Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File:                     pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier:          lpiVt6gHvja0bJERcMktqS+t79cskTK48hI0rEXuktU=
Subject key identifier:   05:3F:04:05:1E:CC:6F:E1:AB:1A:BC:BF:E5:10:83:F7:77:C2:15:1C
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer:       /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number:          0214
Signing time:             Tue 05 Aug 2025 02:39:55 +0000
Manifest this update:     Tue 05 Aug 2025 02:39:55 +0000
Manifest next update:     Tue 12 Aug 2025 02:39:55 +0000
Files and hashes:         1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: PMZ/V5Y8TPpIKtdFp+uh9jD0XRLrbSEu6kGqA/5RFG8=)
                          2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 02:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
        Validity
            Not Before: Aug  5 02:39:55 2025 GMT
            Not After : Aug 12 02:39:55 2025 GMT
        Subject: CN=68916efb-6935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:19:fa:a3:6e:73:0a:cf:2c:3e:f6:63:54:
                    90:1e:28:7a:eb:d3:c1:3a:96:53:3d:ad:40:11:9e:
                    5b:93:e2:57:8b:19:13:07:98:f0:5c:ae:04:b4:23:
                    74:fd:3d:e5:01:7e:aa:fb:ed:a3:52:f5:aa:00:89:
                    7d:a7:06:ed:30:7e:ba:ef:09:46:7d:03:5a:9c:47:
                    63:15:9c:b1:f9:68:59:56:91:06:5e:fe:c8:73:4f:
                    e8:8b:6f:c1:2f:b6:46:b6:6f:37:a6:54:b9:87:f9:
                    96:81:42:0a:97:fe:be:4f:4c:62:ff:28:21:17:b6:
                    f9:83:ea:c4:47:93:c0:54:6f:dd:a8:28:f9:3c:15:
                    f8:37:c3:8c:0b:46:ce:0c:9a:9e:02:a1:e6:e0:5a:
                    02:cd:26:7a:96:3a:9d:21:7a:27:d5:91:05:d2:4d:
                    37:c6:88:a7:55:c0:73:9f:4e:f9:7e:8a:0e:9b:f3:
                    a3:f9:7f:e3:03:13:e0:61:1f:06:31:d1:0e:11:a0:
                    a2:f9:cb:85:b0:34:98:01:41:f8:71:75:96:59:ab:
                    bf:8f:4a:fa:bb:7b:7f:27:76:fb:02:ab:79:64:f3:
                    8a:8c:fc:1a:35:c5:0d:ca:d3:57:37:b9:02:5a:54:
                    42:28:50:e5:56:2b:c1:47:d0:6e:df:36:9b:f3:1b:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:04:05:1E:CC:6F:E1:AB:1A:BC:BF:E5:10:83:F7:77:C2:15:1C
            X509v3 Authority Key Identifier:
                keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:97:42:ea:1f:38:49:2d:5c:a5:ad:b3:0a:32:16:c1:df:
         ea:3b:5d:94:75:17:fa:4d:73:c1:38:bd:c5:db:09:c3:ae:89:
         5a:23:11:20:ba:f1:eb:d2:47:11:e8:02:8f:f9:91:22:f5:6b:
         14:54:13:8c:c2:63:2a:a1:36:a8:e6:b0:9c:1b:87:17:55:16:
         8c:f6:8b:99:ce:93:89:9b:c0:3b:22:0f:8a:f6:6d:cc:79:82:
         e0:d3:7f:d1:28:f9:2d:19:8b:ba:82:e4:96:0c:b3:0d:8e:a5:
         0a:eb:fd:1f:8b:e0:5f:2d:86:21:fb:e0:97:f1:7c:fc:d3:18:
         ae:0e:53:84:de:6e:4c:f9:9f:84:c1:a7:1f:9d:bf:d5:f0:46:
         f9:84:8e:22:26:38:ad:82:35:3e:c5:03:34:b8:2b:af:ee:da:
         02:b8:34:d1:f0:6a:00:76:52:cb:88:a2:b9:00:cf:9c:dd:80:
         f5:28:e0:97:82:90:b3:16:c5:76:04:55:67:8f:a2:7b:ce:ee:
         32:98:90:ad:66:fd:04:e2:a7:67:7d:30:c4:cb:7e:1e:f2:1c:
         6c:fd:a0:9f:42:0f:9f:e7:5e:a6:55:82:6b:b1:39:7f:e1:a7:
         35:f2:21:4f:39:33:e1:d2:b9:24:16:c4:b4:17:b9:58:92:54:
         be:a8:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:35 2025 by rpki-client