Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File:                     wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier:          ly05LC3lY2ctgJcIcrmi1FMvC9tX+dAlGBMMKYzpD10=
Subject key identifier:   EE:84:40:7E:A0:D3:6C:2D:FF:F9:9D:CE:73:44:AE:C3:6B:E5:87:E7
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer:       /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial:       2648
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number:          2635
Signing time:             Thu 18 Sep 2025 15:46:38 +0000
Manifest this update:     Thu 18 Sep 2025 15:46:38 +0000
Manifest next update:     Thu 25 Sep 2025 15:46:38 +0000
Files and hashes:         1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: IyBIZAfbcA6ApQNcgEthhCf2b7/Gf//C1z6ywijyr4c=)
                          2: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: pXwAyW9Hy/DMGmTjqX3G4l47uqWRP7c4rJmBKT94M2A=)
                          3: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: lIonHfcn1CuwQW3kN+S33JwTNW1MriZKXW51TfBozU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
                          rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9800 (0x2648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
        Validity
            Not Before: Sep 18 15:46:38 2025 GMT
            Not After : Sep 25 15:46:38 2025 GMT
        Subject: CN=68cc295e-b1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:97:29:83:eb:fb:3b:40:e3:1f:67:db:80:
                    05:ee:c7:18:25:14:f1:cb:71:7d:ef:8e:12:28:72:
                    67:15:91:76:bd:3c:3e:c3:18:cd:54:d4:65:7a:6f:
                    f7:61:9a:d7:5f:80:c6:cf:90:c3:c7:2a:fa:ff:0c:
                    a2:5a:ba:0c:76:e2:2e:3f:27:5c:5c:26:3b:b9:5e:
                    4d:71:9c:b0:cc:b7:1c:2a:54:42:ba:80:14:ca:67:
                    9e:d7:e3:bd:4a:c4:ae:3d:53:6c:fc:68:c2:9f:ae:
                    43:d9:2c:52:e8:86:0f:3a:f4:b3:5e:95:26:39:7f:
                    f6:5e:2f:71:d4:a1:b8:05:df:c0:6b:b8:36:70:5f:
                    9c:4d:f8:7f:b1:89:51:0b:f5:cd:3d:d2:83:53:84:
                    a1:88:fd:a3:16:17:ab:1d:d6:70:84:6c:f1:c9:07:
                    83:99:b9:cc:a9:95:f7:9e:a4:0e:6b:de:e5:e7:01:
                    00:8d:d1:1d:f7:57:80:aa:fd:70:3c:11:d2:b9:dc:
                    8c:ba:0d:32:a1:43:b8:fc:6f:6b:f8:cd:4c:0e:3e:
                    0d:40:62:d4:40:d4:e6:2e:91:d5:e9:ae:a8:22:9b:
                    f4:89:31:4c:3d:c4:90:b3:3c:c4:63:1f:c2:43:b6:
                    8f:ac:26:b7:28:00:8c:32:eb:bd:7f:be:40:aa:6a:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:40:7E:A0:D3:6C:2D:FF:F9:9D:CE:73:44:AE:C3:6B:E5:87:E7
            X509v3 Authority Key Identifier:
                keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:37:3b:4a:05:03:7c:c7:cd:78:ca:14:ae:0b:e5:a4:cd:
         34:90:58:04:65:6a:f6:3e:c5:cb:d1:50:05:eb:bc:91:be:c0:
         ee:1f:99:cb:85:d7:01:20:89:19:c3:e3:6d:5a:65:52:8b:86:
         9b:a6:3f:17:94:58:d9:99:86:af:c4:97:ed:52:43:66:13:dd:
         c4:a0:c5:45:a3:1d:d5:8c:da:17:c6:e6:10:44:6d:41:83:0f:
         51:ae:c4:4c:03:d3:a9:99:e0:de:a9:3b:c7:fc:37:49:90:cb:
         bb:9b:de:b2:62:04:5e:33:f6:be:27:cc:1b:e0:fe:1b:bd:59:
         5b:34:57:7b:c6:a7:5f:ec:af:94:6f:7d:9c:be:64:54:22:cd:
         f5:c8:43:5d:16:10:f3:51:45:3c:b2:fc:e0:f6:5d:33:d6:25:
         ca:f7:fd:a3:b8:ef:c5:fb:22:81:b4:1e:61:7a:54:74:fc:db:
         f2:81:5a:dd:70:21:9e:9f:91:e6:a6:e9:9c:89:24:68:af:04:
         2c:cf:01:c0:08:91:e8:b9:5f:96:a7:b6:3c:53:7b:ed:c2:47:
         de:28:5d:37:12:d1:b7:7a:5d:9f:e2:6d:9b:c2:d7:87:26:a2:
         72:0f:fd:62:35:be:29:52:a7:ee:44:91:e3:b4:20:e2:34:04:
         43:c4:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:39:44 2025 by rpki-client