Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
File:                     wpWXslitZgzgunl1gwnrjFeVlDU.mft (raw, json)
Hash identifier:          jxJ50DLgTQ4Q3ORFCS2bQOkhRiIit77nKx9HzpGQ3TY=
Subject key identifier:   C9:86:5B:25:B8:3F:49:87:EA:8A:5E:65:1D:F6:58:B9:D6:AF:ED:00
Authority key identifier: C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35
Certificate issuer:       /CN=A91813ED/serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
Manifest number:          AC
Signing time:             Wed 23 Jul 2025 06:24:58 +0000
Manifest this update:     Wed 23 Jul 2025 06:24:57 +0000
Manifest next update:     Wed 30 Jul 2025 06:24:57 +0000
Files and hashes:         1: wpWXslitZgzgunl1gwnrjFeVlDU.crl (hash: WHaDuDJUoc/FALBG5mLdHGHDr1nG37iAUxDmQS4CIMI=)
                          2: B28CA9F85F3711EFA108CA0CC4F9AE02.roa (hash: +Yr72OqynE/en2gYucrAB8EY/mIkM3RAadre1EWmYdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=C29597B258AD660CE0BA79758309EB8C57959435
        Validity
            Not Before: Jul 23 06:24:57 2025 GMT
            Not After : Jul 30 06:24:57 2025 GMT
        Subject: CN=68808039-7ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:83:18:70:2e:d5:75:0a:f2:3c:0d:1f:1b:
                    59:81:a7:db:fb:4e:f9:bc:77:7a:65:82:17:67:7f:
                    73:4f:ac:08:17:74:f6:c3:64:04:e4:f6:fe:1e:7d:
                    a1:02:7b:c8:c5:4a:74:87:87:11:87:97:63:16:3f:
                    09:cf:dd:1b:da:de:e5:3a:8b:05:e7:87:a4:81:19:
                    81:d1:53:8f:c6:e7:ad:10:63:fa:d2:53:5e:1a:90:
                    22:3d:46:1f:ba:f7:dc:30:bb:66:62:5a:4c:14:55:
                    4d:4d:c0:d7:01:0b:40:90:30:4c:92:63:18:31:33:
                    9e:dc:3c:88:2c:79:27:38:7b:da:e0:31:74:33:e3:
                    ac:50:f9:19:9e:f4:70:2c:c3:44:35:71:dd:8d:42:
                    47:7a:9d:9c:ec:ad:05:ef:8b:2c:aa:5e:92:53:ed:
                    e7:37:1d:42:e2:d0:08:ac:c4:49:be:8f:d3:e3:46:
                    4f:63:3e:cc:d6:e8:45:05:d2:df:23:44:78:45:3e:
                    24:a0:0b:cf:84:29:29:8f:fd:53:d9:3d:dc:ac:16:
                    72:3f:6c:50:cf:d7:07:06:89:9a:9f:14:3b:a8:09:
                    d8:41:20:a8:44:2b:79:fc:c5:0b:f1:18:50:0f:5d:
                    05:69:ba:6a:88:56:22:dd:1e:d4:15:b6:87:2f:3d:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:5B:25:B8:3F:49:87:EA:8A:5E:65:1D:F6:58:B9:D6:AF:ED:00
            X509v3 Authority Key Identifier:
                keyid:C2:95:97:B2:58:AD:66:0C:E0:BA:79:75:83:09:EB:8C:57:95:94:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpWXslitZgzgunl1gwnrjFeVlDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/7028C6C85F3711EFBF369E58C4F9AE02/wpWXslitZgzgunl1gwnrjFeVlDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:fb:08:f8:f6:d0:3d:81:18:c6:bd:fd:51:13:eb:14:e5:
         a7:74:89:57:78:49:a7:c2:8b:66:42:0d:9a:f1:da:d1:17:28:
         08:f7:34:c3:25:90:55:85:86:fb:11:0e:18:28:3c:49:71:57:
         0b:fd:a0:0d:19:18:66:4b:91:2d:0b:cf:6a:2a:e9:b2:3c:44:
         8c:7b:cc:f9:1e:c1:60:9f:ae:1e:37:64:1c:92:2b:5f:3f:13:
         f4:94:ab:60:dd:2d:34:0a:0e:f2:02:cf:38:b3:7c:99:a4:38:
         ac:16:e7:61:86:89:9f:b9:ee:4f:b6:71:6b:0d:76:c5:92:64:
         b8:67:4b:d2:f7:26:6c:c5:e3:78:ea:1b:a5:7f:19:56:e8:72:
         e0:cc:5c:23:86:11:4c:bd:f7:5f:19:35:7b:7d:bb:0a:40:1f:
         d6:99:6e:48:20:ba:60:13:b2:1f:ec:c7:dd:63:3b:4f:a2:7f:
         63:1a:5d:37:c2:9f:ba:ff:af:87:d1:db:1f:df:7c:0a:8b:b8:
         e9:7f:8b:d8:08:51:06:9d:85:ec:0c:8e:a9:7e:fb:40:59:0c:
         80:b3:c3:47:f4:6f:6a:d3:e8:b2:5c:09:60:ac:5f:cf:53:d3:
         b1:f7:1c:20:ae:54:37:c3:87:be:65:ad:f1:cb:1a:9f:e7:13:
         5a:c9:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:30:29 2025 by rpki-client