Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          3clvi7ZJlc/sXUjhqo3+ZW2aZNsJfTAltDH2WExtDuM=
Subject key identifier:   F0:B7:B8:FD:12:A6:18:CB:FD:BE:B0:55:A8:FB:25:40:2A:7B:5A:05
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          98
Signing time:             Fri 05 Sep 2025 06:51:11 +0000
Manifest this update:     Fri 05 Sep 2025 06:51:11 +0000
Manifest next update:     Fri 12 Sep 2025 06:51:11 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: Gvrti2JOVYUfUwdAJwF3plztPhEUAV+nYFEtCZZ9SJ4=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Sep  5 06:51:11 2025 GMT
            Not After : Sep 12 06:51:11 2025 GMT
        Subject: CN=68ba885f-84be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:32:34:f7:31:6a:ed:d0:ef:f8:7e:aa:04:
                    fc:7e:56:46:a8:b1:06:9a:4c:5a:9b:45:6e:3b:d3:
                    c3:cb:6e:f4:e7:4a:fb:04:a5:a0:7d:49:ff:4a:c1:
                    15:e6:b2:fe:fd:23:49:a9:cc:d3:5d:ea:dd:0f:ba:
                    79:61:b2:7b:fa:41:d0:34:01:0a:3f:ec:71:ac:22:
                    70:ee:b3:bf:ce:34:d9:bf:63:9c:47:00:ac:fd:d6:
                    ee:f9:13:92:3b:f8:5f:2e:3c:73:7d:01:2e:bc:95:
                    ce:54:f7:f6:fd:f8:a5:f2:c9:bf:c2:f4:ac:ac:2f:
                    46:32:5f:b5:59:83:0d:42:e0:da:a3:74:75:36:94:
                    a0:5f:2f:bc:33:f0:b7:21:06:79:ae:e2:28:16:10:
                    1d:16:d4:61:0e:6e:06:80:31:4e:f6:ec:e4:e1:6a:
                    3f:5b:42:d1:92:87:39:af:c6:05:5a:a3:52:c8:b9:
                    02:c7:f4:91:0d:ad:43:a3:82:aa:32:d8:9c:08:00:
                    78:9a:8c:16:e9:21:e8:19:c0:a5:9c:1f:c7:7b:ba:
                    48:35:eb:59:39:93:a8:7f:6d:b3:17:38:b5:55:6a:
                    04:dc:22:83:f3:0d:d0:8c:0d:84:03:32:da:4a:d8:
                    6a:44:4c:6d:8f:b1:1b:68:5d:be:fa:78:3c:69:af:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:B8:FD:12:A6:18:CB:FD:BE:B0:55:A8:FB:25:40:2A:7B:5A:05
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:eb:b8:45:95:2d:32:91:50:46:d9:5b:06:8a:b5:f2:a3:
         2f:2e:43:3d:af:f2:e0:a0:c9:d1:6f:7b:b2:90:7e:a4:e0:f8:
         65:95:8b:c1:7f:22:97:09:e6:6a:5b:af:41:bb:4c:6f:d1:83:
         2c:ef:4f:49:db:b1:8a:eb:0d:b5:be:70:c7:27:fc:b5:06:8f:
         27:07:29:b9:c4:6d:fb:1d:23:db:0b:2a:29:b8:5d:1c:68:06:
         42:ef:c2:d0:7b:04:9b:71:de:e1:1d:a0:41:f5:de:8c:72:c1:
         54:46:74:b2:73:c9:f3:60:4a:b6:7b:06:41:04:14:df:c9:43:
         e5:ae:5a:5f:00:f2:84:52:9a:64:61:98:9c:2e:4a:fa:6a:df:
         f1:1f:17:5e:d4:cd:bc:18:0c:ec:76:b5:52:98:07:65:7a:47:
         f5:4c:19:46:42:14:ac:38:b2:92:6f:e9:44:8c:24:d4:7e:6f:
         b5:9f:6b:be:b9:3e:59:1f:e8:45:11:d5:65:b3:af:2b:d0:16:
         20:fd:35:01:49:7b:43:e5:44:30:76:53:9e:a1:e9:75:db:04:
         e7:4b:2f:b2:94:5a:5c:c7:dc:99:ab:23:89:d4:76:2c:1a:aa:
         64:f5:13:ba:99:db:ae:81:96:85:8e:25:5c:4b:0f:11:a7:2a:
         3f:d6:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:57 2025 by rpki-client