Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File:                     DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier:          fuN0KOSdwCLP4RS23gTSv7ytZwNfjl4kZc03OI78ta4=
Subject key identifier:   38:17:EF:01:97:3E:16:3F:02:A2:9D:6B:68:F8:1C:A8:33:63:56:6E
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer:       /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number:          0499
Signing time:             Sat 09 Aug 2025 00:28:22 +0000
Manifest this update:     Sat 09 Aug 2025 00:28:22 +0000
Manifest next update:     Sat 16 Aug 2025 00:28:22 +0000
Files and hashes:         1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: Cv6M7CgHYhPm9Pgdwyy8yQUyXLoho/nxkbJ3kUs8/q8=)
                          2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
                          rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
        Validity
            Not Before: Aug  9 00:28:22 2025 GMT
            Not After : Aug 16 00:28:22 2025 GMT
        Subject: CN=68969626-9ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:90:a1:04:43:02:d8:20:33:37:bc:45:69:
                    15:0a:8a:0a:51:b5:8b:36:9c:07:4f:60:bd:b2:24:
                    79:32:b1:9d:f6:16:03:f8:f4:e7:7c:84:13:bf:05:
                    e4:24:38:1e:39:89:0a:55:ad:80:9a:51:c0:45:ca:
                    0a:05:de:87:e8:00:a5:89:49:bb:ab:2d:b6:66:b4:
                    16:d8:a9:bf:fe:4e:0c:af:db:be:81:09:29:96:26:
                    35:d3:95:65:0a:02:70:fb:44:08:52:f8:78:10:53:
                    b1:2c:a5:38:97:4c:b2:05:8b:e0:28:41:fa:2a:4f:
                    5d:bf:0a:0d:9c:ef:0d:34:d8:f9:a6:9c:0d:48:58:
                    a1:08:f1:3b:32:3b:5e:fb:f2:fe:1e:7e:f2:c5:dc:
                    7d:e8:e6:b3:ec:91:86:fe:c8:04:ca:b5:d5:3e:8c:
                    f3:a4:52:16:58:73:f1:dc:28:66:7d:53:70:61:1e:
                    c7:29:8d:fb:63:fa:96:c4:bc:b5:7f:29:a8:12:2c:
                    c5:27:58:81:9b:fc:08:fe:5c:88:4b:fd:a5:19:28:
                    1f:07:3d:d9:57:77:cb:38:ed:0f:40:2a:38:da:e4:
                    76:67:b8:36:39:98:9b:3e:70:5b:10:3a:43:ba:32:
                    54:06:10:ad:dd:ba:61:12:98:eb:1e:9f:75:fd:90:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:EF:01:97:3E:16:3F:02:A2:9D:6B:68:F8:1C:A8:33:63:56:6E
            X509v3 Authority Key Identifier:
                keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:97:2b:be:3c:fb:ef:b1:78:3b:ed:89:41:96:7b:98:99:
         b4:c2:06:35:a5:1f:93:45:10:ce:5d:6e:47:53:fc:e0:b1:1f:
         fd:ce:70:fc:ab:01:f9:cf:3b:41:3d:13:53:95:db:20:27:7a:
         be:00:c7:8d:b9:9a:a2:0e:68:c4:c3:10:14:0f:c8:7b:95:a2:
         02:e9:d2:4f:06:98:59:57:c4:44:c6:62:68:51:c2:de:de:7f:
         ae:1d:7d:2a:a2:fc:af:68:16:17:9a:f8:7e:af:3e:d3:a3:f8:
         67:2c:73:a9:8d:08:96:90:99:2d:b8:a5:c0:e1:97:16:79:63:
         d3:c4:42:b9:c1:5f:62:9e:f4:aa:b9:c0:4b:fb:3c:67:b9:8f:
         38:4c:75:23:c4:d0:b2:da:a4:2c:2a:87:33:7a:c1:d4:78:5a:
         03:b7:f7:5f:d1:1e:4b:da:61:19:64:60:6a:f7:7f:cb:c4:4d:
         d9:36:5f:e6:e3:3d:05:ab:ac:79:72:f9:fe:d3:8e:f5:a0:fb:
         77:c7:2d:62:49:b5:bd:47:11:c4:c3:ac:df:d7:99:98:f4:59:
         97:49:3a:be:23:0b:05:88:52:a7:55:49:63:5c:67:76:59:2e:
         e4:dd:48:d2:2e:2a:8a:61:72:3a:ec:c4:49:3e:b6:45:27:a3:
         ee:8d:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:36 2025 by rpki-client