Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          Q2ofFwGLAh+sM2OvrCTAhxgWnExp2j30/lX2tgi2shU=
Subject key identifier:   90:B7:73:6F:8E:F3:9F:4B:6C:47:0B:95:05:30:99:A8:90:E3:2A:AB
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          0648
Signing time:             Mon 18 Aug 2025 22:56:08 +0000
Manifest this update:     Mon 18 Aug 2025 22:56:07 +0000
Manifest next update:     Mon 25 Aug 2025 22:56:07 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: 5rEQ4iv71/J5haJXsgcM3zvOjj2NC4gjfkcAOHv1iLI=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: YIXSyV44XhAG1Lj7gtWc38+2l5HR5ltRFiBGyckO8MU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 22:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Aug 18 22:56:07 2025 GMT
            Not After : Aug 25 22:56:07 2025 GMT
        Subject: CN=68a3af88-2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:db:b2:9f:77:ca:fd:c1:03:d2:ce:d1:32:
                    9c:1c:80:03:9b:0f:2f:59:a4:9a:b0:44:d4:55:9c:
                    26:1e:84:95:ed:f5:e6:3c:ab:50:91:47:b4:00:62:
                    97:52:7e:42:40:70:cf:64:7b:1f:86:07:63:9d:4d:
                    a3:f1:90:59:55:1c:a4:d0:af:de:dc:44:73:5c:40:
                    16:35:37:cf:b9:81:5f:dd:c1:f0:3b:0d:e8:78:d8:
                    84:ab:4f:0f:7b:34:a6:ec:c0:8d:b8:2f:77:c0:bb:
                    69:67:94:99:a0:44:98:25:e2:81:c6:76:ce:3c:6a:
                    12:13:46:6e:ac:7e:7f:a9:24:95:00:10:a0:f7:71:
                    aa:2a:c8:e5:12:15:c5:78:a6:55:c8:55:72:1f:c1:
                    39:b2:5c:23:78:66:9a:cc:e5:28:d8:59:15:ea:39:
                    96:9c:4a:3e:c1:ed:fa:ac:98:98:81:a7:fe:1d:15:
                    51:c5:46:8c:a1:f5:9b:05:d7:c3:71:c4:55:6b:73:
                    2c:61:ad:43:47:20:67:8a:5e:d2:b4:30:eb:be:e0:
                    c6:14:e0:09:89:6e:25:3f:09:7a:df:f0:93:3a:1f:
                    11:17:a7:58:b4:8e:c6:84:d4:aa:e0:b1:35:16:f6:
                    46:6b:72:0e:88:45:b1:b3:0a:da:85:ce:ff:48:de:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:73:6F:8E:F3:9F:4B:6C:47:0B:95:05:30:99:A8:90:E3:2A:AB
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:bc:1b:e3:63:53:02:cf:87:de:89:ff:42:1a:0d:a5:8a:
         5c:69:9b:eb:47:1a:a1:64:9f:c4:0f:7e:c4:83:1a:9f:9d:c9:
         35:55:e9:e2:bd:8b:70:72:5d:a7:e5:7c:1e:27:8f:f7:8f:48:
         78:f2:dd:2f:81:ec:0d:89:e4:56:4b:ce:b5:65:11:83:bb:9f:
         c9:cf:d7:fc:1e:46:6e:b1:33:3d:24:15:82:ae:20:d3:45:e5:
         9b:cd:a3:d7:ed:f8:4a:3a:e7:0c:f6:62:f3:f3:41:54:8b:24:
         ad:1f:41:39:6a:b4:47:10:5e:42:43:26:71:7e:d8:b4:49:16:
         bb:8d:60:85:9c:5d:6c:86:13:1e:b8:84:45:d1:43:38:17:64:
         79:3d:f8:f3:3b:07:fa:c1:c0:9c:8d:a7:71:8c:c4:3c:38:32:
         bf:f5:22:f8:2d:46:9a:bf:e9:d0:57:ac:12:97:43:cb:77:44:
         0b:ca:cf:3f:84:6b:dc:ee:11:23:a6:e0:9c:32:60:4a:a2:2d:
         ea:bf:d0:09:95:da:88:36:0d:11:4a:dc:97:6b:59:c3:9d:df:
         f9:47:84:db:4e:4f:f3:e0:a1:cf:cf:a6:7c:f7:2e:89:bf:f4:
         95:2f:57:c2:2c:21:ad:5b:b0:2a:50:a9:30:c1:36:b6:33:5c:
         82:2c:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:37:19 2025 by rpki-client