Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File:                     woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier:          KR5Uy/12DzCc5PN+IFssXgifN70JLV/Fi54GwqqoSy4=
Subject key identifier:   22:DD:63:67:4E:1B:B2:43:3C:F6:4C:1D:7B:28:BD:FA:2E:02:D4:D1
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer:       /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial:       0BB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number:          0B9A
Signing time:             Thu 24 Jul 2025 19:11:54 +0000
Manifest this update:     Thu 24 Jul 2025 19:11:54 +0000
Manifest next update:     Thu 31 Jul 2025 19:11:54 +0000
Files and hashes:         1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: Df3XLWpicAQfejeftTsSKAIiCJBO4WnOs1xnNO+CZNA=)
                          2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 19:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
        Validity
            Not Before: Jul 24 19:11:54 2025 GMT
            Not After : Jul 31 19:11:54 2025 GMT
        Subject: CN=6882857a-fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:d5:e6:be:67:75:c3:26:18:07:7e:28:d1:
                    fe:84:97:5d:e6:8f:5e:91:48:af:42:71:f8:b5:cd:
                    dc:60:a2:6a:87:3b:11:e8:2f:13:62:ee:67:ee:1d:
                    86:90:7b:29:c4:93:82:ab:ba:06:d5:08:08:a1:58:
                    76:6a:31:cb:1f:2a:22:60:9b:e0:be:2d:14:0b:e4:
                    64:e0:81:65:30:cc:2b:5b:fb:13:1c:5f:97:4b:46:
                    61:a3:80:00:34:fa:77:7d:5e:10:86:25:8d:98:30:
                    6a:f9:81:a4:03:49:5d:99:89:cc:54:2f:45:36:34:
                    0c:dc:34:b7:66:55:d4:6e:ee:0c:1f:25:07:43:45:
                    e4:4f:32:94:4f:bc:1a:82:d0:e8:42:57:6f:17:bb:
                    8a:db:1d:00:a5:75:c1:a9:7d:6c:4b:bb:ea:bb:54:
                    82:1a:98:8b:63:78:65:49:45:00:3d:c0:7e:4c:d3:
                    fb:eb:55:ce:c7:7d:85:1e:8e:2e:bf:71:b4:62:e9:
                    db:21:b1:a5:ca:e6:89:a2:8b:74:0a:52:b2:62:69:
                    21:15:f7:98:b5:5c:eb:3c:42:e5:78:75:f6:d7:96:
                    da:99:f4:3d:39:ad:ea:20:91:68:02:5e:9a:31:af:
                    fe:52:53:8b:da:49:b7:55:88:27:7d:27:b4:54:e7:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:63:67:4E:1B:B2:43:3C:F6:4C:1D:7B:28:BD:FA:2E:02:D4:D1
            X509v3 Authority Key Identifier:
                keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:6c:81:e3:dd:62:9c:53:a8:6c:ec:6e:41:31:f6:9c:12:
         d9:99:bb:2c:94:2f:bd:43:36:d6:30:6d:84:b6:71:64:6c:4e:
         2f:2e:19:1b:0d:48:f3:58:8f:77:ac:80:01:28:62:88:ff:29:
         c1:26:7a:91:63:13:f9:ff:8d:b6:84:f2:b9:0f:94:35:09:c1:
         29:f9:2b:c1:5e:a6:20:e6:ca:1b:da:31:59:e8:bb:f2:02:a1:
         a7:5a:f6:7a:d4:31:4a:7a:63:4b:12:9a:bc:ce:33:e9:0c:da:
         de:9d:57:35:57:cf:d3:b6:6b:f2:e6:42:72:51:43:40:3f:ae:
         5c:b8:d3:61:9b:dd:cc:41:2f:cc:0d:ff:9f:42:38:b4:f0:f7:
         9d:f3:0e:d6:39:bf:1e:24:70:ce:fe:d2:96:ce:73:f9:bd:31:
         74:4c:12:a0:39:18:24:d2:62:55:f9:a8:db:a1:85:23:73:6b:
         98:20:1e:99:4b:df:c3:24:f8:82:71:87:6e:3c:02:bd:d5:09:
         e1:b6:a5:3b:5b:98:13:1c:89:a6:3f:c5:f5:b6:18:e0:91:1d:
         e0:0a:d1:8c:71:2a:91:5a:e7:92:c7:fc:b2:b3:f5:56:26:a0:
         ed:16:04:55:4f:6d:67:9e:00:c3:29:80:84:12:32:8a:bf:3b:
         71:36:c2:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE
N0VBMTdDNUEwHhcNMjUwNzI0MTkxMTU0WhcNMjUwNzMxMTkxMTU0WjAYMRYwFAYD
VQQDEw02ODgyODU3YS1mY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZLV5r5ndcMmGAd+KNH+hJdd5o9ekUivQnH4tc3cYKJqhzsR6C8TYu5n7h2G
kHspxJOCq7oG1QgIoVh2ajHLHyoiYJvgvi0UC+Rk4IFlMMwrW/sTHF+XS0Zho4AA
NPp3fV4QhiWNmDBq+YGkA0ldmYnMVC9FNjQM3DS3ZlXUbu4MHyUHQ0XkTzKUT7wa
gtDoQldvF7uK2x0ApXXBqX1sS7vqu1SCGpiLY3hlSUUAPcB+TNP761XOx32FHo4u
v3G0YunbIbGlyuaJoot0ClKyYmkhFfeYtVzrPELleHX215bamfQ9Oa3qIJFoAl6a
Ma/+UlOL2km3VYgnfSe0VOdSwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLdY2dO
G7JDPPZMHXsovfouAtTRMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx
RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT
bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO8myB491inFOobOxuQTH2nBLZmbsslC+9QzbWMG2EtnFkbE4vLhkb
DUjzWI93rIABKGKI/ynBJnqRYxP5/422hPK5D5Q1CcEp+SvBXqYg5sob2jFZ6Lvy
AqGnWvZ61DFKemNLEpq8zjPpDNrenVc1V8/Ttmvy5kJyUUNAP65cuNNhm93MQS/M
Df+fQji08Ped8w7WOb8eJHDO/tKWznP5vTF0TBKgORgk0mJV+ajboYUjc2uYIB6Z
S9/DJPiCcYduPAK91QnhtqU7W5gTHImmP8X1thjgkR3gCtGMcSqRWueSx/yys/VW
JqDtFgRVT21nngDDKYCEEjKKvztxNsJh
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:59:07 2025 by rpki-client