Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          u+HvQUaYfXWPgtWzhwJ5BNvFFEM+g0tPkMA/hjf2vTE=
Subject key identifier:   5E:F8:70:15:05:06:1E:FE:0C:95:98:C0:C6:56:74:EB:2E:80:AD:FD
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          05B8
Signing time:             Mon 04 Aug 2025 23:32:35 +0000
Manifest this update:     Mon 04 Aug 2025 23:32:35 +0000
Manifest next update:     Mon 11 Aug 2025 23:32:35 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: ABaUrTQoH9q1iFt7fj7D6G3biosQYDLXwBcXnMupENY=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 23:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Aug  4 23:32:35 2025 GMT
            Not After : Aug 11 23:32:35 2025 GMT
        Subject: CN=68914313-d0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:4f:cb:45:f7:5c:d8:9d:57:3c:22:40:a2:
                    46:51:d4:11:bc:23:e1:36:5a:d8:93:b6:b4:43:86:
                    8a:50:8c:5c:9d:79:a0:d2:94:e1:09:33:5c:6e:1d:
                    5d:bf:ab:d9:7f:90:00:1d:8a:02:36:31:2b:8c:2f:
                    d4:3c:03:ac:c9:90:16:84:be:97:6a:42:c6:d3:5f:
                    97:0b:d3:16:25:f8:1a:89:42:6a:3d:bf:ea:f9:11:
                    32:be:9d:37:93:b8:f4:5b:87:1a:c4:27:07:4d:d5:
                    d2:b0:0a:03:10:04:7d:94:53:7a:a3:84:2a:88:fc:
                    c2:3f:ab:a4:2c:48:36:4e:f3:a4:fa:ca:9f:90:e5:
                    df:96:0d:73:cc:6d:d0:f7:5d:ea:9b:64:45:1f:66:
                    ea:03:68:e2:fe:a5:a4:90:5c:ad:96:a3:e9:a8:f1:
                    aa:36:80:d5:41:17:0f:e2:51:89:ad:68:1b:67:e8:
                    a1:70:9f:cc:27:81:12:41:c7:a1:af:4b:88:a6:69:
                    04:d2:46:63:90:f7:b7:b7:e9:65:39:46:d9:8e:01:
                    81:3b:1c:52:e3:db:a2:53:ea:33:b5:ce:a4:f9:34:
                    4d:24:d2:32:3e:90:2c:52:a9:88:e3:f7:45:10:15:
                    29:71:a7:11:d6:1a:49:d8:ae:fa:69:1d:1c:eb:fd:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:70:15:05:06:1E:FE:0C:95:98:C0:C6:56:74:EB:2E:80:AD:FD
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:58:20:b2:70:db:f6:9d:d4:be:f8:14:60:75:10:ad:99:33:
         d8:ee:7b:f3:04:10:8b:0d:ec:eb:d0:7e:38:29:c5:a6:b1:c8:
         ce:c4:9f:41:9e:e0:47:8d:20:e3:c7:dd:dd:2d:c4:f9:56:2a:
         5e:0a:b1:a8:fe:cd:2b:29:67:90:d8:f2:56:e5:5e:c4:d5:fa:
         30:6c:14:3f:e6:1c:9f:9e:fc:18:d6:96:44:02:8f:28:d9:8e:
         8a:3d:7e:ba:ab:3f:43:60:a3:f0:f7:ba:b1:65:94:0d:90:b9:
         cb:16:d2:d0:bc:92:0a:ae:89:a1:20:f0:5d:4a:76:82:3c:b7:
         78:12:16:dd:e7:b6:09:8f:8c:b6:6d:d7:cd:85:c6:b5:af:a3:
         74:a8:92:b2:b5:07:f1:02:42:5c:8e:2e:14:3d:03:e6:ac:c1:
         b3:11:a1:6e:13:a1:d4:d6:9f:bd:d9:61:b7:25:db:ea:d5:05:
         a1:78:95:3b:74:63:a6:bd:af:5d:3f:d7:3d:54:67:f1:11:e8:
         fc:04:62:a5:9b:a1:b0:91:90:26:78:76:8a:8d:50:68:eb:39:
         39:8f:5b:ea:04:2c:bb:35:0d:15:59:cb:35:90:29:ad:76:56:
         e1:4d:e4:26:69:2b:61:16:a7:76:51:43:07:42:9d:1a:f5:c6:
         8a:a3:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:49 2025 by rpki-client