Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File:                     WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier:          eeDhvopB7T7/6skIcwGtj8esR7tEIcukY/druIjH6IM=
Subject key identifier:   5F:84:54:57:FD:70:09:F5:31:07:11:DB:37:89:08:93:2D:7A:D6:C7
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer:       /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number:          06ED
Signing time:             Sun 20 Jul 2025 22:07:13 +0000
Manifest this update:     Sun 20 Jul 2025 22:07:13 +0000
Manifest next update:     Sun 27 Jul 2025 22:07:13 +0000
Files and hashes:         1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: gjBO6H5l5dRHtwxW0jjlvrPLz9f0EAcSAjBuITYqMHo=)
                          2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=)
                          3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
        Validity
            Not Before: Jul 20 22:07:13 2025 GMT
            Not After : Jul 27 22:07:13 2025 GMT
        Subject: CN=687d6891-c1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:68:d9:93:f1:ad:fe:c7:ea:02:6e:66:f0:
                    79:ef:90:c2:22:75:6e:2a:37:64:ec:e8:e8:c6:de:
                    8a:fe:f1:6d:50:3a:9e:41:bc:98:62:b3:0f:d7:f4:
                    50:ef:1a:0e:0c:20:e0:4b:f5:16:19:f4:99:5d:88:
                    80:ad:91:53:10:70:be:fe:6e:b0:79:4e:6e:c8:c9:
                    06:2e:37:99:57:36:66:6e:94:ac:78:82:ee:8e:9d:
                    93:09:18:4a:16:ce:94:a3:6a:c8:ac:c0:7e:75:0e:
                    d4:30:13:90:30:38:43:cc:08:67:bb:7f:46:04:e8:
                    d7:ad:69:b0:11:a9:e4:d9:77:3a:f9:dd:95:54:78:
                    e5:b4:6c:77:a9:9c:28:b7:1d:52:2f:7f:fa:4f:df:
                    cf:a0:c3:d0:e3:2b:41:ff:d7:42:aa:ba:cf:92:31:
                    1b:d7:2b:a4:85:5c:1c:98:f9:01:a8:80:a2:e9:99:
                    21:4a:35:fe:77:06:83:63:db:f4:74:67:db:b7:a8:
                    e9:97:3b:18:f7:87:57:a0:cb:07:a7:dd:e4:3d:d1:
                    74:f8:5d:b5:e9:97:49:4f:7b:1a:34:27:a1:2b:c7:
                    91:92:fe:d7:99:a1:2f:68:7e:b0:b0:b7:91:38:bf:
                    21:b7:48:b1:7f:05:70:93:26:03:f9:60:de:40:b3:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:54:57:FD:70:09:F5:31:07:11:DB:37:89:08:93:2D:7A:D6:C7
            X509v3 Authority Key Identifier:
                keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:78:1e:bb:77:3c:5b:d2:45:ee:5e:51:cb:01:e4:70:d1:
         ce:b0:ae:a2:3a:48:cb:cb:04:bb:28:00:22:bb:6a:c4:f7:9f:
         e1:52:85:6a:57:cc:f0:09:6f:74:3a:fe:ef:90:bb:9f:40:a1:
         50:66:96:0e:71:12:04:d3:e1:20:63:89:66:b5:42:61:a3:d1:
         58:2b:11:60:73:67:2e:d1:e6:97:07:2c:fc:4a:5d:4a:dd:16:
         09:d1:86:62:1e:cf:8c:a3:b3:56:37:9d:e0:f5:b0:9b:e3:e8:
         08:db:c1:fc:56:32:75:1d:fd:08:1c:f8:83:ba:4b:13:2b:1f:
         de:af:10:cc:4d:bb:ee:9a:97:94:90:4c:ea:d1:76:40:14:b0:
         0c:5f:aa:95:99:68:2a:4f:04:d5:88:cc:98:56:e1:54:12:bc:
         41:31:b2:0a:c8:b0:a7:07:cb:bc:8f:00:80:fa:cc:18:a7:c8:
         00:d4:cb:f7:54:31:6f:72:89:0f:ce:0f:f8:a8:3c:c2:e2:0c:
         2f:66:89:e7:d7:73:b3:ae:d8:62:08:c0:4b:f4:26:00:59:db:
         b5:27:c8:22:bb:b5:30:44:f8:65:09:e4:19:18:65:0d:51:87:
         79:8d:50:3e:c0:29:d3:73:f5:b0:85:dc:28:88:75:40:25:f5:
         75:2a:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:31:17 2025 by rpki-client