Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          JJf/ShbgNBHjPCagOrtVDzbJw0wHFpsbj/Kcbzei97Q=
Subject key identifier:   4A:8F:77:DC:DF:EC:08:50:5E:87:FD:64:7E:F2:69:1C:BF:CD:C0:A9
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          06AC
Signing time:             Fri 18 Jul 2025 22:27:43 +0000
Manifest this update:     Fri 18 Jul 2025 22:27:43 +0000
Manifest next update:     Fri 25 Jul 2025 22:27:43 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: FYy50XF7xtTmwrc+WzgWx8qdW7fjkdAjX7udRghwR48=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Jul 18 22:27:43 2025 GMT
            Not After : Jul 25 22:27:43 2025 GMT
        Subject: CN=687aca5f-6e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:0d:ac:9c:38:f8:43:12:11:87:27:53:e3:
                    7c:c0:20:7f:4a:07:d5:eb:f6:89:50:13:36:61:c0:
                    7e:69:37:04:88:82:65:49:1b:4c:7e:ee:be:35:ae:
                    dd:ea:a8:b8:bf:d7:1a:39:60:20:ff:e8:3e:ce:bd:
                    de:b8:d7:32:78:da:03:ae:47:18:d9:c4:7d:66:95:
                    6d:31:28:cb:5f:41:dc:69:f8:55:4a:38:4d:90:5b:
                    83:ae:0f:54:6a:34:bb:85:6e:61:77:8b:96:66:76:
                    0d:a8:d5:19:68:e2:43:d7:22:32:62:e6:c8:05:17:
                    fa:ec:dd:c0:57:e9:ef:72:e2:b1:42:c5:63:e6:e5:
                    0e:32:3f:60:48:fa:c2:58:85:09:00:c5:0f:8e:6e:
                    9d:a1:7d:a6:88:50:bd:8f:9d:ce:cf:0a:bc:e9:eb:
                    ad:2b:7f:c9:f9:35:24:48:2e:a0:24:68:10:fd:70:
                    a3:1f:65:41:52:c5:c6:be:87:b9:7d:94:f2:02:d3:
                    ae:a7:19:47:16:72:44:bc:77:8e:ae:00:69:08:04:
                    6a:fc:a2:a9:99:8f:61:dd:77:51:a3:94:05:39:88:
                    a6:0a:49:3c:58:7c:ee:5c:c7:89:3f:9f:b8:54:93:
                    b8:93:3e:ee:b8:cc:b9:05:7d:cd:54:98:ab:a9:cc:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:77:DC:DF:EC:08:50:5E:87:FD:64:7E:F2:69:1C:BF:CD:C0:A9
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:d5:59:cb:fb:16:18:3f:09:90:47:ed:ae:44:cd:bb:dd:
         87:da:47:32:ec:a2:b7:b3:4c:78:1b:c5:92:fc:b8:48:3d:b6:
         78:2c:8f:ec:81:c5:3a:11:b3:32:81:11:0a:14:4c:2e:3f:9e:
         52:aa:33:2b:36:7b:4f:4e:29:8f:d2:5d:74:d4:ee:c6:aa:8c:
         e0:8e:e2:e6:75:aa:f9:39:b8:7d:45:57:c8:0c:76:d5:51:26:
         b4:f2:a1:bb:3f:62:74:5c:0f:94:78:b5:20:99:d2:f2:12:48:
         5d:83:2d:65:e3:2c:a9:7b:63:97:58:8b:62:10:fe:b6:d8:a9:
         94:01:23:f6:69:93:ac:da:be:31:5b:34:5e:58:27:f8:95:1d:
         9c:85:25:68:d4:7c:03:f8:34:17:5b:68:b1:72:53:db:aa:d7:
         e5:e8:6a:4e:ea:d6:31:07:63:bc:48:d4:cb:d2:d7:fa:14:02:
         07:58:83:3b:b9:75:26:f4:77:97:05:89:d1:3a:20:bd:02:f9:
         da:26:93:a9:a3:23:21:cd:db:f2:5b:9f:81:be:92:12:87:89:
         83:5e:49:07:4a:40:c1:c3:a9:8a:d2:3c:41:5d:03:cc:47:ee:
         06:0f:cb:10:96:0c:8f:d0:1d:bf:29:58:7d:ce:a0:a4:3b:65:
         8b:e2:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 08:00:39 2025 by rpki-client