Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          CjXx8rR0mom1ano7PM+dr1DxKqwk/d3y8QFiv0rIji8=
Subject key identifier:   20:0D:97:24:49:96:24:45:EE:F6:E7:8A:62:17:33:3B:03:23:7B:CA
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          72
Signing time:             Thu 07 Aug 2025 07:25:50 +0000
Manifest this update:     Thu 07 Aug 2025 07:25:50 +0000
Manifest next update:     Thu 14 Aug 2025 07:25:50 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: Er90CYeA0t7vqtJwIUu6/3oh+iVAI20BW6+hOclpucc=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Aug  7 07:25:50 2025 GMT
            Not After : Aug 14 07:25:50 2025 GMT
        Subject: CN=689454fe-14f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:cd:cf:8e:c8:24:ad:6b:fa:ec:5a:de:f2:
                    2e:7f:5b:90:4e:6d:57:6a:78:8f:2d:5e:66:9c:14:
                    ad:a9:0b:e3:e6:1a:7a:f9:e4:ba:3b:d5:a4:e4:1d:
                    9c:37:84:16:99:73:24:c9:7a:22:27:2d:2b:be:11:
                    c7:b8:b7:15:a1:7d:8f:8d:31:d6:ed:7b:8d:79:7f:
                    69:0d:da:e4:c3:ff:18:ac:96:6f:90:13:b4:33:d7:
                    fb:ea:ce:6c:fd:29:72:ff:51:d0:c0:f8:33:2d:1a:
                    2a:80:cd:c2:19:c0:a9:fe:cd:20:d5:9b:17:39:a8:
                    18:d4:d4:16:0f:c7:8a:3d:c9:f0:78:e5:65:62:d2:
                    17:3e:cb:19:be:41:ac:87:b7:cc:af:98:1f:e8:d7:
                    e9:66:4e:c9:b2:a3:6d:0f:c0:45:ba:ac:51:be:2d:
                    22:0d:b7:a1:4a:9e:30:68:76:b7:46:80:65:7e:ad:
                    38:4e:9e:23:03:5e:e9:55:d9:71:9a:a2:2b:ef:82:
                    a4:85:9e:08:4a:2b:07:c7:08:1f:8c:5c:d3:a0:58:
                    dd:25:c9:43:7b:39:da:2a:5d:36:86:83:e6:43:ae:
                    c5:fe:21:28:ed:df:62:ab:47:b5:ca:e6:19:0e:a0:
                    e4:56:99:8e:5e:8b:1e:83:92:20:b3:c2:12:50:f3:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:97:24:49:96:24:45:EE:F6:E7:8A:62:17:33:3B:03:23:7B:CA
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:be:75:18:66:c3:20:50:7e:80:7e:00:12:60:d0:90:45:
         f1:2b:17:ef:bd:98:b7:e7:e1:4f:4e:89:c3:05:33:20:04:d6:
         91:cd:77:dd:16:24:50:d3:b0:5d:bc:ae:d2:96:c0:b8:d1:f7:
         5f:fc:77:c6:13:65:c7:04:06:ab:1c:ae:af:e2:6e:68:95:b4:
         f1:7d:aa:15:9a:f0:57:2a:16:df:88:9a:f1:c4:34:ab:ce:85:
         70:33:75:bc:b2:4c:90:f9:a1:70:72:09:6a:bd:02:93:c1:ad:
         db:74:e8:1b:e0:cb:bc:7e:ef:d2:50:12:d8:1f:d6:82:0f:c3:
         28:0c:56:95:9e:4a:6e:05:21:2e:7a:a0:a5:01:a3:b5:c7:18:
         24:db:74:1f:98:af:e4:55:b9:ac:0d:4f:2a:41:93:0a:35:a8:
         aa:f0:9d:1d:66:05:51:a7:e6:91:5c:a1:b4:5c:b1:3b:0c:6c:
         06:67:30:5d:d3:66:c1:56:b8:3a:e3:05:07:d7:c3:c5:ce:24:
         3f:84:37:f5:af:41:b7:95:83:33:92:7c:c8:ac:f8:4e:a7:54:
         79:7c:62:4a:76:2b:21:9f:17:80:2c:52:51:b8:10:23:9f:f9:
         c6:ed:84:36:70:28:ca:2a:d0:42:55:7d:1f:d5:14:b9:42:b4:
         e0:10:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:58 2025 by rpki-client