Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          08OKxnHx6HXTcKPvQL68naInJgah1McVdTW+85nB9gA=
Subject key identifier:   1A:A9:EF:CB:61:62:D7:6F:43:FE:88:DF:EA:3C:24:2C:64:1F:CC:7D
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1F38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1F13
Signing time:             Thu 24 Jul 2025 16:07:49 +0000
Manifest this update:     Thu 24 Jul 2025 16:07:49 +0000
Manifest next update:     Thu 31 Jul 2025 16:07:49 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: jaOzNvMMwzekJwp/hkvut0HExNrcQg47ffN22JGs0Tc=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 16:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7992 (0x1f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Jul 24 16:07:49 2025 GMT
            Not After : Jul 31 16:07:49 2025 GMT
        Subject: CN=68825a55-824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:05:e6:12:b6:f4:54:7b:66:07:59:17:eb:
                    e5:e1:6a:cd:17:85:08:81:97:8f:d6:ea:33:7b:59:
                    64:22:c3:60:49:b3:f1:b7:74:be:fa:f2:5f:78:46:
                    99:9c:a6:a6:78:a6:b3:72:11:d8:4a:80:53:06:2b:
                    2b:1f:a5:c1:7d:e4:89:c7:68:85:e1:ce:e4:80:e9:
                    3a:95:c8:71:02:08:4d:4c:94:34:6b:bb:8d:34:e9:
                    73:cb:e4:4a:ac:94:d6:d1:1c:ac:19:ee:3b:90:44:
                    2a:cf:e2:69:05:35:34:3d:03:6f:3e:ec:d1:de:f9:
                    5e:70:6f:f1:52:17:14:7e:8b:52:b5:12:2b:d4:5c:
                    72:c9:fb:34:ad:eb:5a:69:6b:2f:4b:64:05:f0:77:
                    88:2b:d9:26:7c:f7:c4:eb:55:f8:6a:e3:7f:3a:a5:
                    e6:c6:d9:7d:e7:35:6c:0e:83:e0:1c:52:7a:95:91:
                    e0:5d:15:51:f0:a7:f4:03:11:79:a5:f5:68:bf:bb:
                    58:1a:e1:57:c8:58:54:68:87:5b:f3:be:3a:30:8c:
                    40:85:35:e2:f5:8b:6e:7c:b2:f3:17:04:f6:91:34:
                    2c:a9:7a:d8:0f:ea:70:6b:d5:d7:bf:89:0a:59:6f:
                    b0:97:08:b2:2d:17:f2:f2:df:7d:44:d9:7d:19:72:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:EF:CB:61:62:D7:6F:43:FE:88:DF:EA:3C:24:2C:64:1F:CC:7D
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:f8:5f:f2:81:df:26:88:96:ed:51:21:e4:08:5c:15:bc:
         38:d2:3c:37:81:5e:49:58:59:03:e6:e3:ab:15:18:d5:a9:1b:
         f9:6d:0f:6a:27:59:d8:48:aa:6c:d3:1e:a1:8d:4d:6c:a6:8e:
         68:d0:d9:f8:e6:89:c1:4a:b9:47:bf:e8:23:7a:cf:af:aa:2f:
         0b:3f:18:af:85:ff:ef:12:0b:d2:e7:2a:2c:d7:cb:e6:19:9b:
         03:6d:47:9e:de:ac:97:a7:48:67:c8:2d:42:ec:36:91:f3:80:
         fe:c1:d4:89:fe:40:9f:53:38:8c:07:bf:5e:e6:d5:75:01:55:
         93:c8:7e:a5:c2:0a:0e:88:79:96:c6:c2:95:ba:fc:ab:06:86:
         02:de:d9:eb:c9:4d:75:7d:91:c1:b5:43:13:2d:41:e6:a7:e7:
         55:fb:1a:3a:c8:ea:c1:fa:2a:b3:fe:b2:01:9e:1f:a4:63:5d:
         8a:57:8c:34:c3:10:88:aa:cb:72:a9:84:62:cb:c9:06:20:46:
         c2:4b:96:21:3f:29:db:ce:33:dd:b5:6a:70:f1:ee:38:c3:c3:
         f9:03:f2:ca:40:c9:80:08:0d:b8:ba:58:33:c2:ed:e8:98:1a:
         1e:0f:d2:05:9b:71:a4:a6:ab:7b:3e:ff:5a:6b:ca:09:da:a9:
         08:6b:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:12:04 2025 by rpki-client