Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File:                     WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier:          w7NE+1iLOJ+yDOfQFd1iuZEP/XnNvshqBZRapDyfy5s=
Subject key identifier:   7F:EA:02:80:65:D5:6F:75:53:1D:5D:FC:3A:5F:85:90:1E:DF:61:1E
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer:       /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number:          01D5
Signing time:             Fri 25 Jul 2025 02:59:18 +0000
Manifest this update:     Fri 25 Jul 2025 02:59:17 +0000
Manifest next update:     Fri 01 Aug 2025 02:59:17 +0000
Files and hashes:         1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: mCv0+6pqwY1Uh+nx8KIYtB4ueneZOHuMA0XL1RXag6w=)
                          2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
                          rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 02:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
        Validity
            Not Before: Jul 25 02:59:17 2025 GMT
            Not After : Aug  1 02:59:17 2025 GMT
        Subject: CN=6882f306-6dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:22:be:47:27:c1:54:bc:a8:6d:d9:7d:6e:
                    7d:13:73:1b:ad:58:2d:fd:53:ed:25:4f:65:8b:73:
                    de:ed:3c:5e:ce:41:04:69:ba:0b:15:b8:4a:d3:57:
                    f7:2d:2f:39:45:1a:80:2c:2b:c6:26:32:07:5a:df:
                    f9:56:80:f5:86:a0:69:f2:da:3d:6e:b4:96:8e:e2:
                    3f:81:38:3e:24:7d:1c:ef:98:2e:17:96:d7:c9:06:
                    af:31:36:ed:aa:32:a4:07:9b:fd:55:24:4e:b8:3c:
                    d2:96:45:29:8e:17:e3:88:2a:39:dd:fe:27:37:0f:
                    6a:cb:ef:ed:6b:a8:94:4d:23:22:75:0c:f4:ef:c0:
                    fe:db:0c:93:dd:50:57:9e:f0:48:fb:1d:7e:7d:ae:
                    01:73:74:9c:ca:be:66:6c:84:96:58:4a:07:c4:6f:
                    21:9f:35:53:87:3c:3d:d4:2d:d8:b8:43:f1:cc:5f:
                    87:f3:b4:ed:a1:7d:0e:0c:10:a0:2b:a7:fb:22:23:
                    dc:a8:0e:87:c2:7e:ed:53:fa:33:e6:ec:e0:b3:24:
                    32:40:63:14:41:44:97:5e:15:ba:c9:80:93:54:6c:
                    71:60:62:f9:cf:64:23:2c:2e:6f:48:84:95:9f:d9:
                    52:b4:3a:80:b0:5b:62:73:e0:a7:ef:08:33:a1:31:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:02:80:65:D5:6F:75:53:1D:5D:FC:3A:5F:85:90:1E:DF:61:1E
            X509v3 Authority Key Identifier:
                keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:b9:15:c8:f4:f8:4f:ee:29:58:ef:ef:3b:c9:70:a6:77:
         66:bb:45:77:c2:a3:3b:de:2c:13:8d:bf:14:1a:f8:e2:08:f7:
         bc:74:33:5b:a9:6a:25:af:2c:0f:c1:b0:21:23:c8:06:0f:dd:
         e1:2c:7a:26:cc:bf:be:e8:d1:44:3e:a1:51:52:be:de:00:a5:
         3e:46:01:fc:3d:f1:a8:07:88:d5:b5:98:33:1b:07:aa:ba:66:
         58:c6:1f:bb:5a:41:aa:74:90:fa:42:2c:12:09:b3:1f:8a:ea:
         b7:b7:3e:0c:8a:06:92:5c:d4:42:c6:63:0d:68:16:cd:e9:41:
         e8:a6:6d:8b:f8:e0:8a:a9:6d:28:2b:dd:02:ee:2f:1a:7c:8a:
         25:a3:47:5e:90:f1:10:4b:50:b3:0d:3f:bd:69:c1:aa:0b:db:
         94:70:f6:29:27:33:92:1e:78:b4:8f:51:0b:59:53:02:70:f9:
         27:d2:82:f2:50:6a:e7:0d:84:9e:15:94:e1:12:d8:e9:71:f2:
         b9:46:6b:36:02:d7:6c:d5:42:d1:c7:c2:a6:29:57:86:68:05:
         6d:ca:2f:68:8e:a0:9f:df:f6:dd:c4:3c:7d:40:66:4e:42:a3:
         74:0a:85:97:69:e5:c6:c6:11:92:a2:09:61:75:a3:bf:5a:59:
         f2:b3:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:28:54 2025 by rpki-client