Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
File:                     WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json)
Hash identifier:          VV+G/1D4LsUkOY6UYaCXElLdafuC0i0TtrqZMAv1JJw=
Subject key identifier:   7A:51:6B:53:0A:07:6F:65:D8:B8:D6:13:7D:38:51:D2:55:D5:6A:A1
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Certificate issuer:       /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial:       0F7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
Manifest number:          0F77
Signing time:             Sun 10 Aug 2025 17:33:28 +0000
Manifest this update:     Sun 10 Aug 2025 17:33:27 +0000
Manifest next update:     Sun 17 Aug 2025 17:33:27 +0000
Files and hashes:         1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: dk2hceNSeqXnN1ThWdj6I84q1VB0oB9nAFjnFBztg/4=)
                          2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
                          rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3967 (0xf7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
        Validity
            Not Before: Aug 10 17:33:27 2025 GMT
            Not After : Aug 17 17:33:27 2025 GMT
        Subject: CN=6898d7e8-3a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:4d:88:90:61:ea:c3:26:4a:a0:56:f1:1c:
                    46:f9:cb:2a:1d:e4:ae:30:c8:5f:0e:d8:3b:84:5b:
                    48:7f:83:fb:42:43:0f:3a:28:a6:b0:1f:6a:d7:99:
                    ae:72:2d:fc:6d:9d:49:6f:b1:97:20:3b:f7:ed:2c:
                    41:20:dd:fb:cd:22:98:33:d7:34:3e:98:ea:ba:4b:
                    3e:c0:71:2d:ac:20:dc:b8:33:18:96:ea:7f:41:c2:
                    e9:50:c1:d5:51:bb:34:e9:dc:a0:66:73:fd:3c:00:
                    bd:37:b8:2b:5d:53:f6:cf:e7:29:55:fb:cf:f6:f7:
                    6a:b7:76:3c:73:0b:31:a7:03:00:f1:27:13:d2:77:
                    05:c4:93:76:e3:8b:aa:5d:2a:c4:53:a2:be:da:15:
                    77:71:e3:2e:ee:c3:fc:7d:fc:83:02:17:70:dd:af:
                    e7:48:f5:06:1e:23:17:8e:39:96:3c:8c:14:eb:72:
                    12:f4:c5:c6:d2:07:e2:f7:5e:13:9e:bc:44:35:e2:
                    d3:e3:a9:86:16:e2:9a:13:09:23:55:89:ac:cd:d2:
                    da:84:1d:f9:83:6a:72:14:2d:f1:a9:31:48:96:92:
                    aa:0a:fa:f9:ee:c8:42:7f:eb:4e:d5:a7:0e:45:15:
                    9d:67:89:17:17:43:f3:4a:da:5f:ae:19:04:cb:8d:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:6B:53:0A:07:6F:65:D8:B8:D6:13:7D:38:51:D2:55:D5:6A:A1
            X509v3 Authority Key Identifier:
                keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:6d:7d:1d:9d:b9:61:26:f8:f7:a6:a9:54:03:19:07:c7:
         86:cf:26:26:91:4a:ea:6b:20:27:3f:86:14:fd:3d:d3:03:24:
         7e:b2:ec:2a:04:8e:4a:b0:12:8c:15:46:44:83:ae:a7:93:a4:
         46:d2:63:fc:cc:8a:7d:68:21:54:6c:53:a4:89:99:9f:96:ab:
         7b:75:87:9c:69:de:c0:e8:34:89:aa:d8:da:01:7a:0a:10:e7:
         98:5f:be:35:57:3c:82:e8:8f:c8:bc:5a:fb:19:72:cb:54:72:
         6a:b5:ae:99:07:e3:86:00:03:70:50:17:a4:e1:e0:ad:f9:f7:
         f6:9d:ac:b9:ab:c4:29:71:3f:6b:3e:e1:d8:cf:56:80:1a:cb:
         71:02:2f:6e:2d:6f:8b:c9:2c:6f:42:ef:21:c7:11:10:f6:7c:
         29:9d:9f:61:8c:02:38:c6:0c:72:bf:eb:01:77:75:3d:d4:71:
         3d:8d:5d:5c:27:6e:24:61:28:77:a7:9c:cc:1f:5e:1f:e3:58:
         42:34:91:2e:da:69:2e:95:26:d3:e6:e6:9e:81:79:65:93:89:
         28:db:9b:28:31:c4:ea:84:9b:8e:3f:6a:53:bd:57:2e:0e:e1:
         ee:3f:d9:6c:d6:49:cf:6c:71:0c:09:98:9f:e0:af:7c:37:fe:
         1e:77:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:23 2025 by rpki-client