Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File:                     wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier:          5XHCZ4b3l7j3qiPfO8S6FCIlU2fR2GBzW1DKivmYgjc=
Subject key identifier:   7C:2E:86:F5:1D:29:20:F5:81:34:BF:FD:28:D3:C9:ED:C8:2C:93:CA
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0EAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number:          0E92
Signing time:             Fri 22 Aug 2025 17:48:48 +0000
Manifest this update:     Fri 22 Aug 2025 17:48:48 +0000
Manifest next update:     Fri 29 Aug 2025 17:48:48 +0000
Files and hashes:         1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: JzFz/RrugklA8eNfbf5dlC2St3d3DbBdoWda2E/fXcs=)
                          2: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=)
                          3: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=)
                          4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: Ec1bkGQTqxF1oTL6UjSssM5GunX3miqPVFaIr/V5Yp8=)
                          5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3759 (0xeaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Aug 22 17:48:48 2025 GMT
            Not After : Aug 29 17:48:48 2025 GMT
        Subject: CN=68a8ad80-596a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:98:48:83:28:29:a6:93:84:3f:85:14:1c:
                    73:f9:96:ab:13:e5:cb:87:6c:57:e5:e8:46:2c:cb:
                    20:45:62:41:17:6e:60:fd:dc:22:e6:a1:9a:77:41:
                    b9:2e:a9:aa:c0:a0:ca:ed:0a:16:54:33:76:86:25:
                    69:87:ce:db:ad:81:2c:c2:ab:4e:20:ff:92:99:cc:
                    d3:eb:3d:8d:01:66:fd:bf:31:6b:77:c8:81:4d:54:
                    90:f5:50:52:ef:14:6d:d4:99:76:db:d6:d9:88:e0:
                    29:13:cf:1e:b2:d5:93:e6:c9:c6:f6:74:f5:e3:38:
                    21:3a:bf:84:f2:6c:45:32:0e:b0:87:8d:fc:8d:4d:
                    14:dc:90:08:98:5c:e5:85:5a:0c:67:e5:a1:d2:1e:
                    e6:21:f4:e8:5a:33:92:59:2d:3f:58:14:e5:5b:47:
                    fe:06:ea:bd:7a:e6:b7:a0:13:11:32:06:a4:50:e2:
                    95:c9:a1:5d:aa:d2:38:fb:07:ef:c4:88:6e:9a:69:
                    fb:c6:db:de:cf:90:62:56:47:05:b6:45:1f:53:56:
                    9e:03:2e:e6:5a:e7:c5:f0:e1:c1:43:92:0f:96:6a:
                    ea:d6:5d:23:c1:35:e5:54:0a:18:8a:90:26:4d:75:
                    d2:ff:e8:d6:89:25:c4:f2:40:e9:1a:b1:5e:1f:d0:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2E:86:F5:1D:29:20:F5:81:34:BF:FD:28:D3:C9:ED:C8:2C:93:CA
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:fa:15:0d:e3:48:db:86:3d:44:33:89:46:2b:4b:bd:9a:
         21:5f:0c:6c:ac:ee:17:5f:a4:28:43:45:d4:f5:b1:00:27:34:
         62:9b:e6:56:f1:42:55:74:06:81:1f:74:47:99:7e:f7:5d:f1:
         16:d9:78:64:d3:de:4f:e0:04:13:51:39:14:58:1f:fb:98:65:
         e7:bf:27:47:19:a0:6c:b7:e8:30:3f:a9:e7:df:02:47:ef:31:
         3c:48:d0:bf:3f:72:b7:07:b8:aa:a3:3d:e4:f4:2e:9f:e9:3d:
         56:93:c6:ec:be:37:fa:bc:e9:db:60:2b:c6:60:ff:a1:48:e2:
         e8:37:3a:7f:f0:61:0c:a9:1b:ad:6f:d7:d5:1f:21:03:8a:16:
         db:46:67:bb:33:a1:f1:d2:1f:bd:c6:5c:ed:30:e3:a1:23:1b:
         d1:5b:55:95:5e:ee:40:5b:14:b6:cd:54:d1:5e:12:a9:d5:2a:
         52:c2:2a:8f:bc:90:cc:44:6e:27:9a:d6:2a:52:5c:bf:7c:7e:
         f5:96:34:0a:7e:62:a5:29:51:33:f2:a7:98:53:24:51:f6:fa:
         76:2e:55:9d:99:7c:37:5c:7d:78:93:ae:5e:6d:a5:e7:d1:21:
         38:a9:5f:6b:93:16:3a:cf:53:99:09:99:58:4f:38:4a:8f:6e:
         73:99:13:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjUwODIyMTc0ODQ4WhcNMjUwODI5MTc0ODQ4WjAYMRYwFAYD
VQQDEw02OGE4YWQ4MC01OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBaYSIMoKaaThD+FFBxz+ZarE+XLh2xX5ehGLMsgRWJBF25g/dwi5qGad0G5
LqmqwKDK7QoWVDN2hiVph87brYEswqtOIP+SmczT6z2NAWb9vzFrd8iBTVSQ9VBS
7xRt1Jl229bZiOApE88estWT5snG9nT14zghOr+E8mxFMg6wh438jU0U3JAImFzl
hVoMZ+Wh0h7mIfToWjOSWS0/WBTlW0f+Buq9eua3oBMRMgakUOKVyaFdqtI4+wfv
xIhummn7xtvez5BiVkcFtkUfU1aeAy7mWufF8OHBQ5IPlmrq1l0jwTXlVAoYipAm
TXXS/+jWiSXE8kDpGrFeH9CIGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwuhvUd
KSD1gTS//SjTye3ILJPKMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6
SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGqfoVDeNI24Y9RDOJRitLvZohXwxsrO4XX6QoQ0XU9bEAJzRim+ZW
8UJVdAaBH3RHmX73XfEW2Xhk095P4AQTUTkUWB/7mGXnvydHGaBst+gwP6nn3wJH
7zE8SNC/P3K3B7iqoz3k9C6f6T1Wk8bsvjf6vOnbYCvGYP+hSOLoNzp/8GEMqRut
b9fVHyEDihbbRme7M6Hx0h+9xlztMOOhIxvRW1WVXu5AWxS2zVTRXhKp1SpSwiqP
vJDMRG4nmtYqUly/fH71ljQKfmKlKVEz8qeYUyRR9vp2LlWdmXw3XH14k65ebaXn
0SE4qV9rkxY6z1OZCZlYTzhKj25zmRO/
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:35 2025 by rpki-client