Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          UH47Nyf9XDvAn3he6Ux6zjc44CT6rKKiCJfgvjMELlQ=
Subject key identifier:   4F:37:61:0A:5A:9A:61:89:D3:55:48:8C:BA:6D:A4:8C:40:47:8F:95
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          0869
Signing time:             Sun 10 Aug 2025 20:43:08 +0000
Manifest this update:     Sun 10 Aug 2025 20:43:08 +0000
Manifest next update:     Sun 17 Aug 2025 20:43:08 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: vbF/2eszdPj2AdOj4k+021GBLAY7zJhGNqrcXu8kolw=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: zFR7H0I05Qw/TO5ZHqVPc5vZPqDppqV5WtkiH3GvXLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Aug 10 20:43:08 2025 GMT
            Not After : Aug 17 20:43:08 2025 GMT
        Subject: CN=6899045c-ee0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:2b:f8:75:78:51:df:e9:a4:f9:de:f7:6f:
                    9f:c0:da:1f:ff:7b:f8:58:69:ed:58:8f:a5:da:30:
                    20:02:be:88:36:3e:ab:ba:04:ba:9e:f5:02:0d:7b:
                    6c:9e:cc:4a:bf:59:5e:ee:cb:d9:ba:e6:e7:a4:69:
                    da:88:ee:9c:9c:da:1a:4e:22:47:a7:9f:51:48:d5:
                    94:db:4b:cc:15:0f:3e:07:68:d4:05:e3:1a:b9:1a:
                    2f:e4:73:01:d2:89:d4:2e:fa:b6:cb:1b:1b:77:bc:
                    63:11:52:ee:ed:17:8d:52:d1:e5:88:61:59:c9:b0:
                    dd:6d:d1:2b:4b:0a:b3:ac:59:56:12:8d:bf:18:8d:
                    c5:ac:ef:61:d2:28:c1:0f:27:1b:ea:2c:12:8b:18:
                    ff:c4:67:f4:bb:78:1f:b1:48:c6:e1:ea:56:ad:f9:
                    08:98:b2:c3:c0:b5:2f:0f:18:70:6e:00:33:02:72:
                    55:5c:8c:60:92:de:03:7b:7f:21:7c:ee:fd:2e:82:
                    59:98:7d:56:8e:29:73:55:d6:50:a5:e3:b8:d0:f2:
                    3f:93:a9:68:c5:73:52:07:57:14:45:b1:32:da:2e:
                    aa:1b:5f:b1:c6:85:8f:6b:0c:72:31:c4:4a:c0:b5:
                    e0:dc:4f:d3:0d:8c:9f:e3:ff:07:12:ae:a0:45:d9:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:37:61:0A:5A:9A:61:89:D3:55:48:8C:BA:6D:A4:8C:40:47:8F:95
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:99:3f:c3:97:c7:63:f6:74:e7:85:81:05:b0:d5:e2:ba:
         3e:8d:8f:b1:e3:4e:85:e5:97:e6:7e:4b:1e:f5:6f:d8:6a:b6:
         04:8c:31:d5:75:24:aa:34:d6:c4:e8:f4:50:a8:78:da:16:c0:
         bd:b0:36:48:e4:d6:db:ae:4d:b5:c7:f2:a8:fe:03:5b:88:bf:
         73:72:cb:63:25:70:bd:1d:3d:51:ef:ad:4c:58:85:43:fd:bb:
         7b:92:7a:30:2e:ae:4d:8f:43:9b:8a:af:d3:81:71:eb:61:6d:
         3a:5c:3f:17:7a:a0:9c:32:da:48:24:02:ab:ad:a3:ba:56:3c:
         a7:98:bb:03:98:94:08:5a:01:f3:78:2c:bf:d0:fb:88:1d:e5:
         1a:a9:db:51:cf:9c:79:74:d9:76:93:b9:74:70:d9:31:0a:2b:
         7e:fd:20:09:df:4a:85:4c:3f:9a:c8:58:8d:89:f8:b1:68:74:
         67:35:49:e4:1a:e3:d3:7c:e5:5a:85:df:63:b9:94:7b:d4:1c:
         95:a7:b9:7c:de:6b:7c:77:a8:b1:fe:3a:ea:43:db:fd:32:44:
         51:ae:31:91:0d:5f:b2:52:c5:f9:61:f3:33:92:9b:0b:e7:dd:
         58:e1:e8:c0:c4:02:f8:a3:64:27:db:e1:8f:e7:69:ff:ae:0c:
         b9:0d:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:28 2025 by rpki-client