Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File:                     wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier:          Lu6fUH6pydEnpQ17++w8NMgHD4+e0OSpwVYdTzse2kQ=
Subject key identifier:   01:9F:AF:CC:51:0B:34:3B:78:CA:7E:58:C7:AF:43:7F:62:F6:F4:F2
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number:          0504
Signing time:             Thu 24 Jul 2025 23:59:58 +0000
Manifest this update:     Thu 24 Jul 2025 23:59:57 +0000
Manifest next update:     Thu 31 Jul 2025 23:59:57 +0000
Files and hashes:         1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: LmCrloM8LJO2eZXoSqmO+EDHoq6eWC/1hwv5xRjgmJA=)
                          2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: zY32yJX3jzHsHVwyop2pV6zAgsbf1EOVZMtyU3SMaOA=)
                          3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: 5fcNDjODuX+Wud6BJhR1unaL4AuUrkvgumx1Eb2bLL0=)
                          4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: 7cDuXPQWcIW5Oc/4i0Jk6KxH1ssYqm1jhqIMrjbxO/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Jul 24 23:59:57 2025 GMT
            Not After : Jul 31 23:59:57 2025 GMT
        Subject: CN=6882c8fe-4293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:f8:fa:ef:95:06:85:91:4d:eb:57:47:52:
                    2e:1d:64:ec:7e:ea:17:0c:45:4d:91:31:90:8d:7c:
                    d7:fa:c5:ce:f2:27:ee:bb:3c:8d:4f:d6:d9:78:1d:
                    1d:f7:3b:62:7a:3a:b1:9b:54:f4:3b:b0:18:ae:fc:
                    07:7f:0d:5c:ea:e8:0b:cc:48:5f:dd:e2:4d:40:64:
                    73:c9:06:b3:9c:fb:cb:d0:00:41:d5:eb:a7:83:50:
                    79:8f:80:a1:68:42:ab:0e:34:c0:fa:c7:3d:d8:92:
                    db:30:05:8d:30:60:31:f5:7f:8c:32:98:13:32:f4:
                    01:8d:06:ec:5f:34:7c:da:ac:16:2c:c6:ca:31:ce:
                    39:b1:55:17:31:8b:4c:32:73:60:13:f2:41:4f:65:
                    dd:a2:7c:a4:7e:28:46:85:0f:be:59:82:7d:8e:c3:
                    e5:ab:8e:e2:a7:5d:5f:05:42:65:30:17:2e:f7:59:
                    74:72:84:00:48:ab:e0:cf:49:bf:3f:36:cd:d2:ad:
                    f0:37:83:b3:0d:87:2b:19:13:38:dd:f1:2d:a4:d9:
                    58:f7:b5:35:8e:3f:18:aa:df:44:f8:bc:e5:68:64:
                    df:30:99:3d:1e:62:cf:9e:a6:82:48:be:d8:9c:e4:
                    bd:b1:09:d3:92:c6:eb:21:ab:39:b7:dc:1e:65:8b:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:AF:CC:51:0B:34:3B:78:CA:7E:58:C7:AF:43:7F:62:F6:F4:F2
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:9b:a7:94:7a:ff:1f:ae:db:e0:05:ee:a5:23:da:65:15:
         6f:c0:51:9f:66:d7:01:68:48:10:d0:80:94:af:41:11:ab:75:
         85:ca:32:3e:bd:98:b2:5b:da:10:1b:47:cd:fc:2e:9c:44:a7:
         03:12:38:ff:ff:db:db:57:6e:28:f2:77:ee:08:28:4e:42:d1:
         cd:1b:0b:d4:a8:e5:31:9c:e3:11:18:34:ac:46:ee:92:e6:7f:
         fb:e3:96:56:79:50:06:62:51:31:c4:e3:85:9f:63:11:61:fe:
         31:00:61:69:68:26:19:1a:85:ed:dc:af:a4:92:a4:87:eb:00:
         f9:5d:fc:eb:67:fe:76:94:ad:98:09:ea:d8:3d:2e:2c:a4:a6:
         15:0e:95:bd:01:f9:58:01:f5:09:40:70:2b:d3:80:b7:4d:fc:
         5b:1b:0d:73:67:ae:bc:88:e1:46:a2:1d:af:d0:43:2e:62:79:
         05:20:bd:1e:0a:31:f0:79:16:92:d1:d3:72:40:fd:4c:cb:f2:
         3d:12:24:a4:d6:50:02:8b:dc:bf:8b:70:39:41:1d:f9:b4:44:
         68:a6:9b:cf:b2:e2:03:a3:25:6c:c9:68:f2:e0:4a:18:d8:d8:
         e8:e7:9d:1c:7c:9b:41:a6:12:df:97:e0:7f:6d:ba:e9:75:8f:
         87:d3:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:50:19 2025 by rpki-client