Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
File:                     wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json)
Hash identifier:          Q7/E4ytO9gCnYYcTsKbOyYgdilf3CGPaIMrCV6YDIPI=
Subject key identifier:   23:8C:0A:8E:89:BB:A4:EB:08:68:62:20:FE:7A:4D:D8:1B:89:9B:C2
Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Certificate issuer:       /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
Manifest number:          8B
Signing time:             Mon 11 Aug 2025 06:47:34 +0000
Manifest this update:     Mon 11 Aug 2025 06:47:34 +0000
Manifest next update:     Mon 18 Aug 2025 06:47:34 +0000
Files and hashes:         1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: PYJYCgrWmf3Vv6oyOXG6bBOFg+EohAroeaLgWtgDyBU=)
                          2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl
                          rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
        Validity
            Not Before: Aug 11 06:47:34 2025 GMT
            Not After : Aug 18 06:47:34 2025 GMT
        Subject: CN=68999206-e9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:23:62:cc:35:fe:af:21:70:70:15:ce:dd:
                    ec:8c:3f:04:c0:3a:d6:1f:6b:b4:d6:ee:4c:c2:1c:
                    4d:49:e8:17:32:31:4b:11:c9:43:cc:b7:85:25:ca:
                    9c:f2:4a:aa:87:57:6e:ae:37:ed:33:5c:48:b7:58:
                    42:07:7a:5c:68:57:65:c8:d2:23:94:29:26:b9:ab:
                    67:5b:5f:0f:fd:0f:0d:e8:2f:df:cc:1c:77:21:e4:
                    af:53:a9:f6:f6:19:cf:2e:90:f1:0d:0d:19:a4:41:
                    8a:91:52:7e:86:3d:85:90:e3:14:8a:25:bd:0a:73:
                    e2:44:6a:a4:af:db:8b:00:d1:fe:ab:45:f7:7a:19:
                    79:cc:78:d1:fd:4f:ae:f2:0c:e0:51:e8:ff:5c:d2:
                    7f:6c:de:08:2c:34:1c:6f:08:8a:de:9b:6b:2a:ce:
                    b7:e5:0c:6c:c2:90:8c:3d:e6:53:7a:1e:56:e1:d5:
                    ae:a8:92:c7:91:8e:8f:0e:4b:3f:99:c8:1b:51:6c:
                    ed:f4:de:0a:d4:0f:7e:85:fa:45:d6:60:93:3e:ae:
                    cb:98:0f:80:7f:ec:ca:b2:2d:ef:3b:48:ef:8b:7c:
                    23:81:7a:2a:ef:06:32:92:f8:98:59:bc:6b:1b:24:
                    c2:b2:51:2e:2c:29:96:c6:58:54:66:a3:43:c1:a4:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:0A:8E:89:BB:A4:EB:08:68:62:20:FE:7A:4D:D8:1B:89:9B:C2
            X509v3 Authority Key Identifier:
                keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:57:38:cb:3b:92:7a:42:38:18:e6:c6:8d:8e:c4:a6:f4:99:
         92:fa:17:43:4d:04:d9:14:e0:90:20:61:9d:5e:aa:06:52:1e:
         b6:75:5e:5e:e3:76:bf:05:31:41:02:4a:ca:f9:26:e8:21:d5:
         5a:4c:b2:90:c4:59:e8:2d:64:c1:fd:7e:6b:4b:7e:fb:6b:da:
         04:c1:ec:0b:55:3e:ac:46:ed:63:a9:69:bd:0a:6d:ca:59:5d:
         1a:17:67:47:60:53:fd:fb:8b:12:d9:94:73:67:f8:cc:9a:b0:
         5e:b1:f7:98:fb:cb:01:1a:e8:06:48:a7:d4:b7:01:5a:d6:58:
         81:56:a8:51:90:ca:70:f7:be:1c:c3:1f:34:fd:10:a8:25:e6:
         02:c2:2d:9d:93:09:90:f5:cd:5b:d6:9e:2b:f0:26:a8:47:c9:
         0d:f6:71:d1:b7:28:af:35:0a:fc:64:db:1a:83:47:b0:d2:e2:
         61:56:35:3f:aa:21:ee:ce:d5:21:69:c0:99:83:44:97:ae:00:
         38:ba:dc:92:cf:c7:f7:91:73:51:10:d3:ef:ac:2f:eb:bd:c3:
         30:67:5d:35:b6:04:3a:a4:e9:f5:81:4c:cc:c8:11:dc:ec:db:
         31:87:5b:d9:69:70:26:07:22:0b:d3:49:17:cd:e6:ab:51:7b:
         bb:f9:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:58:11 2025 by rpki-client