Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File:                     1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier:          CVGkm44fgI6F6stawHYjHVShSG/EuVHMBOLbu8TPqjs=
Subject key identifier:   34:D5:78:C7:20:D3:8D:D8:92:2E:5F:F6:43:D6:62:6A:95:E6:F6:92
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer:       /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial:       34A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number:          34A8
Signing time:             Fri 08 Aug 2025 15:10:06 +0000
Manifest this update:     Fri 08 Aug 2025 15:10:06 +0000
Manifest next update:     Fri 15 Aug 2025 15:10:06 +0000
Files and hashes:         1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: uUV88peg1ef/mlcOgXl5FvjQpi5HgfomLesObdZGSlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
                          rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
        Validity
            Not Before: Aug  8 15:10:06 2025 GMT
            Not After : Aug 15 15:10:06 2025 GMT
        Subject: CN=6896134e-e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:a5:fa:4a:48:c9:c8:14:fe:8c:a2:c8:5a:
                    ff:ee:7d:f1:e9:c4:e8:5d:01:12:e6:97:04:e8:9c:
                    c3:df:de:f9:3a:70:60:21:c9:cb:95:c1:44:c9:9b:
                    f1:62:db:53:82:b3:87:c2:4d:0b:d8:a7:7e:37:f8:
                    5e:87:9a:1d:2b:96:92:7c:1f:ef:93:b4:95:21:5f:
                    d3:4d:f1:21:3e:69:e3:8e:3b:23:1d:49:56:66:bd:
                    c5:4e:61:5c:b8:63:32:98:0c:c7:32:da:fa:dd:fc:
                    c3:00:5b:00:a0:f3:e0:e8:11:11:cb:56:d7:09:d1:
                    2c:6d:15:40:b0:cf:c3:36:21:03:f2:33:7a:5f:78:
                    cb:02:99:8c:13:4b:db:e2:91:e1:5d:bc:81:9f:91:
                    9c:92:bc:9e:10:db:fd:2d:5e:71:95:16:f6:e7:9e:
                    ca:25:14:3b:f2:26:ed:ad:9c:46:d7:d7:4a:18:a7:
                    d5:02:3d:12:eb:05:21:b8:f5:af:f4:c3:57:d4:a6:
                    6f:9d:8d:b1:4c:6f:10:93:c0:b7:b8:c1:a5:88:4b:
                    73:dd:ea:14:78:f0:3d:2c:a0:86:f9:ef:46:9c:29:
                    ac:ef:9d:0c:16:c9:72:36:ce:c3:3d:49:a6:fa:f6:
                    25:14:92:92:f1:4c:d4:3c:94:0f:46:5b:eb:20:05:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:78:C7:20:D3:8D:D8:92:2E:5F:F6:43:D6:62:6A:95:E6:F6:92
            X509v3 Authority Key Identifier:
                keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:15:4d:99:e2:cb:b8:35:10:f6:d1:19:bf:b3:29:84:ec:
         4a:c7:51:97:97:84:11:bb:73:01:66:61:49:0a:81:f6:d2:a2:
         41:8d:f4:ce:25:cf:e1:97:d2:6d:5d:5c:15:c2:a1:0e:e3:4b:
         35:3f:aa:2d:76:31:0d:1d:e9:50:a3:d6:3b:6a:21:b8:37:f3:
         23:74:db:3f:8b:09:93:f3:66:2e:c0:1c:6e:d9:bf:f3:15:75:
         b4:16:83:50:c2:55:23:40:a4:6d:b2:b8:5d:6a:65:e5:03:c6:
         27:f1:e9:b1:c1:69:b4:13:0b:3c:af:a0:95:68:51:4e:42:3a:
         41:7b:8b:4b:31:bb:21:b0:c4:eb:34:27:d2:50:45:13:74:24:
         67:b3:80:75:11:23:fa:be:53:0d:d9:1e:73:37:08:6f:e6:ea:
         3f:bc:6c:89:7d:51:ad:84:df:e0:07:f9:5e:18:81:66:ee:e9:
         02:66:08:9a:f4:07:18:e8:08:51:9b:67:ec:93:a4:c7:d0:ce:
         5d:50:1b:f1:ce:58:2c:48:fe:77:7f:64:16:cf:a8:23:bf:4a:
         62:2b:14:0e:4f:3a:61:25:e9:97:83:40:dc:47:8c:60:fb:66:
         67:f5:d6:84:a7:90:2c:90:3b:19:67:ed:ee:07:13:ee:92:e8:
         0e:2c:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:52 2025 by rpki-client