Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          7RFtMzKonHV8YWiE/F86h8/7Whnrqgq4vHtuBKbdECo=
Subject key identifier:   3A:3A:35:CA:0B:5B:AF:EA:FA:F3:E8:C5:4C:5B:E0:16:C1:15:FD:DC
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          54
Signing time:             Sat 09 Aug 2025 07:42:28 +0000
Manifest this update:     Sat 09 Aug 2025 07:42:28 +0000
Manifest next update:     Sat 16 Aug 2025 07:42:28 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: cukV/cRBjFPD3K7q5QT9tDAkXURlxXTYMWeFbNdbvww=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: IcKmF13UvgbjR5e+pq74azw6DFKPoTGhWhM8VYVh+JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Aug  9 07:42:28 2025 GMT
            Not After : Aug 16 07:42:28 2025 GMT
        Subject: CN=6896fbe4-f759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:95:1e:05:09:af:33:12:fb:c8:d0:b0:2a:
                    69:4c:3f:2d:ab:75:a6:79:b0:88:3e:f8:1f:56:88:
                    92:ba:2a:74:39:1b:2d:c2:19:08:0c:bc:f6:df:ea:
                    8b:fb:f8:87:ff:cd:29:9f:15:5d:bc:ef:43:a5:09:
                    8b:bc:55:7c:59:b2:9f:d4:58:34:32:e5:9a:db:c2:
                    bf:ea:ec:49:21:4d:2d:85:5a:05:8a:a9:97:28:26:
                    de:c2:7b:6a:97:70:3d:f4:e3:d2:02:6a:08:4e:2c:
                    09:18:91:90:b2:3d:d4:21:2f:92:c7:2b:47:ee:ae:
                    f2:c0:e3:37:13:81:3d:e1:2b:ee:ff:da:3d:e3:1f:
                    ab:80:4b:e6:f2:7b:b5:d4:db:16:0b:66:a1:d3:a1:
                    c3:a9:cc:2d:96:e3:74:d3:45:22:9e:1b:b3:b3:fd:
                    b3:d4:b2:2b:d2:79:87:64:b6:ec:bd:65:52:2b:92:
                    62:46:32:17:b3:a3:2d:ef:ba:d2:9d:ee:09:af:1c:
                    fe:60:ad:de:29:58:bc:0f:2d:57:8d:b4:67:5d:66:
                    80:71:5d:1b:06:69:8a:cd:2b:4a:2b:e3:d7:0b:bb:
                    d9:75:41:bd:2d:36:6a:f5:c7:0f:55:c1:ef:3c:89:
                    ac:1a:bd:85:f5:3b:61:49:7c:ef:75:3c:14:a9:8e:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:35:CA:0B:5B:AF:EA:FA:F3:E8:C5:4C:5B:E0:16:C1:15:FD:DC
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f2:8b:0e:92:19:8c:45:9d:8b:80:af:69:f8:8f:f0:ef:a6:
         d5:41:e6:6c:6d:ea:0e:0b:f0:b6:f2:f4:e4:7c:09:d0:64:f7:
         82:8e:12:f2:c0:f5:cb:67:72:b9:16:4f:84:24:ef:b5:51:9c:
         92:54:d3:37:99:6f:a9:22:8f:c6:3b:13:49:86:fe:c7:07:ed:
         7f:80:d4:bf:10:b9:c0:50:c9:52:87:c2:7d:b3:56:64:03:cc:
         56:9e:83:c0:97:bf:7e:96:12:b4:3b:65:a1:15:2c:6c:b6:0a:
         6a:5b:09:86:3c:5a:c2:06:a8:be:7a:1a:8e:eb:3b:5d:06:db:
         a3:dd:5a:d1:49:7f:36:36:02:43:b0:13:7d:0b:c6:ca:e2:25:
         e3:81:51:6d:57:f5:ef:87:55:69:33:9b:3b:31:fc:0e:ba:ba:
         bf:b1:2c:7b:89:80:1f:ba:85:34:20:81:06:c2:83:3f:37:60:
         8a:84:c1:a8:9c:d2:ea:d8:2f:61:ff:f2:5b:b1:29:73:93:5d:
         5a:11:a0:aa:02:04:ed:e3:ea:7d:8b:d3:81:9d:d3:88:42:a3:
         b7:ea:6e:f3:d3:71:63:22:77:b9:58:a4:8e:d2:92:77:01:90:
         b4:55:be:09:c4:36:5a:14:62:73:57:41:11:c3:b8:91:fe:01:
         a3:9c:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:36 2025 by rpki-client