Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
File:                     wcgOWfy7f9nU7PrDVqlXStKdpSY.mft (raw, json)
Hash identifier:          fO7/S9d4dgglol3I5jVP7fwQXDYrwwTla79QP1IGh84=
Subject key identifier:   EF:2E:A9:DC:CC:68:9C:54:CB:9C:30:2B:3D:ED:2B:A3:DE:16:0A:01
Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26
Certificate issuer:       /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
Manifest number:          0626
Signing time:             Mon 30 Jun 2025 23:08:27 +0000
Manifest this update:     Mon 30 Jun 2025 23:08:26 +0000
Manifest next update:     Mon 07 Jul 2025 23:08:26 +0000
Files and hashes:         1: wcgOWfy7f9nU7PrDVqlXStKdpSY.crl (hash: dmwyB/JroV0ZHF+8cVhGu0EZrTRZEsZ3kkVhIfNCrUY=)
                          2: 6585F720AD9911EB8E8DCF82C4F9AE02.roa (hash: JLMlK+xZyu/t2L3tag7JEQmHAg6B/5ocxSM2xR10I4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl
                          rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
        Validity
            Not Before: Jun 30 23:08:26 2025 GMT
            Not After : Jul  7 23:08:26 2025 GMT
        Subject: CN=686318ea-e52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:2a:3e:86:58:bf:62:2d:95:1c:76:53:4e:
                    2a:bc:df:80:59:8f:b4:d0:68:a3:ab:c9:2e:88:9e:
                    87:a9:c9:01:66:d8:42:37:a2:e5:56:0d:4f:26:a3:
                    af:3d:aa:dc:de:40:3f:b8:cb:a9:b6:7a:17:ee:85:
                    0c:e8:0c:04:eb:a3:5f:69:45:02:19:57:a1:41:c3:
                    17:c2:cb:d0:53:3e:a3:94:a6:2e:5a:03:9c:83:bf:
                    8e:31:eb:de:b8:64:b7:c2:e0:a8:8d:b0:f3:4f:92:
                    24:0d:47:74:46:88:de:00:49:56:cd:81:2b:f0:05:
                    62:5a:3e:c9:6e:98:a9:42:84:b7:cf:d0:ea:09:db:
                    37:04:ec:04:de:70:43:f4:12:a1:87:43:63:05:e7:
                    7c:0e:e4:ec:40:b1:2d:6c:62:9e:7a:73:3b:b2:81:
                    58:9e:ed:f5:fb:1e:82:d8:3b:77:73:14:36:92:a2:
                    47:87:02:f6:b7:c5:e7:62:01:26:ae:eb:72:db:92:
                    67:34:40:10:06:ac:5e:1a:3b:59:7e:29:e4:f3:2c:
                    1b:68:f6:c2:9e:54:89:ff:ff:f1:9f:8c:50:ed:bc:
                    27:29:ed:3f:ee:9b:96:73:15:2a:21:ab:0f:ac:b2:
                    19:6e:1a:a0:1e:5d:4d:25:06:fc:cb:12:f6:2c:77:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:A9:DC:CC:68:9C:54:CB:9C:30:2B:3D:ED:2B:A3:DE:16:0A:01
            X509v3 Authority Key Identifier:
                keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:3a:b4:39:28:3f:68:38:c0:f9:bf:ef:d1:b6:53:16:75:
         08:f4:bc:61:49:ad:8e:36:6f:8b:ea:37:61:ee:91:97:bb:06:
         26:5a:30:86:78:15:ca:5f:17:df:89:2b:01:a7:ca:30:30:bb:
         c1:72:9a:6f:d2:b0:0e:b6:67:3b:76:39:36:61:61:f2:b4:ad:
         fe:df:b9:d9:81:f4:cd:9b:7e:b9:ca:1b:44:a5:35:86:01:ff:
         5a:f7:47:3e:0f:00:73:0a:aa:5d:8f:b6:4f:c8:9f:d2:96:31:
         ca:e6:93:e3:15:0d:46:80:5c:39:3a:84:38:d6:2c:65:dc:bc:
         5c:fe:0b:61:7c:8d:18:84:54:11:20:f0:fe:76:b8:1c:62:2b:
         8e:14:95:47:6c:19:63:ee:35:2c:f0:98:31:5f:f6:34:f1:d0:
         d3:e2:ad:94:30:bb:4b:66:65:d5:85:53:1c:0e:70:2b:4c:8d:
         88:3d:4d:04:d2:bf:ed:8c:ac:b1:2e:71:0f:6c:a5:32:22:ad:
         33:37:5f:20:7a:dd:1f:c3:19:de:ad:14:cd:4f:8e:9a:85:77:
         34:aa:13:4b:2b:ba:10:a0:0a:b9:92:85:16:1e:a7:2b:c4:25:
         72:c0:ca:99:68:44:ae:64:df:f4:3b:f3:a8:56:7b:24:51:0c:
         a3:8a:61:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzIzOUMxMTAvBgNVBAUTKEMxQzgwRTU5RkNCQjdGRDlENEVDRkFDMzU2QTk1NzRB
RDI5REE1MjYwHhcNMjUwNjMwMjMwODI2WhcNMjUwNzA3MjMwODI2WjAYMRYwFAYD
VQQDEw02ODYzMThlYS1lNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunwqPoZYv2ItlRx2U04qvN+AWY+00Gijq8kuiJ6HqckBZthCN6LlVg1PJqOv
Parc3kA/uMuptnoX7oUM6AwE66NfaUUCGVehQcMXwsvQUz6jlKYuWgOcg7+OMeve
uGS3wuCojbDzT5IkDUd0RojeAElWzYEr8AViWj7JbpipQoS3z9DqCds3BOwE3nBD
9BKhh0NjBed8DuTsQLEtbGKeenM7soFYnu31+x6C2Dt3cxQ2kqJHhwL2t8XnYgEm
ruty25JnNEAQBqxeGjtZfink8ywbaPbCnlSJ///xn4xQ7bwnKe0/7puWcxUqIasP
rLIZbhqgHl1NJQb8yxL2LHfZsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8uqdzM
aJxUy5wwKz3tK6PeFgoBMB8GA1UdIwQYMBaAFMHIDln8u3/Z1Oz6w1apV0rSnaUm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjM5Qy9BRUYxOTRDQUEx
MjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5blU3UHJEVnFsWFN0S2Rw
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3djZ09XZnk3ZjluVTdQckRWcWxYU3RLZHBTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjM5Qy9BRUYxOTRDQUExMjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5
blU3UHJEVnFsWFN0S2RwU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZyjq0OSg/aDjA+b/v0bZTFnUI9LxhSa2ONm+L6jdh7pGXuwYmWjCG
eBXKXxffiSsBp8owMLvBcppv0rAOtmc7djk2YWHytK3+37nZgfTNm365yhtEpTWG
Af9a90c+DwBzCqpdj7ZPyJ/SljHK5pPjFQ1GgFw5OoQ41ixl3Lxc/gthfI0YhFQR
IPD+drgcYiuOFJVHbBlj7jUs8JgxX/Y08dDT4q2UMLtLZmXVhVMcDnArTI2IPU0E
0r/tjKyxLnEPbKUyIq0zN18get0fwxnerRTNT46ahXc0qhNLK7oQoAq5koUWHqcr
xCVywMqZaESuZN/0O/OoVnskUQyjimFd
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:26:41 2025 by rpki-client