Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
File:                     Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json)
Hash identifier:          HQdbhXDHzXyDHaQipKZaIZlpddneSZuqun1e46el6e0=
Subject key identifier:   95:18:2A:25:E2:AA:38:D1:76:2C:6A:21:7C:1F:F1:F3:37:F1:CA:23
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Certificate issuer:       /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial:       06AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
Manifest number:          06AA
Signing time:             Sun 10 Aug 2025 22:13:15 +0000
Manifest this update:     Sun 10 Aug 2025 22:13:15 +0000
Manifest next update:     Sun 17 Aug 2025 22:13:15 +0000
Files and hashes:         1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: 3VLDT/t6M1eeqy6o1nOxZUhO4ru8EHSH4dVjtnttaAY=)
                          2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
        Validity
            Not Before: Aug 10 22:13:15 2025 GMT
            Not After : Aug 17 22:13:15 2025 GMT
        Subject: CN=6899197b-8981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:a4:d1:99:00:81:3e:2b:0d:94:1f:3e:e5:
                    00:43:20:90:d6:8c:36:c4:a0:b2:14:9f:d5:bb:d7:
                    bb:55:52:fb:5d:7c:2f:8e:91:65:7a:f0:2b:49:ce:
                    55:9d:ea:20:6d:ba:e6:f4:dd:0f:45:04:a3:77:4d:
                    a3:2f:8b:19:73:58:80:69:21:32:6f:d3:45:38:53:
                    a0:c9:b3:b5:97:ff:e5:06:1a:75:ac:17:3d:8c:92:
                    d3:ee:51:9f:3c:db:d2:15:f2:c0:fe:f7:62:cd:5a:
                    fd:1c:cc:a8:d5:d8:f0:1d:eb:2e:d3:c5:18:4a:90:
                    fd:95:d5:02:8e:ac:a2:55:b2:18:e5:e8:f1:d7:4b:
                    8f:1b:2f:60:c6:62:cf:9f:3a:d1:be:2c:8e:4f:d5:
                    3c:1e:c7:d5:9c:36:e3:43:c9:bd:dd:56:d6:32:fe:
                    25:2c:62:e3:c6:2f:30:f0:25:a2:3b:d1:ca:32:6b:
                    b6:10:af:e8:c4:52:c0:c1:2f:a5:6f:8a:db:c4:f9:
                    13:1b:b0:0d:7f:98:31:b9:59:27:3c:92:d0:38:cb:
                    99:d7:52:2f:e9:d2:2f:94:b4:4e:3d:a7:9d:0f:b0:
                    60:ac:a3:3a:5c:9c:0f:f8:fa:28:dc:80:12:77:dd:
                    93:d9:61:d8:96:8d:31:fa:ee:fd:0a:3b:78:4f:d1:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:2A:25:E2:AA:38:D1:76:2C:6A:21:7C:1F:F1:F3:37:F1:CA:23
            X509v3 Authority Key Identifier:
                keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:3e:04:74:c4:f8:21:e2:e3:97:4f:96:45:64:a6:40:fc:
         9c:68:da:22:f2:01:ce:23:29:93:4f:60:f6:c7:21:fb:79:5c:
         d5:e0:f3:a7:53:d0:5c:04:61:0c:97:f2:bc:24:d2:b4:e5:c7:
         67:a1:75:e4:18:5d:ae:94:1e:e1:40:90:27:df:f9:df:6d:bf:
         a7:12:29:8e:4f:0a:f5:43:97:18:da:ac:27:e8:a4:b8:3b:8f:
         31:c2:61:37:c8:71:06:94:7c:34:7f:08:50:35:24:94:9d:58:
         ea:c5:35:c5:38:0f:12:2d:b6:11:27:57:57:5f:a2:35:4a:bd:
         54:f1:03:ed:d6:33:16:79:e5:af:f7:69:ed:15:ab:7d:09:e9:
         09:63:04:eb:70:fb:69:78:89:91:f7:40:fd:12:65:38:64:0f:
         3a:e1:34:c5:ff:20:95:c0:c7:aa:f8:33:cf:ef:ab:6f:38:27:
         99:12:62:d4:36:a6:ad:3c:dd:37:f0:05:59:b0:7d:72:10:ca:
         12:3d:21:28:df:af:6b:fa:68:4d:ba:12:e7:31:70:b8:b7:01:
         65:47:fa:5e:5a:73:03:11:4e:fb:ff:2e:7b:5a:36:62:63:db:
         3e:ac:76:fc:c4:ac:a5:fb:5c:87:25:6f:8f:b8:6b:e5:c1:03:
         c2:9e:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:14:23 2025 by rpki-client