Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          Kx6r0X07h9+XgnqLxA7jtOCZqzDtQikkzMBIIYCtg2Q=
Subject key identifier:   AA:C8:3B:34:8C:F4:20:1F:D6:78:C2:0D:B5:4C:16:F4:0C:5D:0A:E5
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          01F7
Signing time:             Sat 19 Jul 2025 02:47:12 +0000
Manifest this update:     Sat 19 Jul 2025 02:47:11 +0000
Manifest next update:     Sat 26 Jul 2025 02:47:11 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: zw+/ALvJvzQbYE/B7i/tFui/ikM+hgGqNuzXVwDEZ5I=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: Jul 19 02:47:11 2025 GMT
            Not After : Jul 26 02:47:11 2025 GMT
        Subject: CN=687b0730-fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:2a:2b:a0:76:2f:d2:63:52:82:83:1b:e8:
                    b0:91:e6:88:7d:17:26:54:01:7e:98:e5:cc:a8:96:
                    58:38:2c:64:b1:45:7e:74:89:2f:4a:76:ea:10:d6:
                    f0:ec:84:9a:5e:a7:bf:7e:57:1d:64:29:89:03:37:
                    73:9c:8d:84:e9:23:4e:af:44:35:f5:dd:d9:f9:ad:
                    81:1b:ea:15:77:94:fd:5b:53:3c:4d:57:0f:b6:df:
                    12:5a:46:e9:50:99:e0:44:1d:8c:cc:52:f1:b5:8d:
                    ff:d7:a7:cf:c2:5e:cd:10:f2:74:55:d0:6f:e2:39:
                    81:2a:14:5d:10:c4:2c:1c:0b:e4:57:71:f0:af:ac:
                    ab:d5:14:44:b9:54:18:57:37:93:49:65:bd:f2:38:
                    90:5d:ab:ba:98:28:3e:4e:9e:1f:3b:10:22:5f:0a:
                    11:41:79:6b:a3:30:65:87:1f:a5:ba:65:cf:b6:50:
                    ba:12:ef:73:12:6e:00:b2:50:37:e7:ce:11:7c:a8:
                    6a:9b:c3:37:4d:dd:29:ca:26:48:07:45:ff:c3:e3:
                    55:f8:e8:d9:60:5b:31:6e:0b:6b:34:e2:5e:df:e8:
                    93:db:1f:30:13:fb:06:b5:c4:1a:af:ea:e2:e8:1e:
                    7e:9c:3c:65:6c:88:ee:0b:a9:6c:9a:0e:6e:91:33:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C8:3B:34:8C:F4:20:1F:D6:78:C2:0D:B5:4C:16:F4:0C:5D:0A:E5
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:0c:d0:52:72:1c:69:11:7f:37:06:c2:8e:6a:36:2f:36:ed:
         cd:ea:a0:ca:6d:8d:21:0c:ab:7c:46:60:64:2e:2b:28:22:42:
         5f:0d:2a:a6:af:9e:c6:17:b4:e8:c2:38:b5:46:a4:c1:9d:1e:
         79:e3:23:bc:8a:f7:2f:89:1a:92:8e:88:e7:42:f4:16:3e:71:
         23:de:8f:f9:f4:26:7e:78:87:4c:bb:2a:1f:23:b2:d1:99:6c:
         0d:28:dc:6d:b4:84:e7:ce:29:06:be:a2:4e:af:14:43:1a:ca:
         e1:42:0f:a7:d8:6d:15:25:37:41:9c:a7:de:8a:c7:c4:bb:3d:
         57:6f:3b:bd:f6:34:d3:f6:67:e8:74:0c:0b:b6:38:3e:cb:8e:
         e2:99:24:2e:4e:74:0b:1d:4f:50:c9:fb:72:af:8b:8b:e7:e9:
         8b:83:60:d1:21:d1:77:9e:e4:dc:e6:38:41:3f:71:47:03:1d:
         aa:c1:c4:f4:ff:d2:7d:7a:73:34:2c:ef:22:20:94:28:e0:b9:
         ae:58:d6:f8:0d:a8:b6:e0:e1:18:e0:83:4d:88:cc:0f:a3:e5:
         ba:98:70:73:10:03:a3:21:26:27:f4:85:cb:ff:5f:3f:d3:a9:
         9a:8a:be:32:80:0f:00:d4:63:b6:64:0d:9d:f4:02:5f:e5:48:
         19:ec:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:39 2025 by rpki-client