Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          eUH6FrTCkCXMox9vShOw8jdZh4utDrb378Lo1QOX2Rw=
Subject key identifier:   31:4E:31:47:A5:49:0F:AB:66:B5:E1:F1:88:B2:CC:98:F5:E8:97:16
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       19E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          19DD
Signing time:             Fri 08 Aug 2025 16:32:17 +0000
Manifest this update:     Fri 08 Aug 2025 16:32:17 +0000
Manifest next update:     Fri 15 Aug 2025 16:32:17 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: U/Sx402xLMJLKtV5KGi0Xj1GxTQ9gXZBOcslzm28Uog=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6632 (0x19e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Aug  8 16:32:17 2025 GMT
            Not After : Aug 15 16:32:17 2025 GMT
        Subject: CN=68962691-6f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:c3:7d:65:f4:91:1e:1a:84:75:5b:0a:e7:
                    5e:1e:3d:e2:67:9b:c8:eb:82:b6:68:2e:7e:20:e6:
                    75:2d:56:70:02:75:13:7f:b6:22:d8:55:84:5e:6b:
                    32:f9:3b:99:11:56:f1:f2:fa:2c:98:da:73:3d:3b:
                    f4:ca:94:a4:a7:15:76:fa:86:b7:43:45:7b:fc:9e:
                    e8:d3:98:9a:ce:65:76:c1:bb:f7:f4:d0:fd:cc:0b:
                    3b:80:61:9c:0b:4f:80:94:43:53:07:df:41:c5:52:
                    8f:4b:1a:68:1a:93:75:3e:01:47:db:c4:0c:6f:cd:
                    3d:9e:62:65:9e:c8:20:e3:01:b0:f9:59:94:bb:c6:
                    9e:77:1d:27:d5:72:a2:46:aa:13:b4:e3:75:fe:bd:
                    b8:a7:49:e0:d0:74:c5:1c:ff:f2:64:e8:7e:fe:a9:
                    df:d3:9f:db:33:01:16:2d:c0:10:59:28:4c:08:09:
                    7d:e1:23:32:c9:eb:50:f4:73:cf:2a:cf:1d:bb:63:
                    66:d0:7a:35:2c:d1:45:29:ee:a5:cd:eb:3c:de:d5:
                    f6:5a:97:3d:ed:f6:e9:45:e7:b5:84:a7:7e:e0:0d:
                    6e:23:be:f3:6e:1a:6a:ee:5d:4c:b7:d5:d2:21:09:
                    02:59:05:7c:ca:ce:45:cf:b2:01:8f:41:be:20:82:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:31:47:A5:49:0F:AB:66:B5:E1:F1:88:B2:CC:98:F5:E8:97:16
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:aa:33:d1:93:c0:92:50:9a:2c:9f:65:03:db:45:fa:1c:
         bc:79:a1:5b:9b:81:bf:e7:ac:a5:aa:8a:9c:03:dd:8c:7f:22:
         c3:bc:b0:89:38:7d:1a:02:f2:c0:2f:4b:d1:77:c4:f4:ba:58:
         c6:16:c0:60:83:9d:c0:03:75:6f:80:26:2a:21:38:7d:02:6f:
         c0:7c:c5:4c:57:1d:a6:81:d7:3c:5e:74:bc:4f:d0:22:31:bb:
         89:91:bb:94:73:5c:18:6b:08:3b:39:35:b3:51:bd:a7:8c:fe:
         f5:3e:ff:22:19:cc:06:70:30:cb:e5:43:bc:2d:74:ab:5b:a7:
         2d:55:b5:63:48:64:ee:3f:fa:f8:11:02:d8:21:f6:59:6d:95:
         01:cf:86:c4:bf:08:53:be:eb:e4:a3:6d:c4:99:4d:98:4a:82:
         b9:29:83:a0:be:48:4a:f6:93:67:e9:d4:c8:8b:04:16:ef:6f:
         bd:74:9c:7f:c8:72:55:17:c5:18:3c:52:48:2e:aa:73:d5:11:
         9e:fe:ce:2e:b0:0d:9a:5b:eb:e6:16:74:6a:75:7e:e0:4c:37:
         30:d0:56:db:54:af:3e:b6:a7:58:9f:98:61:85:a1:bb:b1:cc:
         4d:72:1d:41:a2:eb:a8:b9:07:7a:24:35:49:86:28:57:40:82:
         4d:fb:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:49:42 2025 by rpki-client