Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File:                     Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier:          WPeQh95vqdHl0DK8KZutJjlZmXT1ShKc6LytdTSprEY=
Subject key identifier:   64:56:44:41:1C:CF:DC:7E:30:F7:4E:63:28:DE:EE:BD:91:15:5F:21
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       06DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number:          06C6
Signing time:             Sat 06 Sep 2025 22:22:52 +0000
Manifest this update:     Sat 06 Sep 2025 22:22:52 +0000
Manifest next update:     Sat 13 Sep 2025 22:22:52 +0000
Files and hashes:         1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: jCIErtRgzbINPW9rXzx2sPe8Ol2Sy1zqAEIPY+JNrGA=)
                          2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: gkjZFv8+a1pInAhzOPTg4sqJj5qO4+TAvcYmCjz+nlg=)
                          3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: vTpHqcdtapOqI/Gsr+oA78H11F3thCsrtmSVIOkFq0M=)
                          4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: tEC8bz6FGj0t4tths2MmaU0LJkI5GmyVxPNnRw1U1sM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Sep  6 22:22:52 2025 GMT
            Not After : Sep 13 22:22:52 2025 GMT
        Subject: CN=68bcb43c-e695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:09:39:00:41:84:b7:36:a3:54:d6:70:c7:
                    07:c5:21:70:81:e1:3e:f3:34:09:68:fe:f9:f4:7a:
                    24:ae:50:03:88:c0:ca:64:be:2f:bf:c1:62:00:af:
                    6a:46:ec:3f:7f:1c:34:56:99:17:6b:e5:6f:46:b4:
                    e5:a0:cc:e4:08:92:43:4a:a1:24:56:a5:aa:2f:de:
                    a7:c9:6e:31:b7:ed:14:d5:82:d0:44:67:33:50:44:
                    60:e5:c1:cf:6a:bd:36:26:b7:f7:02:f6:eb:7c:b2:
                    9b:70:a4:9c:41:1a:b7:00:81:03:dd:2e:25:cb:0f:
                    82:e3:26:50:6f:5b:6b:49:3c:67:fc:99:20:ab:d2:
                    f2:b8:a4:25:46:ae:e5:c2:0b:eb:50:43:a4:99:e5:
                    1d:38:26:ea:ff:75:dc:44:b5:8c:d5:80:75:06:4c:
                    34:aa:d5:93:7e:04:2b:0b:4d:6b:97:73:c3:57:c6:
                    bf:64:b9:13:e8:64:5e:4a:fe:d8:2b:59:72:45:e0:
                    cd:eb:a2:87:24:a4:6f:b6:f7:33:c7:fe:48:20:80:
                    22:65:de:f7:bd:5c:b5:d4:d1:86:7e:ef:56:68:78:
                    18:db:04:7f:c8:aa:84:b8:f9:15:ad:85:8e:c2:df:
                    94:70:4a:1c:72:e1:c3:52:c5:35:cd:ae:11:ad:d7:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:44:41:1C:CF:DC:7E:30:F7:4E:63:28:DE:EE:BD:91:15:5F:21
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:ca:68:29:48:a1:10:82:38:93:e4:45:ea:dc:5f:b0:86:
         6e:bc:2e:ab:e6:12:6d:e4:9c:b9:e2:26:ed:1c:59:36:ce:a4:
         f5:d9:9e:47:26:5a:fb:b9:5e:eb:69:b3:22:3e:43:ce:55:57:
         fc:a5:26:db:a7:ea:22:43:d9:11:77:a5:2b:c8:fe:ed:e5:00:
         9b:bb:05:3c:e8:58:07:64:2f:da:64:33:bb:5c:0a:7a:53:be:
         a1:f7:c4:9a:a2:fd:34:ad:e3:a2:62:90:82:33:bd:10:c8:e5:
         9a:54:0a:8e:a7:f5:aa:ab:7f:e0:d2:92:e5:c4:af:3d:bf:82:
         a1:7b:1f:eb:43:16:ed:62:99:25:8f:71:e4:76:3f:87:25:44:
         b8:7b:5f:c6:ef:24:46:3b:fb:41:00:6f:32:51:b5:b7:33:b6:
         71:61:e3:b5:ec:9c:ec:e7:fd:22:52:dc:d7:aa:86:14:90:78:
         8e:97:b6:b2:af:20:fb:02:53:a1:3b:83:58:2f:94:63:8f:5a:
         43:83:4b:ce:90:c1:ca:5d:16:30:3d:c6:44:f8:1e:b3:d3:23:
         9b:33:3e:cc:77:23:9b:c7:57:b4:f4:43:c9:6a:57:a9:d1:33:
         c8:4f:97:18:39:6d:d8:55:a2:08:07:67:cc:95:07:4c:c5:91:
         c5:8f:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 21:13:52 2025 by rpki-client