Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          59b1O3KjOki2i+KnQmfk1HQ5v5bPEtfIkVzjv4Ee5kE=
Subject key identifier:   54:C2:18:67:97:FA:12:88:8B:D4:F0:8E:F3:3D:5D:37:CA:61:89:17
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       05C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          05B2
Signing time:             Tue 22 Jul 2025 23:30:36 +0000
Manifest this update:     Tue 22 Jul 2025 23:30:35 +0000
Manifest next update:     Tue 29 Jul 2025 23:30:35 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: 7QIy2z5Sch+laCGQxyVpF93BT5jDahOlFJ6pT7wMINU=)
                          2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=)
                          3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 23:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Jul 22 23:30:35 2025 GMT
            Not After : Jul 29 23:30:35 2025 GMT
        Subject: CN=68801f1b-75b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:b8:28:73:17:5a:2d:88:11:d4:8e:46:92:
                    34:5f:ed:4f:99:a8:57:dd:8c:0c:14:01:a4:6f:7b:
                    a3:89:e4:b9:d5:1d:df:40:64:68:82:37:1c:b7:21:
                    98:52:4a:16:e1:13:0c:5a:77:8c:ba:1e:42:fe:87:
                    88:87:26:8e:05:75:df:03:2e:15:93:dd:de:22:7a:
                    b8:ae:38:20:b7:68:81:1a:bf:8d:87:59:87:25:3f:
                    de:dc:c8:28:e1:2a:0f:53:c3:2e:1b:40:90:84:8a:
                    7a:84:9f:45:b9:7f:66:80:70:98:10:20:55:3f:bc:
                    cf:f8:50:0b:09:0b:05:68:d6:01:69:58:95:22:cc:
                    4f:00:b1:79:e3:78:4f:a3:a8:3a:98:b8:d1:14:c7:
                    85:7a:40:ee:72:7b:95:70:07:de:8a:52:ec:01:74:
                    77:a0:2d:2b:c1:e1:89:26:b6:89:89:ff:1d:57:81:
                    24:c0:ec:02:02:58:db:1f:51:b9:59:79:d2:38:70:
                    58:01:83:d6:00:59:b6:97:0d:a3:e8:0a:f4:43:9c:
                    d1:78:19:aa:a0:78:19:47:1b:d6:5d:62:8c:72:ce:
                    a4:66:4f:91:9f:44:3b:ce:2f:e9:4e:38:ce:7d:4b:
                    d1:18:ad:d2:97:a9:65:dc:5e:a9:f5:9e:01:73:d0:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:18:67:97:FA:12:88:8B:D4:F0:8E:F3:3D:5D:37:CA:61:89:17
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:13:eb:ef:68:ce:e4:96:34:d3:b1:ea:74:d0:0f:92:f0:
         59:f3:1c:d2:60:d5:b3:d4:72:23:66:de:8d:ce:90:c9:d7:f2:
         c7:93:bd:ea:7c:d0:24:76:e2:f8:b9:a6:c7:37:7f:19:df:33:
         2c:73:6d:76:7d:46:42:79:35:5c:ad:14:9a:52:ef:5d:95:2c:
         97:da:1a:c6:6b:60:1a:c6:27:9a:44:5f:6c:55:b6:0a:c3:c1:
         f8:61:21:97:da:91:7a:9b:16:0c:37:45:8e:aa:26:af:36:bb:
         f9:4b:7f:74:ac:87:fa:3c:a1:0a:38:64:b5:39:c0:63:ed:fd:
         38:81:b4:2a:3d:3a:78:7b:c9:11:65:0c:ec:7e:39:01:f0:83:
         be:98:2f:5c:cf:8c:60:66:21:19:4c:17:1a:6e:65:84:a5:f2:
         3d:f6:f5:a1:eb:17:6f:87:83:c0:f8:de:3d:f7:70:2c:a3:03:
         c6:24:9f:66:2c:ec:91:8d:e0:c3:c0:4f:bc:b7:77:a9:56:50:
         7f:7d:f1:ee:f8:72:26:61:ee:0b:1d:e5:17:62:db:c0:60:fa:
         15:27:67:34:f6:dc:4b:eb:3a:d7:e3:f4:74:03:a2:4c:a6:40:
         4e:49:1b:2b:8c:f6:ee:60:ec:dc:f9:d1:8a:47:07:a3:63:e0:
         a2:75:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:19:33 2025 by rpki-client