Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          CatOyALdTrwZnxRkiVwuBrn36qLOxyeeuTE9KvI8r7s=
Subject key identifier:   29:C6:F3:CD:9A:37:68:FA:D0:C0:14:ED:23:38:66:70:9D:9E:C6:FD
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          033A
Signing time:             Fri 25 Jul 2025 01:28:37 +0000
Manifest this update:     Fri 25 Jul 2025 01:28:36 +0000
Manifest next update:     Fri 01 Aug 2025 01:28:36 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: Zq7EFEio/BnuPTDaozIYEayxCVSCx4CgfM3HevmR0zE=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Jul 25 01:28:36 2025 GMT
            Not After : Aug  1 01:28:36 2025 GMT
        Subject: CN=6882ddc5-1668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:d8:cc:e3:3b:26:63:ee:56:e2:4e:33:6f:
                    ef:6d:15:58:c1:67:4c:28:a4:20:aa:f7:27:ad:40:
                    b9:b4:e7:fc:6c:c0:87:b9:81:c9:c1:e2:11:b7:1c:
                    a0:da:b3:a4:eb:5d:b9:77:78:81:79:7f:7e:a9:ec:
                    99:4c:87:1e:c0:b4:be:53:f8:ad:f9:6f:d9:4a:13:
                    b4:e4:59:65:c2:c1:fd:47:b9:08:75:f0:cd:09:f8:
                    be:98:36:a3:63:d5:91:91:4d:00:3d:e4:a9:93:2d:
                    31:69:ac:9e:a7:09:07:0b:d1:9e:b2:93:50:b6:3c:
                    b4:bf:53:96:92:77:41:1b:83:6e:44:74:d3:e7:59:
                    a4:95:c9:c4:fb:d9:d4:69:04:2c:5b:60:8d:c7:70:
                    21:56:7f:75:fe:f7:f7:27:df:43:a7:54:2c:4b:a1:
                    30:43:be:c3:8d:9f:69:2f:0a:7f:87:a6:c4:e0:3c:
                    56:aa:8a:0a:bf:70:ef:8d:89:eb:9c:29:43:fc:36:
                    73:78:cf:53:2a:a9:2a:53:4a:0f:4a:1e:43:03:69:
                    27:42:00:34:14:8f:14:0a:2a:c0:2d:bb:73:94:02:
                    22:73:12:8a:c9:fb:32:3d:ec:c6:b2:48:41:35:d8:
                    4c:3c:60:e1:3b:b6:3e:e7:18:02:d7:08:3b:aa:03:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C6:F3:CD:9A:37:68:FA:D0:C0:14:ED:23:38:66:70:9D:9E:C6:FD
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:44:df:07:1e:95:ce:b2:c4:33:7b:1e:44:6a:64:13:a9:fc:
         60:ab:28:5d:d8:56:ee:ee:ae:1c:5c:89:2a:92:97:1d:85:34:
         bf:2d:95:6d:bf:02:d3:a9:ca:7e:26:bf:c5:a2:94:39:e1:5f:
         ea:47:78:05:c4:bf:4a:53:25:2a:a8:31:b7:01:38:59:7b:24:
         b7:de:1c:5a:83:11:b6:56:7e:ae:e2:9e:e9:5b:e8:c3:e9:4e:
         c1:84:c1:9a:d6:2a:43:5e:67:f7:07:aa:3f:e0:96:c6:f7:fd:
         c1:40:65:46:f4:43:ef:d9:66:23:72:3c:f0:9d:0d:43:ad:1e:
         8f:d9:57:5e:66:46:47:23:44:bc:ab:05:af:2e:ec:48:69:37:
         51:60:6a:9a:8f:55:9f:5b:94:9a:0a:1c:54:7c:10:15:ac:e7:
         3d:bc:61:ce:de:c5:31:d7:8c:d0:90:83:a3:4b:6c:96:67:31:
         5d:26:65:55:df:d5:c1:6e:0d:df:e2:af:dc:16:aa:1f:d7:ea:
         d5:a1:eb:ed:b3:79:a0:b7:3a:05:27:f9:62:38:54:7f:bc:5e:
         42:6d:4f:8d:be:a8:32:30:46:ba:e2:85:04:ef:af:42:af:17:
         9b:85:8f:cb:87:bd:3a:65:a5:0d:ed:16:a5:ec:9f:69:aa:81:
         41:8f:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:51:07 2025 by rpki-client