Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          bZkV0NnHpSydR3nVRAw87L213Km1hdwJ71pt+m9zMV4=
Subject key identifier:   56:99:D1:38:0E:12:85:35:1F:A7:AA:0E:F9:23:3C:5D:B1:ED:53:43
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          22
Signing time:             Sat 23 Aug 2025 08:04:47 +0000
Manifest this update:     Sat 23 Aug 2025 08:04:46 +0000
Manifest next update:     Sat 30 Aug 2025 08:04:46 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: aKSDHgVmoRoMieZX2yTpCqHxvjZToyhWRB7A4GiMQSI=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Aug 23 08:04:46 2025 GMT
            Not After : Aug 30 08:04:46 2025 GMT
        Subject: CN=68a9761e-7065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:b7:e3:b4:1c:b6:69:5a:bf:ad:7c:c9:48:
                    86:8b:fb:12:9c:ea:4a:8f:49:a5:eb:01:72:f2:c2:
                    b9:46:0b:3f:11:81:c2:44:b9:2c:30:c0:da:23:50:
                    05:fb:9b:d7:d7:ac:65:45:4b:52:79:26:3b:7d:0d:
                    ee:a6:e1:27:bb:81:d8:fb:eb:37:2d:50:cb:65:c0:
                    17:3a:fd:8f:6d:e0:0a:2e:80:9f:4c:49:34:16:50:
                    b6:75:dc:e8:a8:89:13:06:b5:1f:ee:e6:f0:d6:e5:
                    9f:db:fa:0f:7d:46:3f:0f:5e:09:91:4c:fc:84:13:
                    66:7e:65:25:0a:ac:bf:bb:2b:df:c0:21:fd:1e:f7:
                    39:10:19:64:28:2a:5c:70:dd:06:5b:42:26:89:35:
                    04:9e:a4:89:cf:f1:8d:01:8b:e8:27:19:9a:5d:1a:
                    2d:47:60:60:22:22:aa:66:0a:83:62:67:73:c7:80:
                    25:7a:27:47:aa:51:cc:9e:f2:ef:f6:b3:eb:d7:64:
                    fb:91:88:f6:4c:e0:aa:be:e8:d1:6f:a6:bf:4d:73:
                    d3:3a:7f:4e:06:88:ef:f6:ad:46:32:f7:cc:fc:2a:
                    30:41:07:43:0b:8e:29:0b:b7:ff:48:95:6f:f1:3c:
                    48:26:de:b4:c5:af:a5:62:ee:fd:27:96:1e:bf:cf:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:99:D1:38:0E:12:85:35:1F:A7:AA:0E:F9:23:3C:5D:B1:ED:53:43
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:58:a3:e1:ab:c2:4d:35:78:41:74:76:f4:9e:8e:66:2d:
         6a:55:70:65:6a:96:af:1d:c1:82:4e:ad:ca:58:9b:0c:8f:39:
         cb:37:63:de:f3:e3:19:bc:7f:e5:e3:34:47:bc:ae:bb:23:82:
         c7:a4:ba:e6:58:83:d3:96:1b:50:fc:0e:c7:96:a3:63:eb:b6:
         5a:26:30:74:7c:0f:99:de:48:1f:08:b0:33:0c:a7:a9:24:a1:
         9d:e9:e6:5b:38:07:50:94:59:2f:8e:fa:ab:b4:38:dd:b0:c2:
         f9:a8:b5:58:6b:7b:4c:0b:bf:bf:d4:af:17:2a:bf:c8:79:90:
         49:57:25:82:17:24:41:42:9c:58:05:66:ce:b9:80:31:5d:db:
         d0:84:80:fd:f9:0a:3b:aa:09:72:bb:df:03:a1:13:37:30:52:
         65:d3:d5:16:2e:43:92:41:65:8f:aa:87:54:99:03:e3:07:5e:
         7b:d7:b2:41:ec:fd:b8:dd:63:d1:f3:e3:fe:2b:34:67:8c:8c:
         da:05:27:28:31:57:03:45:c4:cf:a2:67:c1:05:34:85:55:db:
         d2:8a:30:79:f2:64:97:77:d0:39:ce:bc:28:65:18:b2:f8:4f:
         f4:ff:ff:61:aa:bf:00:52:80:71:1d:a4:a2:3e:de:98:e7:66:
         20:69:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:08 2025 by rpki-client