Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          Bo4erH1KXYxww/2s2UCvOWVLMBYAfvnbibSTrggBjis=
Subject key identifier:   5B:9D:86:2D:86:87:E9:C5:F0:C0:94:DC:50:A1:0D:56:DF:44:6F:CF
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          0339
Signing time:             Wed 23 Jul 2025 01:31:23 +0000
Manifest this update:     Wed 23 Jul 2025 01:31:22 +0000
Manifest next update:     Wed 30 Jul 2025 01:31:22 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: PtuJFnspKz2CicBKAiCfOdmoJjVvzjy+Pfc9cjZnbvw=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 01:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Jul 23 01:31:22 2025 GMT
            Not After : Jul 30 01:31:22 2025 GMT
        Subject: CN=68803b6b-24b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:79:41:5e:a0:4e:c2:48:ef:97:8f:e9:a7:
                    4b:e1:1f:47:26:b9:9c:30:b0:be:d0:fc:17:3a:82:
                    5a:7e:78:be:79:65:53:e2:4e:ce:ec:16:4a:dc:e2:
                    f2:1f:3d:02:f0:3d:8e:1b:ee:74:7c:76:de:2e:ca:
                    a5:0f:d5:eb:52:ac:57:67:80:99:58:22:10:b6:51:
                    45:00:04:62:5e:63:53:c0:d8:3d:e8:e8:74:a2:b3:
                    22:5b:a5:f5:83:84:d7:54:e1:82:b4:a7:8b:2a:1a:
                    bf:77:28:40:93:2f:f3:ed:18:36:b9:ae:ea:f2:30:
                    f3:3a:3a:ea:83:3d:32:c3:d6:b6:3e:2f:52:24:d2:
                    ea:5c:be:9e:af:26:d3:d1:6d:8c:c2:47:a3:6d:fb:
                    3b:35:6f:6e:3d:e7:20:6d:bf:66:57:60:d9:0e:04:
                    3a:31:bb:e2:02:e0:07:9e:61:2a:fd:27:b4:03:6a:
                    ab:42:00:75:2b:18:d3:59:06:be:81:9d:c1:ea:0b:
                    e7:81:68:27:9b:cd:5a:de:68:b9:06:49:19:a3:73:
                    8e:eb:f3:77:3f:1d:1d:44:1b:a8:45:9e:a9:f5:8b:
                    b7:74:58:77:b2:91:c2:e3:f5:f7:27:81:16:ab:3d:
                    bd:fd:8e:4f:87:be:e3:7b:00:df:e7:33:1c:f5:c5:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9D:86:2D:86:87:E9:C5:F0:C0:94:DC:50:A1:0D:56:DF:44:6F:CF
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:0b:bb:4e:a8:fd:1e:d4:1f:59:70:c9:01:14:2a:df:cb:
         96:9e:da:d0:5a:b7:cb:a7:09:a8:02:8b:03:4e:c4:fd:e6:c1:
         7e:45:15:82:6c:cc:1f:c1:86:ba:e9:57:d9:36:db:c2:46:ce:
         60:ac:f7:e2:3d:fd:cc:98:ab:50:40:8e:34:05:2e:eb:4f:67:
         69:b1:e7:f4:8f:db:5b:a4:56:ee:45:0f:b5:d9:97:ee:81:be:
         8c:f1:c7:c2:fb:36:8f:7a:48:78:33:75:92:9c:6c:72:1e:39:
         9a:c4:04:a5:7c:39:47:5d:ce:23:d3:55:64:e8:24:42:0d:4f:
         2c:eb:5a:77:46:e2:1f:37:ac:da:ce:fc:eb:90:0a:ab:27:b7:
         74:55:e0:7f:67:57:74:5c:19:89:d3:44:db:6a:18:d2:cc:00:
         e1:4a:f7:02:5a:8b:e2:a1:c9:8c:df:ae:f5:de:2a:fd:e1:99:
         9b:95:31:3b:b9:1c:60:9f:24:b3:86:31:68:0c:b6:f0:b4:3a:
         c5:de:6f:56:a0:02:fc:44:2a:01:ac:af:40:c5:d5:6f:eb:be:
         16:f4:d1:3f:2e:d6:8d:ff:48:29:2e:38:15:8b:fb:f5:76:86:
         5a:f1:48:39:3a:08:fe:49:74:92:c8:8a:80:fc:30:66:b8:53:
         2b:0d:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:10:57 2025 by rpki-client