Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File:                     Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier:          z49jo+OZ3o/Q49fbZbPb/lvRbTI5b9aXhND7kRhYbcs=
Subject key identifier:   95:F4:EB:D1:A7:84:29:3B:6F:20:3E:0D:06:13:FF:E7:26:A2:85:94
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer:       /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number:          4E
Signing time:             Thu 07 Aug 2025 07:56:16 +0000
Manifest this update:     Thu 07 Aug 2025 07:56:16 +0000
Manifest next update:     Thu 14 Aug 2025 07:56:16 +0000
Files and hashes:         1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: DpmUB1psoAFu/5kU/bcgsuXkFZNFgEpAyF89On6M/fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
                          rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
        Validity
            Not Before: Aug  7 07:56:16 2025 GMT
            Not After : Aug 14 07:56:16 2025 GMT
        Subject: CN=68945c20-e39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:0d:71:4f:da:bb:1a:b1:36:80:98:07:ca:
                    00:16:7c:58:db:72:b7:bc:f8:cf:28:d1:c2:5d:58:
                    57:8c:74:e4:8d:9f:98:14:37:2e:fc:f0:cf:c8:84:
                    ff:a7:41:50:ec:20:e0:35:28:bc:9e:af:b7:ef:ff:
                    cc:7a:32:f0:de:49:08:73:1e:af:d0:60:ad:40:ef:
                    54:06:73:9f:59:ac:5c:d7:85:2a:72:2b:55:dd:71:
                    be:4a:ad:42:db:c9:6a:52:96:e2:e2:21:96:90:ba:
                    e6:80:1f:6a:10:b9:ce:84:9a:0f:61:55:89:1e:37:
                    0b:c1:02:3a:95:51:94:4d:8a:55:63:56:fe:ca:75:
                    3a:df:cb:01:5f:d2:80:1f:1b:ad:60:81:b2:a7:4b:
                    e8:b8:ff:d2:b2:3d:da:76:26:ed:09:5b:6f:57:b2:
                    b6:d9:01:3d:b1:88:f5:bc:6e:1f:ca:8a:ad:26:cc:
                    bc:22:92:69:13:dc:26:d9:45:f2:c8:6d:4a:99:6c:
                    64:f4:17:01:4e:e3:37:88:be:5f:d3:a4:77:03:2b:
                    3a:b7:c9:55:e5:58:06:e0:0b:71:9a:55:55:e7:90:
                    87:66:5b:91:a2:7b:5b:f8:fe:74:ca:0b:29:04:db:
                    9e:75:78:7c:fb:73:76:16:b8:2d:3b:ff:8b:14:e0:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:EB:D1:A7:84:29:3B:6F:20:3E:0D:06:13:FF:E7:26:A2:85:94
            X509v3 Authority Key Identifier:
                keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a3:fd:d7:37:0d:7c:c1:78:d7:37:22:df:79:bf:0a:4e:a5:
         32:2e:14:04:64:30:72:c7:d0:c7:09:cd:1a:19:86:04:b4:45:
         e0:f1:91:75:bf:53:9e:1d:8d:61:bf:b0:c9:00:a2:0a:30:54:
         d7:f3:72:4a:b8:36:62:eb:7b:33:d1:2c:7e:8f:65:6d:aa:9b:
         90:82:21:00:38:57:e1:89:53:8c:4d:09:76:a7:03:8e:63:8c:
         8a:ae:95:e8:c2:f2:5d:3b:df:14:e2:ac:5c:40:93:05:aa:cc:
         59:89:33:ed:ba:34:05:2a:0b:03:9b:1f:6e:cf:52:84:aa:a9:
         ef:25:c3:03:27:9a:40:64:cd:ea:b7:58:2d:f3:73:0d:75:ee:
         ef:7d:de:1d:68:4f:b1:d9:3e:d7:cc:e6:f8:af:ad:2a:4d:ed:
         7b:65:51:36:19:5b:44:f5:37:c5:b5:5c:d6:4f:cc:79:de:7e:
         15:6e:a7:60:0b:96:0f:b8:5c:d9:0f:f1:0b:b6:ce:f3:07:80:
         9f:e4:9d:f7:b0:39:00:cc:b8:20:df:d9:fa:95:16:eb:cc:be:
         ad:45:e4:60:9d:6c:aa:91:d2:2f:d1:2c:a4:0a:4f:8f:02:09:
         a3:36:bc:d2:6c:b8:0d:fe:81:2e:4e:4b:89:a1:14:b0:49:84:
         97:ae:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:48 2025 by rpki-client