Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
File:                     wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json)
Hash identifier:          jhtoOb8iUZMBOxjmf1+EF6n/c5fErF2M/s1kBMNppy4=
Subject key identifier:   06:7F:DB:0B:CD:1B:A4:37:95:BC:BE:FC:62:93:3E:4B:1D:1A:02:8C
Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
Certificate issuer:       /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
Manifest number:          25
Signing time:             Sat 09 Aug 2025 08:19:35 +0000
Manifest this update:     Sat 09 Aug 2025 08:19:34 +0000
Manifest next update:     Sat 16 Aug 2025 08:19:34 +0000
Files and hashes:         1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: Ob0d17uvpTwstdU+t+ZNlUOYszdixM6tCfn3fDRD2DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
        Validity
            Not Before: Aug  9 08:19:34 2025 GMT
            Not After : Aug 16 08:19:34 2025 GMT
        Subject: CN=68970497-94d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:5d:01:6e:1d:70:74:76:7e:29:22:4c:a5:
                    62:70:05:67:b4:b8:42:2e:f6:e3:8c:fd:5e:f5:e7:
                    3f:f3:5c:41:73:d5:e5:89:2c:c9:e5:17:d0:c6:12:
                    05:5e:b1:7b:1c:0b:ad:01:6e:ed:76:50:4c:3a:3c:
                    15:19:ad:e0:c0:64:9f:82:bf:ef:10:95:32:52:9c:
                    30:5f:db:b0:b2:7e:32:78:a5:8f:15:07:ac:60:c5:
                    6a:bb:77:33:54:cb:c6:11:7e:2a:04:9c:b8:16:1b:
                    8c:8b:1c:67:31:85:32:4c:c2:ae:ca:3d:fb:e5:cf:
                    c6:c6:91:50:de:ab:9e:1d:8b:d8:76:0e:56:79:82:
                    6c:04:8d:8e:43:70:d5:de:e0:91:bf:fd:7c:2d:16:
                    37:a3:9d:10:ff:1f:0f:80:54:4e:81:34:dc:fb:69:
                    47:73:db:32:5e:b3:ef:f8:55:8d:39:da:ba:46:6a:
                    3a:00:1c:59:fe:c3:bb:e4:fe:39:a0:83:b6:27:89:
                    fa:fd:9e:8d:37:7c:5d:0c:8f:08:3b:56:b6:45:7f:
                    50:6a:45:c5:bd:19:dd:e0:87:c4:fd:d6:c0:10:08:
                    ea:8f:b0:b6:95:5f:8a:7f:67:3c:c3:70:71:e0:5a:
                    75:25:00:25:4d:8d:ab:9d:a1:79:29:02:39:a0:8c:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:DB:0B:CD:1B:A4:37:95:BC:BE:FC:62:93:3E:4B:1D:1A:02:8C
            X509v3 Authority Key Identifier:
                keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:c6:8c:51:3b:cd:20:15:f2:4b:b4:89:dc:f3:50:d0:bb:
         3c:03:65:6d:5f:f5:d6:0b:62:13:41:59:28:57:bc:75:80:92:
         d4:ea:ed:46:4d:b9:f3:f1:7f:72:16:90:3c:76:04:5d:63:de:
         1d:35:41:a1:92:1b:fb:0b:86:4e:5b:8a:6e:2e:52:95:31:d1:
         4c:54:c6:6c:3b:c1:d2:13:58:b4:6d:26:41:ce:1c:6d:ff:be:
         50:5d:08:47:14:88:27:60:9e:4f:00:95:8e:57:ed:af:42:d4:
         f3:7d:68:a6:d5:05:66:b5:aa:27:f4:38:f6:17:5b:1a:a0:3b:
         a1:7a:5c:2b:33:9e:89:52:42:60:d4:76:fc:56:68:7b:e4:3d:
         f3:48:05:c6:5b:03:de:7d:1c:bf:7b:71:93:84:25:91:e3:b3:
         5f:3e:80:9f:a7:54:9f:28:b0:2f:3b:25:90:64:bf:11:87:b0:
         5b:cc:21:d4:f8:a3:b4:c4:9c:e5:30:f7:74:d0:02:6c:4b:88:
         bb:6c:1b:40:60:08:bf:0c:71:1b:28:d2:99:82:ba:78:87:8a:
         7e:e7:18:3d:5e:d3:fa:a5:98:6b:50:bf:92:da:dc:18:9b:03:
         86:f4:01:1e:2f:58:19:a8:e3:50:18:4e:c9:b3:79:de:aa:49:
         e3:ef:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:10 2025 by rpki-client