Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          CLwXMW3DcVDKgWc3fHD9T58uhLC22skuTro6a2eZkDg=
Subject key identifier:   CC:B8:B9:0A:2C:6C:73:C7:C7:2C:5D:DA:D2:74:49:86:47:38:4D:49
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          D0
Signing time:             Fri 05 Sep 2025 06:05:20 +0000
Manifest this update:     Fri 05 Sep 2025 06:05:19 +0000
Manifest next update:     Fri 12 Sep 2025 06:05:19 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: 676DznuvGhBF7QJ7+BPmLfqL2v9K9B7bnbWmNotZARE=)
                          2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: TBUipL2P8MSxeJdmyHkFFj4NWEi8Gft5hKbk6IWxws0=)
                          3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: gEBFjX+SWG+/146/yxKK69X8BT9Y729yGD/qkGt7gqI=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: NKdc00VsoBU3WzQbU4FkleLin/aT7rGH2qhEdrMQw6Y=)
                          5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: YX0R72xh2Wv+PsOymTRXA/5mVC7q1Y9SjWtgUs9whWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Sep  5 06:05:19 2025 GMT
            Not After : Sep 12 06:05:19 2025 GMT
        Subject: CN=68ba7d9f-3495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:83:c3:51:15:6c:ea:5b:a1:48:38:f5:e2:
                    36:39:b0:1f:46:8f:02:3c:a1:b3:29:33:54:f4:c7:
                    67:f8:2f:90:b1:98:e8:ea:c6:37:34:a1:61:c6:28:
                    30:ef:09:db:79:fd:7a:76:b7:4d:15:1a:e1:e1:28:
                    ba:30:e7:30:06:13:6b:33:ef:2a:a6:69:cd:4e:09:
                    db:85:41:b1:ce:c9:31:4d:e1:ee:df:5a:01:7f:94:
                    62:5d:bf:5e:9d:0a:47:91:76:83:c7:d9:e4:16:3d:
                    20:f5:fe:f8:93:31:19:87:5d:80:62:89:00:ab:44:
                    dc:8f:02:d0:ad:2c:9f:9e:d0:04:a8:35:bb:61:9c:
                    87:bf:c8:35:c8:53:54:3c:74:ee:b9:69:27:f1:58:
                    43:81:cc:cc:ae:96:02:ef:ad:9d:5b:25:ab:fb:0a:
                    30:8f:49:4e:45:18:74:96:3f:0b:13:d7:46:3f:1d:
                    b2:c7:a8:28:67:e2:fc:74:fa:d8:ce:5e:a1:f0:32:
                    1f:2b:c6:80:61:9a:84:18:d6:c4:72:5b:13:20:51:
                    b9:85:81:4e:83:25:5a:68:94:ae:ad:35:fa:b8:f1:
                    a9:c6:93:22:44:b0:15:f2:91:ca:59:a7:ab:c9:9a:
                    a6:51:0e:46:4d:af:f9:5f:aa:65:f9:bf:63:80:cc:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B8:B9:0A:2C:6C:73:C7:C7:2C:5D:DA:D2:74:49:86:47:38:4D:49
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:eb:e8:46:26:20:4f:50:00:06:01:6c:cb:3f:b4:32:90:
         40:ad:49:ff:91:74:19:41:73:0e:dd:f2:04:d1:b5:f5:77:69:
         f1:49:47:f7:0b:7c:c6:29:35:9e:2c:8e:ce:bd:48:f0:b1:ce:
         0d:d7:25:c9:47:59:45:3c:99:82:84:3c:dc:fa:bc:0c:1e:9d:
         b8:9c:ad:04:2c:35:d3:bb:81:ea:a7:a5:77:1d:69:a1:fe:f4:
         dd:db:0c:35:93:c9:ac:fa:d3:ee:62:21:0b:60:d0:40:96:b0:
         a8:02:52:c6:c9:a8:23:e4:4e:e8:d6:e7:4f:ca:b3:e4:e2:5c:
         ec:18:dc:1f:1c:ae:45:10:fd:09:f3:0f:ff:75:2b:79:89:7b:
         1b:9a:b7:d2:a1:dd:81:98:d6:1e:28:05:a4:2a:2b:a8:d8:3a:
         b2:ee:82:8f:1a:5b:55:e3:77:cf:0e:68:8d:42:c0:17:c2:0a:
         14:7b:67:09:82:b2:ca:26:0e:46:f8:87:0a:a0:70:b7:6e:e2:
         94:ef:87:11:c4:db:26:ac:db:8b:70:48:8a:e9:47:e4:0e:7a:
         df:7d:25:9c:80:20:94:9a:ea:59:27:13:54:11:53:13:aa:9b:
         66:ef:a4:7e:c6:32:37:b7:a5:70:34:b2:f7:74:cf:31:9a:db:
         cc:2d:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:43 2025 by rpki-client