Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
File:                     WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json)
Hash identifier:          VWvd1qNfo5DAHYUqt2pqqYycaryYRd0wWuOaMohiN98=
Subject key identifier:   4A:85:1A:0F:EA:7D:26:25:1C:3E:19:8B:6C:48:5F:C7:D1:92:AE:2F
Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
Certificate issuer:       /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Certificate serial:       04D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
Manifest number:          04D3
Signing time:             Fri 25 Jul 2025 00:09:07 +0000
Manifest this update:     Fri 25 Jul 2025 00:09:07 +0000
Manifest next update:     Fri 01 Aug 2025 00:09:07 +0000
Files and hashes:         1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: Z0HwkkvT3gzMvJNVaBM3vzVqTOZLVBPtPy+67Bti3zc=)
                          2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
                          rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 00:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
        Validity
            Not Before: Jul 25 00:09:07 2025 GMT
            Not After : Aug  1 00:09:07 2025 GMT
        Subject: CN=6882cb23-ae5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:cc:53:25:be:42:ee:be:bc:7c:b9:53:9f:
                    f5:96:a0:4f:e4:c4:96:20:2e:71:30:dd:e4:e1:8e:
                    5e:32:c7:4f:f2:7a:44:8f:ce:cb:17:22:aa:73:a8:
                    4f:ee:ca:b0:80:22:68:93:c5:35:ce:a4:00:81:0d:
                    07:c2:e0:d0:1a:73:00:de:c9:7f:fa:e8:be:ab:99:
                    49:1c:8e:a5:76:72:40:08:cf:a7:fc:7e:48:a2:fe:
                    b4:41:e4:97:9b:a4:a0:ba:62:e9:05:4f:59:ca:1f:
                    f9:5a:e0:5a:67:64:a5:70:84:c6:f9:39:76:6e:67:
                    4c:44:6e:a6:5e:f2:e8:a8:91:16:73:37:63:87:24:
                    45:98:7b:f7:51:b3:eb:bd:60:ff:f0:4c:05:e9:ef:
                    39:23:3e:36:e4:9a:60:5e:5c:35:c9:b9:43:af:9f:
                    73:c0:e2:cf:09:ea:c8:27:b0:5e:fb:0b:da:e3:f5:
                    75:ef:c5:b3:ff:66:ab:a3:bc:00:a6:61:a9:c8:9d:
                    82:41:75:96:e2:f3:a3:6b:8b:d8:cc:a9:99:6b:00:
                    75:09:ca:87:ac:9c:8d:4d:2e:13:8b:f4:d5:7d:7d:
                    5d:86:06:55:b6:39:99:0c:e2:a7:84:fc:d2:9a:a9:
                    ae:8d:2c:8d:c2:30:10:77:b0:db:f8:1d:e3:8b:64:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:1A:0F:EA:7D:26:25:1C:3E:19:8B:6C:48:5F:C7:D1:92:AE:2F
            X509v3 Authority Key Identifier:
                keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:ff:cc:f0:b9:d2:16:33:9f:75:fb:ad:7d:08:56:c0:b9:
         d9:0d:82:3b:c4:38:71:e8:33:1f:40:bb:31:fc:6c:3a:9c:51:
         54:55:a0:2d:b6:97:e4:46:8d:c3:dc:b3:58:37:73:6e:39:24:
         72:31:95:59:22:6f:86:08:09:4f:7f:f6:e9:98:67:73:5d:bf:
         bd:62:a0:cc:66:8c:74:47:94:d7:67:00:35:90:c0:c0:ba:cc:
         43:9a:5d:38:bb:d5:39:70:b1:d3:ab:ef:2b:06:29:ad:92:4e:
         3f:cd:d0:42:b7:ab:98:28:5a:a7:8a:8e:36:5a:fd:60:85:10:
         ee:4c:3a:70:f7:e0:a2:9f:b2:d9:13:8f:53:04:22:8c:ba:5d:
         d4:fd:b2:6b:58:82:1a:2a:d2:66:bb:a7:3d:26:c0:b9:ae:bb:
         f1:27:27:68:0d:a7:3a:23:38:b4:fd:10:96:c3:1b:c7:a8:64:
         2b:e8:48:46:69:98:3e:e6:c9:94:c8:98:eb:50:d6:9f:fa:9d:
         6b:d3:f2:e5:ef:40:16:5f:ea:b3:2f:0d:9a:3a:d8:76:98:ba:
         0b:3f:92:8b:e4:88:f5:52:c6:f0:80:fd:e1:8b:9b:b3:a4:75:
         f2:cf:59:a3:7a:9a:57:e2:28:2f:b0:41:1d:12:ae:e6:33:c9:
         8f:ad:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:01:23 2025 by rpki-client