Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
File:                     p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json)
Hash identifier:          WwOTLjYQMPKiB8k6upVpyva+WD5KGZIiHcYreaWTDs4=
Subject key identifier:   87:CA:54:AD:35:17:50:5A:7A:84:FD:26:42:4A:6D:D6:E0:43:18:33
Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
Certificate issuer:       /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Certificate serial:       1A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
Manifest number:          19FF
Signing time:             Wed 06 Aug 2025 16:28:08 +0000
Manifest this update:     Wed 06 Aug 2025 16:28:08 +0000
Manifest next update:     Wed 13 Aug 2025 16:28:08 +0000
Files and hashes:         1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: y4dl5ug/E7O3CWlaxJ1EeH+/78y+s4AXXda2QlAKWjs=)
                          2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
                          rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 16:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6671 (0x1a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
        Validity
            Not Before: Aug  6 16:28:08 2025 GMT
            Not After : Aug 13 16:28:08 2025 GMT
        Subject: CN=68938298-ae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:83:2b:79:0b:8d:19:75:e9:eb:20:55:03:
                    da:c1:b8:f7:28:ae:96:30:0a:08:cf:19:69:aa:d8:
                    83:6c:e3:7b:54:51:ca:65:1c:62:c1:96:97:d1:76:
                    37:9a:29:2b:5d:61:96:1d:fb:7f:e4:eb:13:a5:bd:
                    6d:b4:41:2e:1a:21:9d:b5:3f:e3:1a:a3:bb:8a:70:
                    0d:65:58:02:30:8f:9a:7c:7c:9f:12:d8:c6:37:2e:
                    c2:89:8d:da:2f:5a:7e:45:7f:9e:92:56:7b:ae:59:
                    37:fa:29:97:14:69:c8:68:92:4a:a0:2d:7d:32:94:
                    1f:1c:9a:79:df:0e:47:d2:25:e1:43:51:e4:72:ce:
                    43:a8:94:6c:3f:cd:ee:a9:4b:51:fc:7c:20:2c:d5:
                    ac:ae:68:b0:a3:2c:27:96:92:eb:e1:43:6d:b5:85:
                    82:40:48:e4:92:3a:15:a0:c0:f2:7e:b7:d2:6d:fb:
                    d6:6e:e5:82:9c:f9:6f:2b:1e:38:0f:06:32:e7:0b:
                    c9:be:11:01:d3:19:6d:ae:28:f1:3b:74:9a:60:2f:
                    18:2c:e6:23:7c:41:b1:24:89:b7:e5:33:27:24:a7:
                    d7:53:f3:d8:1e:74:cb:e0:85:4d:ab:01:a5:80:95:
                    9e:4a:3f:ed:d5:ea:50:43:a5:ec:87:2f:97:a9:7c:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:54:AD:35:17:50:5A:7A:84:FD:26:42:4A:6D:D6:E0:43:18:33
            X509v3 Authority Key Identifier:
                keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:15:54:f9:88:b4:69:d4:59:b8:45:aa:f1:ac:d5:52:9d:85:
         53:b0:92:cc:4e:35:65:47:96:69:64:6e:8d:58:3f:0d:96:b9:
         82:f3:d9:cd:76:9b:0e:09:23:52:12:fb:a3:12:89:f7:cf:7d:
         87:c7:ea:b0:83:6f:32:dc:df:da:69:60:76:2e:45:f1:8a:de:
         ed:d5:df:81:62:cb:83:a6:d2:42:f6:45:2d:53:a6:1e:76:fd:
         ad:8c:45:83:1d:78:e8:31:11:7b:d7:fe:7e:42:78:74:07:f0:
         8c:72:7c:1b:f1:78:3e:27:d5:1c:6d:d6:32:60:7b:71:72:d9:
         5b:0e:98:c5:be:69:7d:32:3d:e8:f3:be:d4:ea:8d:3a:6d:a2:
         fe:ba:c2:a6:54:04:7d:16:3b:f0:0a:e5:65:08:ac:9f:dd:1e:
         03:70:d1:a7:d9:c0:ff:e9:d1:ff:52:f3:93:7c:b2:34:4d:c1:
         a9:d9:b4:bd:79:ae:cb:77:bc:75:94:58:c9:c0:9f:9c:c5:60:
         d5:ce:a6:39:fc:c4:c6:bf:20:60:0a:7f:c5:32:98:15:36:57:
         1c:4c:46:6b:17:28:b4:21:a4:74:aa:91:e3:05:67:c1:4b:ce:
         44:90:c8:ad:18:40:ca:3b:ca:1e:e4:4b:dd:18:bd:16:0a:4c:
         7e:73:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:06:18 2025 by rpki-client