Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File:                     WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier:          CHcvfOUV6aDKuQraYCfEerVvc31fsXe9oTjjVigNb20=
Subject key identifier:   09:50:96:E2:30:17:A4:8A:F4:2D:96:B7:5F:55:1C:BB:43:75:30:1C
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       0609
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number:          05F0
Signing time:             Fri 08 Aug 2025 23:25:37 +0000
Manifest this update:     Fri 08 Aug 2025 23:25:37 +0000
Manifest next update:     Fri 15 Aug 2025 23:25:37 +0000
Files and hashes:         1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: Lc4d3NH36VfFZuvxL/5bhaNJkg9rOoLEyTMHoFPJdhQ=)
                          2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=)
                          3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=)
                          4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=)
                          5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: Aug  8 23:25:37 2025 GMT
            Not After : Aug 15 23:25:37 2025 GMT
        Subject: CN=68968771-4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:4e:df:fa:48:c0:70:e2:a3:a9:6d:cd:83:
                    df:23:54:90:dd:06:33:94:6a:fc:59:fc:e6:2a:87:
                    a6:e7:c9:9e:e2:35:1d:86:a8:fd:77:94:c6:1b:d3:
                    67:5a:45:e7:75:4e:50:6a:6c:dc:8c:11:50:75:b6:
                    d3:7e:a2:1b:40:94:93:e6:fc:98:28:0a:27:c9:a3:
                    2c:15:06:38:a9:fc:67:de:c2:8c:f5:d4:e6:0b:bd:
                    32:31:97:23:d8:f9:23:29:8f:b2:cb:80:e5:f4:57:
                    cd:d9:72:24:ba:fb:88:0a:6b:d7:90:1e:fa:4e:9a:
                    2b:60:cd:12:6f:00:4e:e6:5a:54:aa:1d:13:ae:97:
                    2d:be:50:b6:1b:a6:80:b7:a9:09:7e:d9:b8:24:d1:
                    67:71:54:f7:2d:dc:d5:6f:6e:73:e7:ff:7e:4b:0e:
                    3e:83:49:82:7e:e4:13:09:56:cc:f6:96:8d:49:2f:
                    1b:19:75:ad:09:a4:f8:f4:e1:fd:28:ac:42:4e:58:
                    5b:53:a0:f2:74:07:00:65:69:9f:03:be:c4:b9:46:
                    a1:a0:03:da:45:82:5a:d7:15:5f:20:d9:fa:41:19:
                    b1:90:a4:b8:27:d5:e7:fa:a5:8a:ff:5b:7b:1a:68:
                    50:0f:36:cd:0d:cf:51:17:68:46:50:ba:97:26:f9:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:50:96:E2:30:17:A4:8A:F4:2D:96:B7:5F:55:1C:BB:43:75:30:1C
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:db:4f:0a:83:17:8d:08:86:94:98:d9:5a:18:41:14:61:
         db:f2:ce:0c:dd:45:a8:96:77:c5:97:f3:41:2d:43:bc:87:db:
         29:d6:3d:f7:66:1d:d8:ae:8a:de:73:02:dc:35:59:f7:1d:6d:
         5a:87:a8:4d:ca:61:56:36:88:4c:10:a9:ff:4d:94:28:09:58:
         fd:77:1c:e4:5f:0e:7e:68:62:79:93:31:16:df:f4:9d:32:b2:
         79:38:3e:ac:05:ab:ca:5d:5f:b4:87:30:69:93:7f:5f:35:b4:
         53:6f:82:f6:2b:a2:69:a2:20:58:fe:30:3f:7b:37:86:b0:69:
         4b:66:10:6c:98:1b:4a:19:fe:c6:04:07:c7:06:7f:27:8b:00:
         95:46:cb:2d:a3:c4:bf:9d:4b:47:4b:74:4f:53:18:99:15:09:
         8d:21:b5:1b:d3:cc:ee:f9:f4:91:f6:49:2e:89:4c:b8:3e:e3:
         70:0d:77:36:ae:2d:12:6f:1a:b4:cb:a2:2f:68:c4:a1:b2:14:
         64:f2:58:30:7a:5b:93:a9:e4:32:0d:81:f1:95:45:fd:49:b5:
         32:c2:f1:7d:33:0e:a2:3b:5a:10:ac:3e:00:f1:8a:44:2a:b6:
         ef:7d:80:b3:db:68:b2:2e:84:b0:65:98:0d:c3:9c:bf:05:03:
         53:19:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:04 2025 by rpki-client