Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File:                     wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier:          qaLs4RnsXnfEVS5i0daR7FUSvQ4bChAchVTRh51Bb3o=
Subject key identifier:   1D:C0:08:0F:47:C0:0E:49:48:E6:A5:20:43:A3:D7:1D:3E:6D:31:EC
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer:       /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number:          07A6
Signing time:             Fri 22 Aug 2025 21:28:38 +0000
Manifest this update:     Fri 22 Aug 2025 21:28:38 +0000
Manifest next update:     Fri 29 Aug 2025 21:28:38 +0000
Files and hashes:         1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: tDQIge+1mh96rTSp1N5R6xqPsgFaE/SwRJnIsoh8sdM=)
                          2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: q3e1SxYN4gO4HKEGgzyUKFkCIiem6r+fmpGDRyBSWN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
                          rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
        Validity
            Not Before: Aug 22 21:28:38 2025 GMT
            Not After : Aug 29 21:28:38 2025 GMT
        Subject: CN=68a8e106-5170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:74:67:07:ef:3d:6f:b1:7b:1b:9c:44:72:
                    e5:ae:92:cc:a4:71:26:8a:61:39:1f:e3:6f:0f:cd:
                    04:68:a3:95:f2:b0:d5:72:7e:7a:24:f2:85:c2:f6:
                    9b:b3:b1:12:41:7c:1b:2e:e8:e2:60:cd:68:f4:12:
                    ae:34:60:ec:03:b7:a7:09:a0:9a:8b:52:28:6d:89:
                    5f:68:89:d7:5c:f2:7e:a7:86:c8:89:97:66:63:c1:
                    51:98:04:b1:3f:05:c6:3c:ff:ef:c2:b9:71:50:b9:
                    5c:03:a4:05:d7:68:aa:6e:cc:d0:4f:2f:bb:1b:1c:
                    25:16:01:65:c0:47:97:03:a6:c8:af:9d:1c:ac:b6:
                    40:c6:6c:5f:7b:de:f8:86:f5:a9:af:b2:f4:82:e0:
                    70:4b:90:6a:90:1e:6d:83:10:80:0c:69:60:73:ab:
                    74:41:5e:84:53:13:84:0b:ed:2a:0a:c2:03:af:39:
                    eb:93:2e:36:2b:89:e8:10:59:5d:e3:cd:1d:59:80:
                    d7:37:af:c6:0b:1a:21:fd:6d:76:79:c7:30:00:5b:
                    64:8a:d2:53:52:8f:c7:54:35:10:6d:8f:c8:f2:dc:
                    9f:ee:63:94:a6:c2:bd:c0:1b:07:18:ae:f5:5b:1c:
                    33:d4:a1:30:8f:70:da:a7:e1:0d:57:6e:5d:5c:9e:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:08:0F:47:C0:0E:49:48:E6:A5:20:43:A3:D7:1D:3E:6D:31:EC
            X509v3 Authority Key Identifier:
                keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:a0:44:ee:cb:b1:51:b5:63:f5:be:1e:70:4d:60:fe:b1:
         0a:7d:15:9e:0c:0b:a4:7f:ed:c5:b6:6a:ad:6d:96:26:b4:bc:
         2a:45:ea:bd:ff:f0:3f:06:cd:28:02:99:3f:3b:f2:d7:34:c3:
         ee:24:8b:63:3e:cd:06:7d:1d:49:d7:ba:f6:03:24:13:f5:d8:
         18:2f:f7:7e:7d:a1:ff:30:f8:d0:e1:46:16:f0:78:f5:91:ec:
         79:3a:0e:ba:32:5e:54:5c:81:8a:07:32:b4:5a:bd:4d:2f:c9:
         89:53:68:2e:5d:83:f3:34:aa:42:db:dc:4e:20:57:3a:9d:16:
         b3:5a:71:49:20:57:04:bc:bb:65:6b:ee:f6:b8:59:df:a1:21:
         07:53:b6:14:32:27:e4:d9:97:6b:94:5c:b0:35:45:65:6a:ff:
         b8:12:88:5a:97:b1:61:1f:a2:60:e7:70:dc:16:d1:d0:05:c7:
         18:8b:8a:be:a3:55:3f:e1:5f:d4:12:0b:ef:24:e9:0f:13:1e:
         c8:da:3c:23:29:84:7b:a0:c7:7b:00:01:87:8e:37:57:70:e9:
         ae:69:cf:08:7c:94:42:7c:2d:2f:d0:f0:10:51:ef:18:6b:16:
         56:9a:05:21:48:aa:92:05:87:da:df:20:1c:97:f3:e2:57:e4:
         b8:60:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:38 2025 by rpki-client