Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
File:                     WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json)
Hash identifier:          X4Go/d+2dL8uItQvbmxNFiS+KXAJemqzsb5BukaDHDo=
Subject key identifier:   E8:0D:48:B0:3C:4D:37:E0:B8:1A:5D:8F:34:14:66:D5:BD:CD:EF:EE
Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Certificate issuer:       /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Certificate serial:       1F30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
Manifest number:          1F30
Signing time:             Fri 08 Aug 2025 16:07:42 +0000
Manifest this update:     Fri 08 Aug 2025 16:07:41 +0000
Manifest next update:     Fri 15 Aug 2025 16:07:41 +0000
Files and hashes:         1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: 51d0XfVeV3SMqEdc1lLdDZC4LditWxC8Mj6ihO1a/ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
                          rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7984 (0x1f30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
        Validity
            Not Before: Aug  8 16:07:41 2025 GMT
            Not After : Aug 15 16:07:41 2025 GMT
        Subject: CN=689620ce-902a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:1c:37:77:0a:c0:1c:68:ee:c6:8f:8a:37:
                    55:92:59:a0:03:4f:41:1c:8b:72:55:7d:84:cd:32:
                    3d:0b:ba:1f:53:d0:3f:b8:df:41:28:7d:71:42:78:
                    71:65:d8:03:d7:4d:e9:ab:88:0c:b4:64:19:09:93:
                    5b:35:5f:54:f0:b7:35:90:0e:e8:87:8d:80:b1:41:
                    8b:25:0c:74:fa:35:2a:92:8b:23:f4:df:5e:06:7c:
                    fc:82:69:f4:45:cb:df:e7:be:7f:19:3e:fc:c0:89:
                    e5:ab:16:a0:3c:7f:9c:a2:ef:52:89:89:fc:74:cc:
                    66:c7:07:35:33:69:53:2b:ea:16:7a:e8:95:cb:e6:
                    b8:56:f9:fe:df:7d:76:03:90:db:a8:7a:86:87:67:
                    52:d9:b7:e6:bc:eb:36:3d:59:0e:1d:9b:65:a4:28:
                    e6:18:01:85:b2:70:18:f2:31:4a:4b:55:4a:26:70:
                    4e:97:00:b7:c0:a6:e8:44:80:e7:a7:ed:fd:e8:85:
                    40:9c:2e:dd:25:1e:44:fb:fe:82:9a:08:8c:03:52:
                    21:52:d2:ff:8f:49:80:62:53:d0:b6:9a:bf:09:96:
                    ad:41:5b:5f:97:33:f7:6f:ce:44:39:05:58:42:18:
                    dd:b2:45:28:f3:20:d1:42:4c:e0:e8:e3:cb:78:b9:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0D:48:B0:3C:4D:37:E0:B8:1A:5D:8F:34:14:66:D5:BD:CD:EF:EE
            X509v3 Authority Key Identifier:
                keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:ca:32:61:68:c4:e7:e6:de:d7:46:72:90:c6:37:86:9e:
         dd:1b:43:16:7b:d9:81:ee:3d:7d:1f:e5:a6:a0:61:6a:45:d8:
         21:4d:17:5d:64:e9:ef:5a:c5:a2:72:8b:38:f1:ea:64:aa:f4:
         6b:12:d9:9d:73:57:9b:dc:f7:44:c6:cf:9a:b9:65:1c:38:c9:
         79:78:f0:28:b8:10:4c:d6:8d:f3:41:d1:27:01:ea:60:f1:b8:
         e5:80:3c:e4:5e:98:34:07:f3:cd:bc:21:52:b5:21:f6:ac:7e:
         0a:18:5a:d7:e8:3c:9f:fd:2e:96:70:50:74:af:04:f5:55:04:
         07:62:ce:0f:68:a4:63:ae:41:fb:70:ab:01:70:fe:b1:03:36:
         a9:2a:0d:56:68:f9:6f:28:e5:bb:6c:df:9b:61:31:1f:22:4d:
         43:6a:46:a3:e6:3a:8c:3e:31:7a:45:27:9d:36:82:67:98:11:
         0f:bd:a6:4c:21:05:25:b9:21:17:39:3f:cd:cb:49:a7:6f:c6:
         5c:11:db:44:dc:e5:2a:86:35:41:db:25:15:2d:7c:57:de:61:
         84:37:54:32:71:81:fe:f0:cf:a1:16:f5:a1:39:1e:45:96:81:
         c3:6f:57:45:24:ed:77:38:46:7d:86:b7:2e:e8:88:1a:ae:32:
         ba:3f:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:01 2025 by rpki-client