Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
File:                     Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json)
Hash identifier:          R5opzQII9qKOVtFKCwANM2Zs8wIutog2iONtoxeq3lE=
Subject key identifier:   EC:75:C9:0D:D7:79:A9:E4:DC:8D:70:D7:5A:B2:84:7D:EF:11:44:D5
Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF
Certificate issuer:       /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
Manifest number:          0255
Signing time:             Wed 13 Aug 2025 02:24:22 +0000
Manifest this update:     Wed 13 Aug 2025 02:24:22 +0000
Manifest next update:     Wed 20 Aug 2025 02:24:22 +0000
Files and hashes:         1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: VL9FnPhaptnhm5fV709t+7DF/ZxBix460vFAtDNmcjE=)
                          2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl
                          rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 02:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF
        Validity
            Not Before: Aug 13 02:24:22 2025 GMT
            Not After : Aug 20 02:24:22 2025 GMT
        Subject: CN=689bf756-0f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:8c:a6:36:56:f9:3a:e7:ed:b0:7a:09:5e:
                    2d:44:9a:c7:26:4c:ee:70:3e:70:e7:af:7b:e2:bb:
                    8c:38:92:b8:5e:71:66:42:62:de:2a:9c:17:d6:eb:
                    88:87:2a:a7:87:13:89:b5:b6:a3:c4:57:d9:a1:7e:
                    11:31:e8:57:3a:3c:48:0b:5b:dd:c5:08:bb:89:a6:
                    f1:1a:5f:c7:f4:8f:f6:25:37:15:25:83:4a:a6:a3:
                    91:98:4b:4c:e3:0c:ae:a4:ad:cf:87:f3:a8:41:aa:
                    bb:65:21:07:79:34:1f:e6:12:c5:fa:ba:07:cb:56:
                    a2:2d:a0:85:74:de:c8:6b:bb:b2:27:6c:78:47:49:
                    55:83:09:6c:19:06:50:15:dd:28:24:3f:3b:d5:e4:
                    fd:9c:80:b4:ec:86:86:27:d8:c0:46:93:44:9a:67:
                    ed:9e:5f:84:be:74:83:66:28:b0:30:c3:22:9b:19:
                    28:05:26:ca:74:13:28:2d:69:6d:1f:e5:5c:28:5e:
                    3a:b4:85:0c:30:aa:4b:80:95:17:a5:69:c5:5e:4a:
                    4d:f4:f6:5a:15:4c:8c:2c:fe:d0:71:0f:c5:f4:35:
                    ee:5b:08:1a:cc:62:bc:c5:5f:62:f5:03:c6:4f:c3:
                    a3:b3:9c:70:98:da:ca:14:8d:20:c2:0d:96:a0:21:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:C9:0D:D7:79:A9:E4:DC:8D:70:D7:5A:B2:84:7D:EF:11:44:D5
            X509v3 Authority Key Identifier:
                keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:3e:4b:88:cb:1f:79:04:2f:46:dd:d0:57:d2:ba:0b:f3:
         ff:d7:a4:ab:c6:e4:fe:aa:78:b7:d4:91:90:15:64:41:3c:36:
         3d:ef:69:f5:4f:00:3f:f1:a3:1f:16:81:3d:27:1f:3d:7d:15:
         49:7b:4d:2f:a3:48:c1:e4:a2:5e:50:c8:94:4f:64:ff:6c:65:
         87:c3:c3:e1:3c:1f:a6:4a:df:f5:05:12:fa:2c:f2:4f:97:53:
         14:24:fe:9b:fe:96:38:92:be:a5:7d:58:88:8a:b8:5a:ba:d2:
         1d:e5:a1:9d:ee:8b:71:8b:2a:04:70:d5:ed:a0:50:b5:b5:ee:
         b0:c5:f5:a8:11:47:a1:5c:0f:71:2c:8f:03:35:48:97:b2:32:
         5e:c6:1c:d7:00:32:da:84:0e:35:d8:d3:b0:e8:1f:53:cb:01:
         4b:2b:47:a9:75:8b:13:5a:8d:9d:f6:8c:85:24:93:fe:44:d1:
         87:4e:c2:2c:45:ca:a1:a6:7d:bb:96:b4:84:b4:56:78:b7:de:
         fb:90:87:aa:6b:a5:f6:54:85:44:46:ff:c5:7d:c3:ca:f3:ee:
         4b:d9:6a:6f:c7:ee:b9:81:5c:5e:04:a5:22:52:a9:10:a5:6d:
         2f:35:cc:cc:06:15:4a:03:6f:6c:31:d3:30:5a:50:41:22:3d:
         93:bb:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:57:01 2025 by rpki-client