Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          ilopHGngrsXTZSnI/dPEC6mI9DFzULTEm0DDtHm8Pyc=
Subject key identifier:   B6:1F:CB:FF:6B:87:07:FE:6A:28:75:C1:88:A5:C1:3B:61:73:11:04
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          EA
Signing time:             Fri 05 Sep 2025 05:52:10 +0000
Manifest this update:     Fri 05 Sep 2025 05:52:10 +0000
Manifest next update:     Fri 12 Sep 2025 05:52:10 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 4rHsc18zSv6JHAC7dXn5vwJ5Ce/bQkr/UZdaC3kTH2c=)
                          2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=)
                          3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: Sep  5 05:52:10 2025 GMT
            Not After : Sep 12 05:52:10 2025 GMT
        Subject: CN=68ba7a8a-8755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:f4:7d:63:19:e9:cb:82:81:77:3e:1e:8e:
                    d0:fc:a3:ba:61:18:e1:d1:43:68:c3:8d:d4:90:e5:
                    43:6e:28:75:d1:e8:64:a4:61:c4:65:05:71:05:fd:
                    e8:31:e7:22:3d:1e:b8:c6:50:de:56:46:44:66:cf:
                    01:43:c0:fc:0c:f3:5d:6d:7d:fc:2b:53:d6:57:60:
                    ba:96:d4:59:40:f2:2b:e1:5b:9c:79:13:64:c4:f3:
                    5a:10:5d:17:a9:2a:0d:a9:c7:ee:05:52:41:3a:0f:
                    1f:42:42:b4:bb:ee:f5:3a:17:d0:7b:eb:9d:b3:04:
                    f7:ba:77:e9:70:92:fb:b3:f9:ab:1c:39:0f:b7:a0:
                    01:a0:61:53:c3:81:f1:90:13:92:cb:1d:36:be:a1:
                    75:a5:65:38:a1:66:46:5f:66:04:10:97:76:fe:81:
                    c6:bc:43:ff:9d:8e:88:91:ba:f5:2b:60:9a:08:3c:
                    f6:a8:07:b3:0e:1b:6d:15:a4:ac:38:f4:68:30:3b:
                    98:c1:fa:83:2e:65:8d:ec:3c:83:09:8f:8f:91:23:
                    4e:ec:cb:3e:ce:5f:47:a7:92:83:81:4b:a6:01:4e:
                    de:12:a2:38:a2:e7:a6:71:ef:3f:5d:9a:7f:58:98:
                    7d:9b:b2:34:57:6a:e3:cc:ce:21:87:92:0d:8f:68:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:CB:FF:6B:87:07:FE:6A:28:75:C1:88:A5:C1:3B:61:73:11:04
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:5d:34:ad:d6:42:16:23:07:2f:70:61:e0:7b:19:8e:7f:
         98:e5:ac:b3:c2:0d:56:31:7f:13:fd:88:be:c7:43:53:5f:04:
         90:34:fe:9b:d3:4d:ea:4d:6c:15:e9:2c:bc:71:81:d9:78:34:
         65:07:c7:df:b7:e4:2c:2e:d3:2a:61:ba:21:ba:f0:ba:11:fe:
         b1:59:90:4a:86:71:95:d3:1b:c4:b3:ef:62:71:6b:8a:03:09:
         30:d9:71:10:55:38:7f:19:06:1c:20:b4:21:94:e6:68:a2:a8:
         6b:43:2f:85:12:ab:01:da:db:bf:1d:ab:58:14:f1:bd:2d:33:
         c7:99:de:df:4a:59:84:3e:74:32:4c:27:3a:6b:7f:24:77:d7:
         08:63:13:10:b4:d2:38:e9:ec:f7:81:58:8d:e3:ac:df:76:79:
         62:02:27:f0:4f:a7:40:6d:ef:b3:68:70:5b:19:ff:da:d1:0a:
         b0:8f:84:d0:b3:33:f2:42:e5:a7:56:02:cb:fa:31:59:b2:b1:
         be:21:0d:ab:d0:f4:36:06:b3:33:b5:dd:06:e4:6e:06:53:86:
         25:3b:08:5f:a6:3b:90:7e:98:b3:bc:d6:27:79:a1:64:f9:b2:
         e2:4d:ff:71:73:8f:0a:50:45:f5:86:e5:c4:a6:1c:dd:d9:fa:
         ec:be:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:12:17 2025 by rpki-client