Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          vY+lFqOdgvk4BTHiuavUnI/58/7y5k/kK9xSDvdy5Tc=
Subject key identifier:   67:4C:E3:3C:42:60:B6:B3:0B:9B:1C:F5:76:07:5B:6F:07:D6:7B:A8
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          06
Signing time:             Sun 29 Jun 2025 07:11:32 +0000
Manifest this update:     Sun 29 Jun 2025 07:11:31 +0000
Manifest next update:     Sun 06 Jul 2025 07:11:31 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: xOtKYlHtptaU3VFvvagZaGHLfscI3vTY1spizShDpgE=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 07:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Jun 29 07:11:31 2025 GMT
            Not After : Jul  6 07:11:31 2025 GMT
        Subject: CN=6860e724-1d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:5e:34:68:e6:bc:6f:b8:b1:c3:37:bb:63:
                    49:4f:bf:71:4d:6b:69:5b:be:0a:03:b2:a6:bb:80:
                    49:cc:37:d8:2b:61:c2:f7:d3:e8:34:fb:44:6e:47:
                    95:26:12:b3:93:c8:09:50:74:0f:b4:c4:63:79:f5:
                    d7:4d:c5:d7:eb:f8:7e:78:c2:ae:16:4e:be:95:b5:
                    40:bb:92:c4:71:e4:6d:ea:d5:41:07:5c:40:7e:49:
                    73:19:20:a9:08:8b:af:5b:2d:0b:e6:88:9b:76:60:
                    ed:40:1a:15:57:2f:04:35:f0:ff:fb:ed:c3:3f:e0:
                    86:58:2d:cd:ac:a4:74:23:20:c0:89:02:0f:94:01:
                    d7:70:25:d6:f8:67:da:3b:9d:db:d9:05:89:f8:05:
                    db:27:92:5f:6a:41:e4:c7:7e:d0:cd:dd:81:0d:20:
                    9f:ae:f6:03:8f:9f:ab:47:65:e0:ce:22:10:18:38:
                    2e:77:03:e0:f4:0c:9c:97:d2:83:46:b2:ae:48:ba:
                    c8:cb:1e:c6:94:bb:8e:ec:95:1b:88:71:6c:f8:da:
                    72:d8:80:30:39:f1:b5:76:8c:8b:0f:6c:d0:88:73:
                    e9:6b:25:fd:e8:73:51:0a:91:32:ad:dd:88:b2:1f:
                    ba:1f:d8:45:35:5f:50:ca:a8:38:3d:b3:64:38:08:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:E3:3C:42:60:B6:B3:0B:9B:1C:F5:76:07:5B:6F:07:D6:7B:A8
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:d0:ee:c2:d6:12:fe:01:04:d9:fb:db:97:eb:e7:d8:d1:
         45:05:89:e8:6c:8a:d7:f1:ab:19:5c:7e:c4:af:48:8f:82:41:
         d8:62:a6:c0:21:86:4e:f7:a9:c0:ac:7b:30:16:03:a2:23:60:
         89:fe:17:23:28:f0:1a:96:f5:c7:05:06:2e:16:3a:54:30:fe:
         42:94:58:f9:a8:91:cc:52:a9:69:f8:e8:22:02:7e:5e:78:25:
         fb:7d:70:09:e1:8d:89:0d:3a:9f:c5:b5:87:6a:31:b6:80:7f:
         c1:1e:22:59:f8:a0:18:01:f2:86:5d:93:d9:2a:cb:c9:6e:18:
         01:44:3a:cf:f5:4d:82:39:4b:1e:e0:76:8d:b0:30:8b:69:83:
         fa:9d:ed:c8:8d:de:bc:d2:e8:7e:39:8e:af:9f:8d:44:00:57:
         8f:09:e3:a0:4b:4d:ec:96:00:5e:ea:c6:46:73:0b:4d:bb:a2:
         3d:39:d1:ff:71:0e:84:51:8b:be:2d:57:d8:29:64:ca:a0:aa:
         60:e6:af:ad:40:d7:6d:51:75:41:ba:23:08:13:1a:07:49:3e:
         b4:d8:aa:58:bc:ce:f1:19:4f:2b:b2:d1:65:5a:23:fa:38:f3:
         e0:6f:99:7c:d0:86:f8:9c:56:5d:10:87:b9:19:64:84:6c:d3:
         49:5c:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:19:30 2025 by rpki-client