Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
File:                     Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft (raw, json)
Hash identifier:          oRPXzlaOh7GNHLFCkgk6HWoyPRZoIH/WljmZ6k/Hpe0=
Subject key identifier:   DA:17:42:6F:1D:89:16:1E:A2:57:F7:53:DD:FD:0C:AD:72:F5:76:86
Authority key identifier: 5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF
Certificate issuer:       /CN=A9191202/serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
Manifest number:          0679
Signing time:             Wed 06 Aug 2025 22:52:30 +0000
Manifest this update:     Wed 06 Aug 2025 22:52:29 +0000
Manifest next update:     Wed 13 Aug 2025 22:52:29 +0000
Files and hashes:         1: Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl (hash: D/8EHMRatGW9HzLVBAasIdklCCo/zUXNF4TJF1VWeWM=)
                          2: 79395C821C4B11EC9D9F684FC4F9AE02.roa (hash: 5ED4qLbgW3ziI+9Du3f/y3T8zw3So567Zq8ZjhLDskw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl
                          rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 22:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191202, serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
        Validity
            Not Before: Aug  6 22:52:29 2025 GMT
            Not After : Aug 13 22:52:29 2025 GMT
        Subject: CN=6893dcae-7f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:9a:e7:62:7d:d7:d6:a0:f7:aa:83:32:b9:
                    7f:1e:dc:ee:5c:82:dc:82:2f:bc:0d:70:cf:03:1d:
                    09:b8:ae:73:ad:d1:0f:d1:b6:94:ce:a7:13:84:05:
                    06:7a:6a:a7:7b:7f:81:be:fd:6a:4e:e1:61:13:c1:
                    45:1e:49:04:6f:e9:e9:50:4f:e1:82:72:87:f0:78:
                    17:ac:f7:bf:e4:f1:68:bb:3f:6c:ee:d2:0c:f2:28:
                    39:6a:91:b3:b3:79:f9:bd:30:fd:df:08:06:f7:fb:
                    4e:b9:96:d8:68:e6:58:af:72:e1:df:db:51:55:85:
                    20:06:6d:1f:5b:63:1b:6b:0d:ee:c5:80:e3:2a:a7:
                    b0:9e:0c:2a:9c:95:f2:8d:16:36:bf:61:13:95:c4:
                    58:90:a8:80:72:e0:7a:33:d6:be:3b:d0:41:4d:7a:
                    43:59:ee:f8:9b:45:de:b5:22:ba:35:bd:3a:8f:61:
                    44:cc:9d:b3:c9:e2:28:da:c0:cf:44:cf:51:cb:c6:
                    11:e9:b6:f9:21:ca:6d:75:15:61:74:1e:13:b1:67:
                    7b:38:f7:51:aa:29:1c:4f:08:de:d0:33:36:ad:26:
                    2d:a4:f1:52:40:f7:df:c1:37:15:0c:97:4e:47:12:
                    11:79:89:f0:5c:f9:78:de:02:66:33:97:a4:98:6d:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:42:6F:1D:89:16:1E:A2:57:F7:53:DD:FD:0C:AD:72:F5:76:86
            X509v3 Authority Key Identifier:
                keyid:5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:89:e6:68:90:fe:40:4f:e5:f1:cd:1c:93:6e:c5:f1:62:
         7e:5b:41:c3:b0:ab:cb:7a:ab:c1:57:44:29:01:c9:03:f8:ba:
         16:aa:c4:83:44:19:7f:b5:a9:fc:14:7f:b6:9e:15:14:36:1f:
         ec:fc:20:46:6c:1a:21:34:be:2e:3a:b8:59:47:d4:28:03:4b:
         18:cd:90:51:e0:79:e3:bf:14:12:e6:0d:26:10:1a:4e:2e:44:
         cf:9a:35:41:0d:a7:e2:f7:49:d7:22:2e:58:e7:62:fd:fb:4c:
         66:b2:1c:3a:7b:e6:c8:f9:2d:35:7a:68:52:61:71:19:8a:6b:
         f2:50:33:dc:ce:8b:46:e9:37:50:09:46:d0:64:46:41:bb:36:
         50:95:a1:7a:3a:27:a0:e3:bb:93:79:fd:26:a0:f2:b8:0e:a2:
         1a:08:f1:c6:d9:19:5b:a1:7f:f2:4a:93:f6:a1:7b:af:e6:22:
         4e:cf:e7:47:fe:e6:c8:de:c8:7a:4f:ae:d0:51:b4:11:92:fd:
         75:e9:f5:13:80:f5:bc:79:14:40:d0:fc:60:44:48:f5:15:d5:
         b3:6b:16:ee:9d:af:63:41:df:29:82:50:20:0b:e6:3c:00:86:
         8e:d2:4e:f4:4b:70:2d:7d:97:ac:0e:65:6f:4b:cd:c1:86:de:
         50:cd:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:04 2025 by rpki-client