Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          4Q+4ztiaUgJ88oww5BDk8F7AqKtnbh2yQaq7QGqe89g=
Subject key identifier:   E6:59:D9:2B:A4:6E:8F:3F:31:56:1F:7F:A1:1E:CE:06:02:D4:13:9D
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0A0D
Signing time:             Sun 20 Jul 2025 20:29:51 +0000
Manifest this update:     Sun 20 Jul 2025 20:29:51 +0000
Manifest next update:     Sun 27 Jul 2025 20:29:51 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: N6QtD+dlwABH1Fb+QEi8as9WmIyj2+hKdi9cRSw3KUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 20:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Jul 20 20:29:51 2025 GMT
            Not After : Jul 27 20:29:51 2025 GMT
        Subject: CN=687d51bf-c53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:f4:df:b4:8c:89:10:e9:dd:a6:1c:28:d3:
                    0c:8c:21:89:3b:87:87:b4:26:5d:b7:70:63:8c:db:
                    3b:ab:66:28:68:21:a7:19:19:82:8e:3a:10:41:16:
                    7a:93:9d:da:14:b6:03:fd:f6:b6:6d:eb:24:fc:f9:
                    58:fb:fd:50:b7:be:0b:6f:78:f4:7c:7c:44:85:4a:
                    06:35:62:ca:f4:de:46:cd:bc:db:34:b3:ad:a2:bc:
                    dd:bf:5a:9f:01:0d:12:03:15:dc:5c:b3:35:f4:db:
                    6e:82:21:4a:3d:b8:9c:8d:62:40:f9:00:1e:6e:18:
                    23:fb:c6:4a:7a:c8:08:ee:18:ae:eb:78:36:9d:17:
                    b5:95:cb:4e:ac:b6:8c:fd:f1:38:bc:05:1b:ea:36:
                    0f:44:f5:14:db:e0:b5:02:7c:02:67:9f:9f:a2:ac:
                    b7:a5:d3:8f:2e:c0:4a:47:2e:0f:45:08:59:57:8a:
                    a5:1b:1f:87:e9:b6:a8:d4:d4:2c:62:a6:fe:a9:93:
                    5e:79:ab:b4:21:5c:9b:1d:86:87:85:d5:4c:e7:26:
                    3b:6d:be:d2:f9:f9:31:32:91:3a:b0:ed:a2:e4:e2:
                    02:a6:bf:95:ea:10:eb:c4:49:5c:4c:63:89:06:0d:
                    9f:9e:2b:ec:af:98:26:3b:46:64:6b:71:2a:30:62:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:D9:2B:A4:6E:8F:3F:31:56:1F:7F:A1:1E:CE:06:02:D4:13:9D
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:a4:c2:d7:31:39:c5:1d:05:1e:02:da:70:17:57:ce:0b:
         49:04:87:8a:96:94:00:33:d3:40:39:62:9b:49:7d:16:fd:42:
         f6:a0:7f:0b:60:11:a9:67:09:02:ce:30:a6:40:42:6d:09:c8:
         ff:7f:de:ff:eb:eb:9b:ff:52:16:4c:e7:a6:8c:1d:85:0d:19:
         5a:6c:7a:9b:a4:2b:4e:65:b0:66:93:c7:85:77:52:69:af:47:
         a9:ea:d9:81:a3:b4:59:a8:5b:9e:49:19:d1:1f:ff:6c:67:c7:
         1a:3f:6f:14:09:55:80:9a:27:00:28:9f:73:b1:13:67:7a:44:
         1f:df:c4:b5:69:95:83:49:d1:21:09:58:ec:11:57:12:77:ee:
         6f:73:2b:a4:9b:7b:3b:c9:73:b8:94:1a:ed:a4:f4:65:d6:93:
         1a:0e:f0:95:a9:de:1d:5a:72:72:4c:33:78:40:11:c4:75:64:
         ba:fb:fe:9c:18:45:4f:f6:15:26:5a:5c:50:54:b8:18:86:13:
         66:27:3d:92:40:ea:b1:31:fc:1c:19:28:2b:95:76:de:c1:d0:
         9a:ca:45:69:ba:03:02:f5:f7:12:1a:b0:62:80:17:65:e5:42:
         45:f4:a2:51:17:55:b9:1f:96:2d:c3:80:6d:52:49:71:05:6c:
         a3:76:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:53:29 2025 by rpki-client