Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          jAqvyn/iCqIXoa6jiT1gLIc4NmcvWMObeUZXALG54YY=
Subject key identifier:   30:DA:C3:14:11:AB:D1:0A:AF:42:4C:85:6D:D4:10:DC:65:92:D9:D2
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          78
Signing time:             Sun 19 Oct 2025 10:05:06 +0000
Manifest this update:     Sun 19 Oct 2025 10:05:05 +0000
Manifest next update:     Sun 26 Oct 2025 10:05:05 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: UbU1WPA1xahIjg8S7tavCnKZPvUkdF6LMGKUxuuqg9w=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: IcKmF13UvgbjR5e+pq74azw6DFKPoTGhWhM8VYVh+JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Oct 19 10:05:05 2025 GMT
            Not After : Oct 26 10:05:05 2025 GMT
        Subject: CN=68f4b7d2-0a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:07:ea:68:c5:75:f0:33:49:96:2d:88:2f:
                    b8:cc:e9:de:d3:1f:5e:c6:b2:2e:21:8d:0c:1c:be:
                    6b:58:7c:62:6d:00:29:0f:d5:ff:c6:97:c3:3c:fb:
                    07:68:0b:d0:32:1c:3f:55:29:1f:9f:c1:87:20:55:
                    0d:6a:4d:0e:25:17:23:53:ca:08:dc:d8:a5:f5:9c:
                    6b:8d:34:f9:2b:46:10:3a:18:06:5d:1b:7b:f5:41:
                    b4:fd:b3:09:ec:92:be:bd:b7:ae:49:13:c1:46:37:
                    65:d2:15:7d:9f:27:9c:b9:5b:6e:0c:fb:83:c9:ce:
                    1f:fe:39:c5:75:88:01:9d:1e:d0:2f:ac:04:d5:c4:
                    41:15:77:a9:6f:ac:21:d0:67:d1:c9:44:aa:d2:bc:
                    53:c4:60:4c:41:47:cf:ab:77:5f:e3:e5:75:06:71:
                    13:ae:a2:f7:8d:38:a3:dd:c9:41:14:e8:8a:f3:00:
                    f4:aa:ce:88:e9:3b:c4:b5:e7:cc:9f:9a:58:2f:ae:
                    9c:e8:3e:5b:b8:2b:fb:c9:22:9c:c3:be:8c:2f:0e:
                    6c:3b:8a:94:a5:94:53:01:09:6a:82:94:97:50:7f:
                    f0:7a:9f:46:70:81:22:da:2a:62:e6:b4:77:95:d2:
                    4d:ae:b9:bf:f9:86:92:a1:d4:6c:be:3c:d6:62:2e:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:C3:14:11:AB:D1:0A:AF:42:4C:85:6D:D4:10:DC:65:92:D9:D2
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:33:b9:64:d8:15:cc:35:a3:ea:20:c7:f5:be:0b:66:e8:4c:
         2a:ed:83:70:ab:9c:3f:2f:71:36:dd:6d:60:9b:a5:c3:54:01:
         c8:1c:dc:ac:ab:fa:c0:b6:83:93:c0:f4:86:4e:95:7e:1a:81:
         92:a3:46:3c:14:da:bd:8f:c4:78:c4:fd:18:a3:9b:e3:72:af:
         f2:6d:d0:fd:28:4f:1a:1b:e3:fb:71:53:45:5f:c7:4c:34:fa:
         ef:ce:ab:46:7a:74:5c:8e:b1:26:36:fa:bb:6f:9f:b1:1b:7e:
         dd:aa:ad:84:5e:d8:88:7e:d3:ba:eb:a3:c9:8a:01:63:bd:43:
         d6:6c:f2:a6:17:82:6f:03:d6:1b:b9:2a:90:48:af:d4:27:08:
         c3:2c:5b:f5:3d:f7:68:5f:69:f9:31:68:90:51:cd:10:a5:7c:
         15:c6:8a:aa:74:65:0e:d7:bc:6c:3a:8d:44:45:b1:8f:21:62:
         1e:5b:81:10:cf:06:23:32:9c:1a:0e:cc:39:33:f9:94:ba:5a:
         f4:eb:c7:24:0b:89:01:41:79:82:76:3c:dc:90:ed:44:1a:9e:
         68:16:4b:62:e9:ea:d7:94:91:7b:a3:e1:d1:b7:ae:ec:e0:2f:
         f1:bf:d0:1f:46:64:c5:9e:0b:98:e9:6c:43:48:2c:a9:2b:3d:
         ec:0c:5e:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTc1QTExMC8GA1UEBRMoNThFRUU1MkQyQUUwOTJFQzU1ODZFMDcwRTY0NjJDMzYz
NTBGQTZFMTAeFw0yNTEwMTkxMDA1MDVaFw0yNTEwMjYxMDA1MDVaMBgxFjAUBgNV
BAMTDTY4ZjRiN2QyLTBhMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC8wfqaMV18DNJli2IL7jM6d7TH17Gsi4hjQwcvmtYfGJtACkP1f/Gl8M8+wdo
C9AyHD9VKR+fwYcgVQ1qTQ4lFyNTygjc2KX1nGuNNPkrRhA6GAZdG3v1QbT9swns
kr69t65JE8FGN2XSFX2fJ5y5W24M+4PJzh/+OcV1iAGdHtAvrATVxEEVd6lvrCHQ
Z9HJRKrSvFPEYExBR8+rd1/j5XUGcROuoveNOKPdyUEU6IrzAPSqzojpO8S158yf
mlgvrpzoPlu4K/vJIpzDvowvDmw7ipSllFMBCWqClJdQf/B6n0ZwgSLaKmLmtHeV
0k2uub/5hpKh1Gy+PNZiLuWbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMNrDFBGr
0QqvQkyFbdQQ3GWS2dIwHwYDVR0jBBgwFoAUWO7lLSrgkuxVhuBw5kYsNjUPpuEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNzVBLzNGQUE3QzU0RjQ4
NzExRUY4NDlBMjc3MkM0RjlBRTAyL1dPN2xMU3Jna3V4Vmh1Qnc1a1lzTmpVUHB1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV083bExTcmdrdXhWaHVCdzVrWXNOalVQcHVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
NzVBLzNGQUE3QzU0RjQ4NzExRUY4NDlBMjc3MkM0RjlBRTAyL1dPN2xMU3Jna3V4
Vmh1Qnc1a1lzTmpVUHB1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABMzuWTYFcw1o+ogx/W+C2boTCrtg3CrnD8vcTbdbWCbpcNUAcgc3Kyr
+sC2g5PA9IZOlX4agZKjRjwU2r2PxHjE/Rijm+Nyr/Jt0P0oTxob4/txU0Vfx0w0
+u/Oq0Z6dFyOsSY2+rtvn7Ebft2qrYRe2Ih+07rro8mKAWO9Q9Zs8qYXgm8D1hu5
KpBIr9QnCMMsW/U992hfafkxaJBRzRClfBXGiqp0ZQ7XvGw6jURFsY8hYh5bgRDP
BiMynBoOzDkz+ZS6WvTrxyQLiQFBeYJ2PNyQ7UQanmgWS2Lp6teUkXuj4dG3ruzg
L/G/0B9GZMWeC5jpbENILKkrPewMXhE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:32 2025 by rpki-client