Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File:                     WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier:          oTIdR1Vx3cvwFazuRCzb9bE0f4dAG+N+uEwthQB0bjA=
Subject key identifier:   CB:19:DF:E0:E6:BE:98:BC:12:6F:22:11:16:21:91:98:CE:EF:27:47
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0BF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number:          0BBD
Signing time:             Fri 08 Aug 2025 19:16:08 +0000
Manifest this update:     Fri 08 Aug 2025 19:16:08 +0000
Manifest next update:     Fri 15 Aug 2025 19:16:08 +0000
Files and hashes:         1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: +MoV62PWV1K9xrsOxFDBaVriKDGugrDSY9C8zq5Fujg=)
                          2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=)
                          3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=)
                          4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=)
                          5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060 (0xbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Aug  8 19:16:08 2025 GMT
            Not After : Aug 15 19:16:08 2025 GMT
        Subject: CN=68964cf8-0e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:d4:40:ef:af:c2:d7:c2:e7:b7:1c:0b:dd:
                    e0:43:b1:89:c0:d0:e8:bd:90:ae:09:dc:7f:ff:f6:
                    33:f6:3d:3f:13:25:1f:19:f6:3d:b8:dd:89:3e:4c:
                    c8:c2:b0:8d:47:6a:d1:51:1c:d9:88:00:96:1c:67:
                    e8:4f:11:1b:c7:36:06:15:6f:0c:94:f0:4d:fe:38:
                    ca:4a:20:2d:52:4d:a9:ee:18:bd:5a:c1:ba:e5:5e:
                    a1:0f:85:47:3f:ca:cf:3f:d7:91:14:94:d5:67:81:
                    49:c9:22:a1:47:03:db:78:aa:c3:81:3c:63:2a:41:
                    25:2f:27:ca:94:07:c8:77:c1:f8:3b:66:51:79:bc:
                    43:01:91:a1:ca:1c:ac:49:cb:fb:c9:5d:b2:c1:a9:
                    2c:87:e6:d3:d9:4b:fe:f0:e4:d8:e2:ff:7d:d4:7e:
                    10:e9:dc:da:bb:e7:46:a4:1e:70:54:17:7a:99:36:
                    e7:ce:07:ab:1d:80:13:99:57:04:74:f8:aa:10:50:
                    6d:89:ff:31:30:83:76:8e:b5:9e:e2:f8:b4:17:79:
                    0f:fd:aa:1c:52:f1:16:4c:fd:fe:9e:60:9d:1b:60:
                    e9:6b:b0:cb:3f:2d:07:a1:32:29:61:ec:22:e2:86:
                    12:9c:a8:04:57:15:84:83:d0:5a:3c:17:00:4f:f0:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:DF:E0:E6:BE:98:BC:12:6F:22:11:16:21:91:98:CE:EF:27:47
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:85:72:d8:4a:bc:de:01:9f:06:46:2d:16:47:47:ad:3c:
         0a:61:e8:13:87:c6:5d:39:2a:71:93:87:15:22:df:73:11:7b:
         75:10:b7:1d:18:15:22:b7:13:34:5c:1d:e3:a0:6a:2c:a2:b3:
         ae:ad:23:09:84:36:73:f9:a6:95:ef:1c:be:6c:4d:37:b5:c7:
         32:ae:c1:a7:b7:fe:47:af:e0:f6:a3:e4:69:c5:43:3d:eb:12:
         d2:b0:2b:4c:6b:0c:0a:d5:25:2f:55:c9:a5:7a:ae:bf:9a:69:
         60:de:a3:fe:4a:30:63:30:6e:d1:b1:a1:9c:fd:89:03:85:8f:
         8d:60:da:73:82:fd:70:f9:d3:93:39:a4:f7:97:b1:6f:8f:5c:
         d4:46:de:59:a6:4c:89:a6:da:44:e2:ef:6e:a9:b3:29:7d:9a:
         db:41:0a:f8:8b:b8:bb:0b:60:b9:63:79:b2:e0:80:f3:47:d2:
         e4:ef:e9:7f:5a:47:ab:22:d8:15:37:e9:fe:c7:8e:26:4e:d8:
         e1:a1:3e:b0:0b:2c:58:2e:79:09:c6:4a:3d:85:33:91:64:f7:
         f2:8a:af:1b:82:de:43:4f:93:e9:56:fb:2e:b5:ab:01:e3:78:
         05:9f:fa:66:8e:25:9c:10:04:61:ba:03:c5:c0:a6:4d:6f:3a:
         dd:8e:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:37:27 2025 by rpki-client