Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
File:                     4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json)
Hash identifier:          a33EO9bQz6tmMsCJAqVRMH0G7gI+LVzTyYaTRuktdRk=
Subject key identifier:   B5:A2:54:ED:3D:D8:9D:BD:FB:4E:EC:78:8A:22:00:53:26:87:5A:59
Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Certificate issuer:       /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
Manifest number:          51
Signing time:             Sat 09 Aug 2025 07:48:29 +0000
Manifest this update:     Sat 09 Aug 2025 07:48:29 +0000
Manifest next update:     Sat 16 Aug 2025 07:48:29 +0000
Files and hashes:         1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: FNmJoB4p128zt9WTw3J7ULB42tc/w9YHFR+ajT6Ac8E=)
                          2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
        Validity
            Not Before: Aug  9 07:48:29 2025 GMT
            Not After : Aug 16 07:48:29 2025 GMT
        Subject: CN=6896fd4d-c311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:c6:13:bb:da:cb:68:b2:84:02:d9:8c:f6:
                    77:36:14:cf:54:cf:2c:c9:63:a4:ae:9c:13:ed:7c:
                    81:9c:f8:a6:c7:02:45:f5:ab:65:86:44:b4:ff:0d:
                    5f:c3:7e:51:d8:e9:69:b3:59:2f:94:e7:35:12:cf:
                    7f:03:fa:80:bc:b1:42:6f:10:96:c9:e7:16:9f:bb:
                    e6:be:66:05:4e:fc:73:8a:f1:1b:d4:84:88:ef:44:
                    f1:94:95:27:a4:7d:1c:ec:20:3a:a1:09:9b:ea:53:
                    8d:e3:55:95:c3:0e:c5:40:93:16:3d:a7:a8:a3:f0:
                    7b:db:41:94:d5:9e:67:6d:62:44:23:bf:26:d0:d5:
                    13:00:c9:df:49:41:78:d0:af:0d:8e:bc:b5:02:f8:
                    7b:6f:19:0d:ae:02:60:c7:53:7e:34:20:91:03:31:
                    55:4e:35:22:d1:cb:a8:00:27:f9:3a:1b:eb:df:96:
                    47:44:c7:53:f7:01:29:1b:ef:27:7a:43:76:a6:b4:
                    92:4c:91:bb:00:a4:3e:3b:09:3e:4c:c6:73:2c:56:
                    b3:16:4e:0e:42:3f:2d:02:63:79:59:08:c9:d8:84:
                    09:80:e6:26:0f:71:9a:0d:19:37:43:de:89:2e:49:
                    27:52:94:4d:30:45:ba:09:70:00:7f:66:9a:4b:9e:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:54:ED:3D:D8:9D:BD:FB:4E:EC:78:8A:22:00:53:26:87:5A:59
            X509v3 Authority Key Identifier:
                keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:ef:59:9a:b2:60:95:de:fd:dd:f5:aa:ab:44:f4:fb:8f:
         72:d7:bd:de:d9:18:71:41:f5:dc:6a:da:20:13:d7:99:03:a7:
         b6:1d:07:d2:ab:c4:29:d3:d8:67:f3:3a:24:7a:a8:81:45:e4:
         4c:ff:2a:f1:b7:37:b1:ce:d2:d7:1b:db:25:af:b4:4f:a2:55:
         e1:fc:ef:4d:b1:35:55:cc:f9:66:fb:18:9a:b9:4d:71:2e:26:
         00:38:0b:ce:c8:7a:95:c4:c9:2c:09:59:7d:b0:3e:47:29:7d:
         ea:76:6d:0a:60:91:5f:b9:62:c7:fe:54:13:69:bf:5a:fd:d2:
         cb:26:e0:35:8a:fc:98:f7:6a:14:1f:ee:2c:10:a6:11:d2:ee:
         13:52:92:7b:1e:f2:b0:75:89:7a:e5:91:b6:d2:ee:df:67:fd:
         73:0b:4b:ba:e0:d8:19:2c:c2:45:5e:16:5c:52:92:56:d9:19:
         55:ad:3f:6a:52:5b:8f:51:08:f5:34:a0:db:46:0c:87:6a:2c:
         36:8f:11:50:05:99:ec:e7:6d:ba:01:97:c6:4e:13:ca:a2:f4:
         de:b5:32:21:7e:1a:64:0e:db:55:d1:51:30:e1:70:a7:b9:45:
         35:5a:fa:5f:7b:39:c8:29:ca:52:d3:71:9c:5c:22:3c:b3:5e:
         57:81:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:44:56 2025 by rpki-client