Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          NNTQB5YQSdmw3OWPMbvPPvJ9pmWq9vB0u9AP/7oo9NM=
Subject key identifier:   81:F9:D8:9C:BD:38:30:A1:57:1D:AD:E7:D6:30:22:52:CA:DC:C0:9D
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          0125
Signing time:             Sun 07 Sep 2025 05:10:33 +0000
Manifest this update:     Sun 07 Sep 2025 05:10:33 +0000
Manifest next update:     Sun 14 Sep 2025 05:10:33 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: 7A7bUJ3r36VF6YbMPuUKdaRf07aB5sDx/OXc1g9sSsU=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Sep  7 05:10:33 2025 GMT
            Not After : Sep 14 05:10:33 2025 GMT
        Subject: CN=68bd13c9-c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:73:b4:bd:3e:e2:20:6c:ac:36:96:87:f4:
                    03:f2:c3:aa:b9:77:3d:63:9e:c5:c5:99:3c:e0:1d:
                    1c:a8:46:97:6e:2b:9e:4c:04:74:70:ad:3f:5c:05:
                    4c:55:1d:1b:16:6b:d9:7b:aa:85:7b:86:e3:34:e5:
                    a9:ff:10:17:f6:1b:52:23:02:db:00:78:3a:78:84:
                    d3:fc:77:61:27:dc:9a:54:97:e1:22:1a:13:f6:d9:
                    52:83:cb:b0:80:d8:a8:46:2f:f7:ea:14:d8:4b:57:
                    46:50:1a:29:00:68:0e:31:e2:7c:04:c0:b4:c7:b2:
                    69:b2:a7:eb:19:f4:65:db:85:0f:a6:72:c8:55:f5:
                    f2:7e:5f:c8:9d:a1:f1:33:59:e2:f7:55:5b:98:34:
                    1e:d6:ef:f0:67:a8:46:0e:d8:d9:4a:e3:26:09:d4:
                    27:16:22:f9:0f:7e:e2:c9:6c:71:7e:02:90:31:ea:
                    40:e0:f7:f0:e0:53:05:e4:75:03:b1:fc:ca:82:4a:
                    40:f7:26:78:a4:9f:c5:ab:9c:13:55:fb:a5:94:6b:
                    ed:7a:c6:8a:fb:89:dc:3f:26:4a:74:99:bb:98:af:
                    41:0a:18:61:c9:a4:e4:13:4d:05:94:f0:00:bf:c9:
                    5a:f6:12:e5:33:86:75:e5:72:bf:ba:49:53:b9:b0:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:D8:9C:BD:38:30:A1:57:1D:AD:E7:D6:30:22:52:CA:DC:C0:9D
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:b4:81:0b:2f:78:6a:ad:be:0c:8a:71:09:1e:9d:cd:6b:
         94:80:ad:70:01:9a:ec:69:02:70:ff:92:3e:bd:ae:b0:cf:20:
         ef:41:71:1f:35:5a:7f:06:c3:ed:ac:b4:1d:2a:b3:96:69:9f:
         95:8c:54:12:94:66:ec:2e:c2:ff:49:74:02:b0:60:a7:24:0d:
         ba:4a:b2:3d:93:b9:97:96:b3:ab:46:66:7f:d5:23:94:05:3d:
         63:17:cb:7e:32:86:e5:c8:46:7a:2c:7f:40:66:d6:39:cf:2f:
         44:a7:af:91:ff:cb:bb:39:12:00:c4:75:a4:58:57:a0:57:fc:
         e8:f6:60:ad:ea:55:6e:30:2d:f9:78:a9:9f:cc:16:96:f1:42:
         62:fa:5e:22:82:8b:2b:88:58:44:cd:42:a2:40:0c:56:4c:7a:
         dd:bd:f4:50:2d:c7:67:e2:eb:9c:98:2b:61:74:06:44:8d:25:
         16:6c:70:b4:c3:1c:29:1b:92:96:50:85:57:7e:ed:c6:f1:73:
         e0:60:4f:5b:08:00:be:4f:8d:89:ae:6e:83:76:d9:50:26:7b:
         82:88:e5:53:d9:d5:92:8e:60:24:44:32:92:b2:c1:25:01:00:
         c7:9c:fc:a6:1d:29:f3:6b:cd:ef:79:c1:b5:3c:a3:6b:2e:86:
         45:80:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:28:48 2025 by rpki-client