Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
File:                     wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json)
Hash identifier:          4M3c6PW7wZuo9SRF4nz73YaZzfYXnUAo5gkzOZd9aBs=
Subject key identifier:   57:C0:B1:D5:40:F1:5B:FE:E1:A6:2A:C6:B6:F5:14:ED:AF:8F:72:BB
Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11
Certificate issuer:       /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
Manifest number:          CA
Signing time:             Tue 05 Aug 2025 06:13:46 +0000
Manifest this update:     Tue 05 Aug 2025 06:13:45 +0000
Manifest next update:     Tue 12 Aug 2025 06:13:45 +0000
Files and hashes:         1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: zeXHFCuvY9vFai1E682zPPSVi9Rl6eC0Wyz/SDpu0S8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl
                          rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 06:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811
        Validity
            Not Before: Aug  5 06:13:45 2025 GMT
            Not After : Aug 12 06:13:45 2025 GMT
        Subject: CN=6891a119-0ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:eb:e8:ed:b5:8c:f1:d4:b1:f2:20:cb:a4:
                    54:3e:0e:b0:7e:9b:b1:23:bc:99:28:14:bf:9e:02:
                    3f:c5:95:17:b9:d2:c6:87:73:c8:f2:17:3d:9b:82:
                    a6:0b:27:95:df:e8:41:92:4a:ec:27:8b:b3:25:bc:
                    68:33:5b:8c:f4:6d:d8:69:83:29:23:9d:af:95:94:
                    99:06:ff:0a:e7:8d:be:0e:6d:20:53:0c:25:ad:51:
                    81:db:ab:bf:6c:31:aa:69:a3:ce:e9:6f:e1:21:fa:
                    98:32:be:52:b9:7e:16:7e:b0:3a:2d:fe:3c:35:4c:
                    0b:c8:a2:7e:7e:db:5a:84:4b:10:88:02:f2:84:ac:
                    ff:17:89:fc:94:cf:db:e4:dd:44:6f:a8:24:3a:0d:
                    f7:b1:d1:86:3c:a5:98:ba:43:b8:6d:67:af:26:c7:
                    5c:cb:e5:a8:18:66:72:0f:e3:c9:64:41:85:e1:60:
                    5f:a3:cc:a1:d3:7b:69:98:a4:26:00:0f:ad:46:80:
                    44:65:af:cb:9b:b6:91:fd:42:d5:ac:9a:62:6f:58:
                    72:79:43:26:e8:9b:ed:c6:47:d8:01:38:6e:99:46:
                    f1:bc:61:60:22:13:e0:91:d3:d1:a8:fa:b4:92:1c:
                    e2:7f:81:e5:15:54:16:52:dc:e0:57:d7:92:62:53:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:B1:D5:40:F1:5B:FE:E1:A6:2A:C6:B6:F5:14:ED:AF:8F:72:BB
            X509v3 Authority Key Identifier:
                keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:cc:44:16:3d:f0:33:5e:69:61:69:88:74:19:ed:ff:52:
         b7:f7:31:3d:63:37:18:f6:43:39:ee:6b:3b:03:3d:e1:43:5c:
         91:79:9e:70:0b:79:26:d3:f5:08:82:ad:fe:55:83:96:51:1e:
         75:b2:94:03:8c:12:51:b1:8c:9f:88:56:56:44:fa:93:f3:04:
         a5:42:92:19:67:a0:e7:2c:77:24:a8:e5:40:26:66:78:a9:74:
         5d:25:2e:8a:e3:d2:ca:f1:f5:14:e5:44:d2:3a:c3:c7:6b:2e:
         e0:e4:68:e8:22:29:03:6a:18:85:3d:3f:15:f2:f2:49:25:d1:
         0c:a0:7b:3d:72:06:8f:c7:6e:fa:f6:b0:76:2e:56:b4:73:a4:
         8f:95:6d:29:d4:00:2b:93:c8:0b:34:0f:7c:27:bf:24:ee:0a:
         9c:b6:e3:b0:bc:bf:1a:99:90:25:20:83:d8:54:b1:ef:52:11:
         96:9a:a5:e3:7c:0f:85:e5:c8:52:bb:8e:21:b8:65:72:36:10:
         73:a9:e5:2c:29:21:5a:db:3f:d9:b4:42:f8:13:7c:2d:db:e0:
         8d:47:06:0e:c0:98:01:df:60:6b:c7:eb:4c:37:7f:d1:39:f2:
         77:67:28:52:fe:a8:37:12:69:24:67:90:93:2e:e8:87:ca:9d:
         8c:b7:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:06 2025 by rpki-client