Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
File:                     buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json)
Hash identifier:          sWquRcdU9COwqxbTS+UxbNzxxtO9s4U1EmkEh6kRGAU=
Subject key identifier:   EE:AC:73:2F:50:6F:A1:4F:96:70:1F:B0:4F:20:C3:EB:37:A3:20:B3
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Certificate issuer:       /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial:       05DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
Manifest number:          05D9
Signing time:             Sun 20 Jul 2025 23:12:25 +0000
Manifest this update:     Sun 20 Jul 2025 23:12:24 +0000
Manifest next update:     Sun 27 Jul 2025 23:12:24 +0000
Files and hashes:         1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: mgtj5dBxqRgtGzWbAWzO4q8lmy3m6x3aPUQnNM1qJwA=)
                          2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: vvGapGaGNGJH4S/SUbpLb9IjES+dem4UiH0RpBmA3po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 23:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
        Validity
            Not Before: Jul 20 23:12:24 2025 GMT
            Not After : Jul 27 23:12:24 2025 GMT
        Subject: CN=687d77d8-a97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:a6:9c:47:ab:dc:b3:33:f3:d3:d8:d4:71:
                    2b:8a:03:d1:2d:80:bb:b8:47:6a:8e:ee:a5:96:99:
                    7c:fe:df:e1:75:41:ff:f3:00:2c:5e:d5:10:4e:75:
                    da:26:d3:5c:02:58:66:df:35:85:86:0c:4a:d9:fc:
                    ae:85:fa:9a:2c:94:33:02:32:af:ee:dd:ba:0d:ff:
                    32:f3:28:44:b1:41:3c:b8:29:65:2e:96:17:82:61:
                    ac:00:e7:65:b6:b3:8f:d8:37:25:69:08:88:87:6b:
                    51:32:ad:e5:a0:4b:53:67:08:ea:b6:ad:ce:f0:3c:
                    e8:5a:84:70:ac:aa:ad:8e:b2:53:cb:0d:e9:ea:ed:
                    47:a5:43:41:93:00:b5:22:5e:f8:37:bb:f7:a0:05:
                    91:65:c8:58:58:a8:e5:7d:00:a2:27:7d:1e:9d:95:
                    59:4d:d6:14:f4:6d:67:f7:6e:53:95:00:c9:32:83:
                    95:f5:e2:e8:2e:5a:f6:3d:c0:0b:06:ff:e1:bd:3f:
                    13:e1:e0:9f:de:fd:6f:d0:5d:9d:9e:7c:07:4d:2b:
                    d2:e5:71:ab:4d:24:4d:cf:fa:ac:ba:d8:ec:a5:8b:
                    bc:78:b8:b8:49:fc:0e:08:36:5a:30:be:f2:03:f0:
                    e9:99:5a:fd:99:32:59:fc:8a:76:5c:9c:ec:7b:2c:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:73:2F:50:6F:A1:4F:96:70:1F:B0:4F:20:C3:EB:37:A3:20:B3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:9a:ce:08:66:66:1d:44:c4:a2:fb:73:6e:0b:4c:8b:42:9b:
         9d:84:08:72:60:b7:21:ed:f6:39:62:42:92:1c:8c:63:df:5a:
         3e:51:d2:9f:e6:ec:d0:15:5c:92:b1:06:b4:4b:07:b8:16:d9:
         04:80:80:05:9f:a7:e1:df:7a:16:c1:4b:3d:32:8e:9f:06:b8:
         ed:47:03:72:10:b8:90:18:84:bc:a4:bc:2c:aa:7f:e4:cb:98:
         15:08:49:0a:7d:8a:be:42:d4:3f:37:aa:2b:13:71:93:e5:61:
         0a:d4:7c:a4:d9:87:f4:5b:08:24:5e:56:a5:0f:5d:a4:be:51:
         ab:4c:ce:87:e3:9e:53:6a:d1:5f:15:e3:2f:fe:b5:d7:1d:c9:
         3b:24:95:e8:33:97:ee:a1:6e:dc:d6:5a:25:88:61:44:ce:5c:
         e2:95:18:cb:56:1a:66:fc:42:2d:75:9c:3b:5a:b9:ef:10:fd:
         9c:36:4d:ff:3f:d3:49:45:7b:03:af:58:c8:81:f7:33:87:12:
         e9:3c:12:52:a4:e7:d4:bc:cf:43:01:5a:87:ae:2a:e0:b3:ea:
         0a:bd:cc:c9:4d:36:d5:04:ad:fa:37:10:ed:55:2c:66:45:14:
         be:63:65:3a:22:f9:3a:be:3b:75:8b:18:cd:3d:78:0e:e4:d5:
         28:63:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:10:20 2025 by rpki-client