Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
File:                     WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json)
Hash identifier:          OHAjmD4RQ7xoHtFPPmF/mswE5ZncFr7rivTQC25wCWM=
Subject key identifier:   2D:FC:35:70:9C:A1:72:57:11:84:A2:24:F8:6C:B9:C4:84:6A:9D:9E
Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA
Certificate issuer:       /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
Manifest number:          0201
Signing time:             Sun 29 Jun 2025 02:01:36 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:36 +0000
Manifest next update:     Sun 06 Jul 2025 02:01:36 +0000
Files and hashes:         1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: LIyMgN+ew1XtU2GcIu7umHHlUvvEsnD4i4DSgJbPH1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA
        Validity
            Not Before: Jun 29 02:01:36 2025 GMT
            Not After : Jul  6 02:01:36 2025 GMT
        Subject: CN=68609e80-a097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:1d:d8:df:b6:00:6d:99:06:15:0a:d7:f8:
                    3d:eb:97:59:21:ac:bc:0e:cd:91:a0:99:df:b3:74:
                    7c:ce:26:84:fb:e5:05:e8:b5:1c:48:2f:48:a3:11:
                    71:b0:3f:4a:bd:2b:dc:1e:73:ab:47:4f:1e:a9:80:
                    5d:80:7d:89:24:39:b3:e2:b8:ba:21:75:32:38:f9:
                    80:81:81:73:d5:a2:95:78:1b:e8:b0:be:d3:d4:9b:
                    70:83:7e:86:eb:a7:d5:e7:2c:c9:2f:ab:49:94:8d:
                    43:7a:b7:bb:6c:46:f2:12:8c:69:72:99:fc:d2:40:
                    1f:10:b7:e2:c7:c5:f0:ca:8a:b0:90:99:a7:4b:a9:
                    9b:f3:0a:24:fa:f0:44:a1:e1:f9:08:97:45:a0:44:
                    a7:5c:45:19:db:f7:8c:06:e6:26:96:19:f5:4d:b3:
                    f0:35:d0:c6:57:81:dd:bd:88:d1:04:ae:5a:e8:3d:
                    a9:e8:bb:e9:f1:47:2c:5c:2a:01:9c:3d:c7:f4:cd:
                    06:61:a5:eb:ce:57:8d:4b:a5:ef:5b:aa:f7:b5:0c:
                    d1:54:fd:a3:8c:7a:2d:98:d4:21:12:5f:56:87:a5:
                    aa:0f:46:d3:5c:78:ac:cc:b1:5e:40:3d:fd:f4:3f:
                    80:56:39:71:6b:1a:9e:19:52:63:e4:cd:2c:0e:c8:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FC:35:70:9C:A1:72:57:11:84:A2:24:F8:6C:B9:C4:84:6A:9D:9E
            X509v3 Authority Key Identifier:
                keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:9e:d1:4e:df:fa:b0:89:24:4b:38:fe:ea:0e:07:ca:43:45:
         6b:7f:d2:de:23:0b:54:c1:80:c9:fa:17:30:25:41:00:25:b4:
         8c:74:c7:87:03:46:d5:0d:b3:13:ba:66:0f:cb:a7:de:03:ea:
         7f:84:7b:59:a3:f8:d1:af:81:11:52:53:11:cc:12:1e:6b:ee:
         33:ca:d6:5b:48:95:f1:c6:4d:12:37:43:fd:e6:71:92:84:21:
         f8:8b:60:7a:4d:e2:84:42:d7:51:20:73:86:8e:5c:0d:a7:3d:
         5b:c7:55:0f:ca:cc:f2:9e:a4:a1:54:41:b4:f7:bd:d9:93:4e:
         5e:98:cf:cd:3e:c4:ea:2f:81:35:e2:8d:07:d0:bb:9a:6a:e1:
         5b:cb:2a:18:1e:14:d5:f6:4b:8d:01:83:2a:18:44:1f:5c:eb:
         e5:f1:c4:c5:42:0c:99:03:cb:de:d9:6f:67:f3:ab:1e:27:fb:
         74:b9:cd:06:a1:89:70:44:1f:27:15:d8:5d:20:40:fb:f9:d7:
         a3:d0:19:5a:1b:e3:e2:3d:fa:bc:9d:65:f2:2c:fb:17:a9:5b:
         3e:89:17:6b:1a:08:9e:ac:e7:af:4e:a9:4b:db:dc:f9:70:b4:
         1a:02:b7:ef:50:86:3c:9a:a4:a3:d2:1f:e2:81:08:c9:9f:fa:
         e0:8b:6a:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3
RDFBMUE2Q0EwHhcNMjUwNjI5MDIwMTM2WhcNMjUwNzA2MDIwMTM2WjAYMRYwFAYD
VQQDEw02ODYwOWU4MC1hMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+8d2N+2AG2ZBhUK1/g965dZIay8Ds2RoJnfs3R8ziaE++UF6LUcSC9IoxFx
sD9KvSvcHnOrR08eqYBdgH2JJDmz4ri6IXUyOPmAgYFz1aKVeBvosL7T1Jtwg36G
66fV5yzJL6tJlI1Dere7bEbyEoxpcpn80kAfELfix8XwyoqwkJmnS6mb8wok+vBE
oeH5CJdFoESnXEUZ2/eMBuYmlhn1TbPwNdDGV4HdvYjRBK5a6D2p6Lvp8UcsXCoB
nD3H9M0GYaXrzleNS6XvW6r3tQzRVP2jjHotmNQhEl9Wh6WqD0bTXHiszLFeQD39
9D+AVjlxaxqeGVJj5M0sDsgcZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC38NXCc
oXJXEYSiJPhsucSEap2eMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE
RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB
VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJntFO3/qwiSRLOP7qDgfKQ0Vrf9LeIwtUwYDJ+hcwJUEAJbSMdMeH
A0bVDbMTumYPy6feA+p/hHtZo/jRr4ERUlMRzBIea+4zytZbSJXxxk0SN0P95nGS
hCH4i2B6TeKEQtdRIHOGjlwNpz1bx1UPyszynqShVEG0973Zk05emM/NPsTqL4E1
4o0H0LuaauFbyyoYHhTV9kuNAYMqGEQfXOvl8cTFQgyZA8ve2W9n86seJ/t0uc0G
oYlwRB8nFdhdIED7+dej0BlaG+PiPfq8nWXyLPsXqVs+iRdrGgierOevTqlL29z5
cLQaArfvUIY8mqSj0h/igQjJn/rgi2p/
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:30:32 2025 by rpki-client