Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File:                     wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier:          DSZJtoCnQHgPszryRMvlb5LJR5iraJ69YYTsIpqCN5k=
Subject key identifier:   BA:E0:37:A4:A9:CB:A1:7E:22:F4:99:88:AA:8C:7F:2D:6D:F5:D7:74
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer:       /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial:       2632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number:          261F
Signing time:             Wed 06 Aug 2025 15:45:46 +0000
Manifest this update:     Wed 06 Aug 2025 15:45:45 +0000
Manifest next update:     Wed 13 Aug 2025 15:45:45 +0000
Files and hashes:         1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: CWFflXwt5goc6mmqgcs/cDF/Vm6pM4uJ+knkO7KLjW8=)
                          2: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: pXwAyW9Hy/DMGmTjqX3G4l47uqWRP7c4rJmBKT94M2A=)
                          3: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: lIonHfcn1CuwQW3kN+S33JwTNW1MriZKXW51TfBozU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
                          rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9778 (0x2632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
        Validity
            Not Before: Aug  6 15:45:45 2025 GMT
            Not After : Aug 13 15:45:45 2025 GMT
        Subject: CN=689378a9-50d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:49:ac:af:a8:46:8a:07:95:33:50:b8:fe:
                    dc:83:01:fe:a5:cc:66:5a:e5:5f:4a:1b:87:4b:12:
                    f1:bb:94:39:ea:e4:a0:e5:9d:cd:52:de:db:04:bf:
                    17:ee:b4:ea:8c:5b:b8:34:89:94:93:24:32:73:cf:
                    36:d7:74:57:ba:ce:58:d2:49:94:ba:2c:52:a1:4e:
                    f2:4c:dd:bd:fe:5b:ae:67:73:cc:69:a2:b6:26:fa:
                    74:df:ee:bf:45:6d:86:b0:f6:56:9e:7d:7b:40:58:
                    69:50:95:92:e4:7f:cd:9e:f2:1e:bf:fa:58:07:a4:
                    43:09:a9:e5:27:33:7e:6a:2b:9d:92:ff:6b:22:53:
                    9f:72:8d:af:ca:7f:b0:a9:80:da:7d:8e:80:48:42:
                    ee:de:45:1b:4e:3c:fb:0a:39:b1:d3:70:36:bf:04:
                    f7:ea:cf:49:aa:b4:73:17:fe:d7:9b:00:14:fe:5b:
                    3a:57:39:ba:28:e5:23:ce:1b:7a:8c:99:19:2c:d0:
                    af:d6:4a:60:56:ee:7f:e6:59:0a:aa:c2:27:c9:0f:
                    45:e1:d5:26:d9:44:33:46:b6:11:30:e5:d3:b4:b1:
                    7e:79:42:8c:57:8f:54:ed:60:6e:4e:ec:0e:8f:40:
                    93:fe:13:6e:92:37:28:38:27:98:b5:25:6d:2e:57:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:37:A4:A9:CB:A1:7E:22:F4:99:88:AA:8C:7F:2D:6D:F5:D7:74
            X509v3 Authority Key Identifier:
                keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:e2:76:04:50:3e:d0:9d:06:e4:95:13:0c:4e:5d:af:0a:
         8f:8e:be:49:77:e8:57:61:e2:b1:b5:c1:cd:79:fb:78:cf:6a:
         cd:53:2c:ff:e6:d8:8d:40:08:5c:e4:73:bc:cf:6b:05:44:6f:
         13:96:2d:b3:b1:31:f2:c5:8f:64:7f:82:ef:6b:55:56:49:ce:
         3b:67:3e:42:52:07:a5:c8:06:e6:04:0d:4e:8f:66:ed:65:bb:
         d7:f0:3b:a7:af:51:8c:6a:99:43:c6:78:4c:5c:03:18:49:4e:
         ab:c4:5f:46:70:0a:be:7e:d3:ae:17:63:e7:f5:42:2f:d5:3f:
         d9:29:46:85:02:02:86:72:33:a1:79:37:e3:f9:9e:03:c0:ef:
         ed:d6:e2:0d:a9:e5:69:c6:67:3c:0e:ee:eb:75:87:b9:e7:04:
         d4:d0:48:3b:1c:3f:4d:ee:15:71:37:05:db:c0:1e:f5:57:a2:
         5a:8f:63:40:db:2d:67:7a:bc:47:d2:ef:94:c8:f1:72:b0:8d:
         9d:2b:a8:ee:85:60:27:6a:dc:3f:8a:db:6a:86:f2:e1:10:7a:
         01:23:e6:22:64:c5:55:5a:3f:9e:de:a7:38:c7:3f:43:a3:0c:
         c5:89:b4:30:03:ed:2b:38:02:29:3a:4e:93:e4:2e:f8:79:8b:
         6b:f3:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:26 2025 by rpki-client