Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
File:                     _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json)
Hash identifier:          BGqRy6upYD+QrGFWFxmwRHnjXYc5XVzxnMt/7Ghj5Dw=
Subject key identifier:   00:B6:CC:36:0F:07:F9:EF:B2:DE:B5:3D:F2:E9:8E:C4:AF:AB:38:A9
Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
Certificate issuer:       /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
Manifest number:          A7
Signing time:             Wed 23 Jul 2025 06:29:18 +0000
Manifest this update:     Wed 23 Jul 2025 06:29:18 +0000
Manifest next update:     Wed 30 Jul 2025 06:29:18 +0000
Files and hashes:         1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: 9r7HrpPLkPvvAwL8bWyEe9bbjVcn6YwXjV28GeUN0hI=)
                          2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
        Validity
            Not Before: Jul 23 06:29:18 2025 GMT
            Not After : Jul 30 06:29:18 2025 GMT
        Subject: CN=6880813e-074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:ee:fb:15:f7:43:bd:28:d9:3a:f7:62:4c:
                    05:d2:f9:98:0b:17:16:66:71:92:d6:c6:17:ac:2d:
                    9a:b7:41:79:6c:6e:16:62:5a:26:b3:33:66:dd:5e:
                    f0:0f:2e:ee:77:ae:02:c4:0c:35:1e:60:fa:0d:b7:
                    49:99:8e:fc:0f:70:d0:79:f1:00:be:01:eb:51:5f:
                    0b:97:43:32:77:ae:1f:81:34:76:36:1d:4b:fe:cf:
                    fd:31:43:94:bc:c2:93:25:7f:db:e3:35:94:da:5d:
                    65:31:ea:f1:32:75:2f:f8:1c:15:b5:e6:28:6e:bf:
                    26:56:80:bf:41:95:cf:1f:ac:18:ec:69:ab:ff:4b:
                    ae:df:d5:03:e5:ab:35:bc:c0:61:31:a1:65:c2:03:
                    9e:b6:e9:91:8b:6f:16:e3:95:2c:e2:bd:45:92:73:
                    15:c3:d2:12:55:c6:a2:b7:b1:58:36:2f:92:f3:e8:
                    16:57:99:fe:00:ef:cf:2e:a6:b9:83:a5:1d:74:e1:
                    1d:d9:9b:08:6e:e9:46:88:3d:5c:ba:53:64:0d:dc:
                    e9:8c:fa:29:1f:91:06:a8:7c:58:cc:b7:7c:cc:a7:
                    90:7d:b8:99:31:b1:43:c0:cb:5d:98:94:07:19:2f:
                    02:b9:9a:00:b6:38:da:dc:f4:3f:61:09:e8:fa:cf:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B6:CC:36:0F:07:F9:EF:B2:DE:B5:3D:F2:E9:8E:C4:AF:AB:38:A9
            X509v3 Authority Key Identifier:
                keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d8:80:e9:79:44:fa:a9:1e:ea:97:a4:7d:4c:d4:af:00:55:
         42:6f:01:a2:0c:74:d9:ad:ec:4f:4a:af:03:03:55:01:ce:f5:
         ac:cc:8e:79:78:0b:99:8f:0f:e8:11:b9:df:ab:f9:02:8a:83:
         01:26:86:ae:0d:fc:ab:45:63:23:87:77:4f:17:04:8a:c6:cb:
         bd:e1:7e:e4:d5:b7:4a:eb:5e:04:91:d5:f0:09:7d:c9:3c:11:
         e5:9d:69:56:91:d6:4b:20:05:97:59:f4:be:f1:21:d0:8b:c0:
         b7:a6:08:14:8a:dc:40:25:d8:08:55:c5:84:10:5e:fe:bb:84:
         0a:93:b9:5d:bb:11:ba:03:29:82:5a:1e:00:24:d0:1b:5f:1c:
         bc:a4:07:f0:4e:60:01:31:9c:13:b9:4f:86:6b:4a:ee:c5:72:
         d6:47:4f:f7:76:ba:84:7b:fa:8f:d8:ab:9c:aa:fe:72:27:b3:
         77:0f:aa:71:66:5e:71:6f:78:ff:2f:34:f6:7a:d0:7f:23:e0:
         d4:48:53:33:38:c1:4e:dc:58:9f:b1:e7:4c:79:a8:dc:73:0d:
         64:06:fc:a4:7b:d8:5b:a6:32:6b:9c:bf:da:46:bf:9e:65:8c:
         a9:11:65:c3:46:bd:26:8a:b8:fe:e2:cf:24:37:ac:f6:e3:ad:
         53:5e:32:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:20:00 2025 by rpki-client