb:51:f5:48:f4:53:fa:7a:e8:
                    1b:f7:49:2e:32:f8:c0:27:e8:87:62:7c:a6:56:06:
                    e4:a2:d8:3a:28:85:1c:7b:70:66:51:d3:ab:86:62:
                    41:ad:36:96:cd:05:07:9b:b5:02:b2:64:b8:24:3b:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:83:EE:D2:0F:A5:F0:8B:34:EF:67:93:BA:4E:5E:E9:89:84:72
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f5:99:c1:2f:a1:df:28:08:a4:15:35:4b:dc:50:7f:86:6f:
         48:b1:fe:be:c9:5d:ec:de:be:08:31:ba:a9:28:9c:f9:ad:a1:
         d4:cf:04:51:bc:8b:41:06:53:bb:d0:e6:5e:e4:c7:7a:73:10:
         83:74:2e:b9:9d:b2:46:c8:ba:4f:ad:da:08:8b:15:e9:66:be:
         0a:ae:0e:eb:9d:27:bd:76:21:a6:33:cd:70:38:0f:5e:a3:07:
         61:a7:cc:1a:96:7d:80:ee:b0:11:96:50:57:5f:5b:b1:87:58:
         6d:ca:f9:a2:9b:33:e8:3f:f5:58:fe:08:35:48:00:dd:0b:a5:
         4e:d6:4a:ab:2a:a2:fe:f3:5b:47:f3:bc:ca:53:ab:ca:25:d7:
         33:14:e7:45:8a:38:96:56:6e:0b:a9:a3:f1:01:c8:39:bc:f7:
         6d:af:6f:0d:77:9b:b4:10:19:50:69:84:b7:c6:60:db:5d:b1:
         02:cc:44:a3:1b:e1:7d:16:f7:1d:9e:9f:9e:44:ed:86:5f:13:
         a9:1c:49:69:a5:b3:fd:f0:3f:12:b1:f8:f9:ad:24:6e:60:7f:
         26:ce:77:51:0e:6f:2e:e9:17:14:4f:48:68:e8:c8:59:6a:5c:
         46:06:c6:19:32:c7:40:1b:e7:87:d4:f5:39:35:1a:39:ee:b0:
         f6:24:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:12:24 2025 by rpki-client