Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
File:                     1WCjWtQMpi9T5roc3grRqjKiuWc.mft (raw, json)
Hash identifier:          MijVMt7ttSD5Y/FhKGD8uFeof1yir+btVVqQ4yC8hQM=
Subject key identifier:   69:63:09:0B:A4:8F:27:34:05:22:91:D5:E8:28:EC:18:EB:87:16:9A
Authority key identifier: D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67
Certificate issuer:       /CN=A9183E7F/serialNumber=D560A35AD40CA62F53E6BA1CDE0AD1AA32A2B967
Certificate serial:       04D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
Manifest number:          04D6
Signing time:             Sat 19 Jul 2025 00:08:17 +0000
Manifest this update:     Sat 19 Jul 2025 00:08:17 +0000
Manifest next update:     Sat 26 Jul 2025 00:08:17 +0000
Files and hashes:         1: 1WCjWtQMpi9T5roc3grRqjKiuWc.crl (hash: RpfNnkqgf22QvV3hmUkA2VlidUpFdhL341oYQKnPW1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.crl
                          rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183E7F, serialNumber=D560A35AD40CA62F53E6BA1CDE0AD1AA32A2B967
        Validity
            Not Before: Jul 19 00:08:17 2025 GMT
            Not After : Jul 26 00:08:17 2025 GMT
        Subject: CN=687ae1f1-5f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:27:e9:95:dd:e2:34:2a:95:7a:4b:66:bd:
                    61:4a:75:02:7c:97:86:42:65:44:4c:25:0e:9c:76:
                    06:14:71:0b:1f:fe:2e:68:9f:d6:06:48:49:12:37:
                    c7:72:9d:a5:b7:48:4c:fd:9e:ff:88:b4:5e:9a:17:
                    85:3a:db:c4:98:ec:fa:bf:47:1b:a7:9a:b7:cf:9d:
                    db:f5:fd:10:e2:94:36:f0:40:d1:70:13:d6:85:23:
                    4e:92:9e:ce:93:5e:4e:86:04:fa:70:88:5a:d8:fa:
                    80:ed:c2:02:30:c3:4f:e2:05:76:ed:b7:77:53:74:
                    e1:75:83:4e:db:31:52:f6:5a:88:2c:f1:f2:47:84:
                    1d:19:3a:24:86:ef:17:31:06:a4:9c:24:b1:80:61:
                    14:66:a1:9e:00:ce:9a:27:5a:8b:e1:a0:fa:18:d6:
                    66:ce:5d:73:1e:bb:6d:a5:71:43:1f:33:33:b9:1f:
                    0f:35:86:41:d7:34:e0:8f:93:91:8b:ce:c1:3b:c8:
                    6c:93:44:c3:5c:ab:cf:37:af:b1:03:31:3c:93:57:
                    c5:6e:94:b6:51:38:71:e6:c6:73:17:a7:be:c7:4c:
                    ee:6a:c2:3e:ed:c5:5a:fa:a4:40:11:db:be:26:bc:
                    1e:0f:0f:37:c5:b0:cd:8d:8f:da:30:48:38:f6:82:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:63:09:0B:A4:8F:27:34:05:22:91:D5:E8:28:EC:18:EB:87:16:9A
            X509v3 Authority Key Identifier:
                keyid:D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:88:c6:fe:1d:4b:21:d2:b6:6a:18:ee:70:9d:b2:b3:a5:e1:
         8f:c4:67:33:37:5e:08:5a:0a:fb:7e:80:7e:5b:e1:cb:b5:c2:
         db:1e:e5:b8:2e:31:9a:03:a9:90:51:09:bb:41:ac:fb:cc:40:
         d4:93:d2:95:ca:6a:81:5a:5b:3a:30:9c:01:fb:99:75:32:54:
         8b:dc:09:c6:14:77:8c:5f:3e:27:27:9c:52:87:ad:a2:e7:f5:
         5c:b7:dd:cf:1c:6b:e7:c9:de:a2:23:f1:b8:30:d6:51:65:73:
         1c:08:42:4e:8d:92:ba:03:fd:b4:9c:f6:ce:27:76:21:e0:4a:
         b2:66:fc:d1:12:ca:55:67:7d:9f:50:e0:3d:b5:b6:e4:d9:42:
         28:34:da:d6:d0:fb:ec:02:51:2d:f2:aa:45:8a:69:6f:d3:fe:
         81:fd:b0:df:da:de:9d:7d:d5:6a:b7:3a:5f:13:96:f4:ca:8e:
         e3:e1:88:21:18:ef:3d:e0:5f:64:97:6e:3f:17:aa:7e:7d:76:
         4e:69:34:17:c5:13:a6:59:9e:a3:26:72:95:25:30:7c:c2:f6:
         44:6c:93:f2:8c:0b:12:05:45:86:b3:d7:03:a6:e8:67:a4:cc:
         8f:9d:08:0e:73:59:b3:e1:c5:3b:66:29:53:ad:b8:56:42:48:
         bf:cb:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:14:56 2025 by rpki-client