Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
File:                     WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json)
Hash identifier:          lDsTnGkx9yFBpK0TJ5NBeT5MVqw6E46PpFaGgo0Smpo=
Subject key identifier:   9D:D2:EE:40:C4:3F:ED:8B:93:B6:15:33:52:51:74:9A:EA:0F:8B:8B
Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
Certificate issuer:       /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
Manifest number:          04D2
Signing time:             Wed 23 Jul 2025 00:10:27 +0000
Manifest this update:     Wed 23 Jul 2025 00:10:26 +0000
Manifest next update:     Wed 30 Jul 2025 00:10:26 +0000
Files and hashes:         1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: maNECQgPn9oF5SGroa6VyWlCa/jDLUD4gDH0piMxlsU=)
                          2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
                          rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
        Validity
            Not Before: Jul 23 00:10:26 2025 GMT
            Not After : Jul 30 00:10:26 2025 GMT
        Subject: CN=68802873-d1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:a4:f4:ae:3f:c5:02:10:3c:8a:f0:68:4c:
                    10:5c:5d:6b:25:7f:02:73:95:5a:f7:0d:da:6d:a9:
                    a3:b6:fb:ce:97:6a:87:f1:c9:02:23:c0:19:5a:b8:
                    c9:e1:2e:55:ce:b3:b1:23:6a:5a:21:94:aa:e4:3a:
                    16:76:98:8f:07:04:62:a9:ca:20:d8:53:dc:1a:31:
                    82:a2:2e:26:1a:68:cc:6e:4e:ef:81:86:d9:2e:0b:
                    af:be:fe:7a:da:4f:5c:92:c0:9b:8e:22:fd:46:89:
                    cb:fe:3a:cb:26:12:a2:53:a7:9c:31:99:19:1e:b5:
                    23:d9:7c:99:25:50:3e:93:f5:90:f3:5a:da:51:4e:
                    e0:0c:65:30:37:f1:c1:5d:81:05:7c:49:2f:59:66:
                    54:3f:03:82:dc:97:05:6b:54:df:96:f2:83:2d:73:
                    8b:d1:ad:ac:09:3d:2d:87:f5:b0:bb:d8:93:01:e4:
                    c7:06:f0:74:bd:4f:62:e4:69:38:f0:2c:ee:e1:06:
                    b4:32:56:9d:4f:3a:26:d0:b1:58:ff:10:33:81:a2:
                    60:7c:ca:89:66:0d:fc:91:7a:6e:79:ee:0a:98:dd:
                    5a:9d:2b:e9:fc:18:80:aa:a4:da:0b:60:18:55:c8:
                    fd:71:c1:c5:0c:86:6b:82:ce:54:7a:18:a6:0b:70:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:EE:40:C4:3F:ED:8B:93:B6:15:33:52:51:74:9A:EA:0F:8B:8B
            X509v3 Authority Key Identifier:
                keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:8b:58:a7:da:4a:94:ce:7d:75:58:54:03:70:b5:cd:ef:
         26:bc:18:ed:21:c1:c1:d8:04:d7:83:6c:01:b5:08:52:03:21:
         50:d2:06:63:b8:47:03:6a:32:a8:57:93:3c:18:2d:e5:10:87:
         d1:84:a4:04:c8:99:ae:59:f0:af:e0:3a:eb:b8:16:4a:7d:eb:
         67:a5:08:33:aa:af:d6:0a:f1:7b:e9:7e:08:41:83:c1:2f:18:
         07:18:a7:66:c7:81:3d:58:1f:a7:69:67:68:a9:25:4b:3f:13:
         24:45:06:fd:13:55:3a:1c:23:a0:8f:ed:ae:46:b9:79:c4:15:
         4a:09:b6:eb:48:8c:a6:dc:45:86:72:3a:c2:85:29:36:79:b4:
         4c:1d:a3:d3:4c:2e:5c:91:7e:48:ca:fc:0e:60:92:21:3a:1e:
         41:f5:62:ca:80:e1:ff:bc:b4:b4:13:ad:1e:81:49:ba:3c:eb:
         19:15:59:dc:b1:6e:89:37:51:ca:3a:3a:e1:80:a9:d0:64:52:
         af:31:b8:ca:13:73:f5:46:d0:24:10:8d:fa:31:80:43:f7:4e:
         3c:ea:2c:af:0b:9f:be:8a:23:a5:f7:7c:a6:0a:fc:e6:7a:79:
         fe:03:80:e0:b6:5d:fd:2d:97:17:5c:72:4d:32:76:c5:f9:d3:
         d8:ba:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:38 2025 by rpki-client