Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
File:                     wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json)
Hash identifier:          qemIC47W8tuz6WwLBWNrM2owUhjdLKeW+qo1JgFABvc=
Subject key identifier:   0E:03:9A:3E:2B:C3:50:DC:78:4C:44:8E:24:FB:3A:BC:84:11:56:EA
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Certificate issuer:       /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
Manifest number:          0683
Signing time:             Fri 22 Aug 2025 22:30:29 +0000
Manifest this update:     Fri 22 Aug 2025 22:30:29 +0000
Manifest next update:     Fri 29 Aug 2025 22:30:29 +0000
Files and hashes:         1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: rDLAc0umZccQTcmoXC+BQnCLIvoZG1A5WYVUW3P7Qc4=)
                          2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
        Validity
            Not Before: Aug 22 22:30:29 2025 GMT
            Not After : Aug 29 22:30:29 2025 GMT
        Subject: CN=68a8ef85-ded0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:84:85:f4:a0:57:c8:4d:4a:35:e8:8c:7e:
                    82:2f:f6:4b:e6:a7:77:5c:04:eb:3c:5a:9b:3c:48:
                    05:ea:83:7b:46:0e:be:fe:1f:08:8c:e6:e1:64:15:
                    b3:01:06:26:4c:c5:88:de:18:26:4b:3a:28:d6:31:
                    fc:d3:30:d4:09:a9:0b:78:85:aa:ca:05:bc:33:e4:
                    32:0d:e2:61:7a:56:18:7d:c6:c0:6a:c5:ee:1f:0e:
                    d9:f2:d4:ec:5d:7e:74:10:52:e2:7e:05:32:27:1b:
                    ea:66:5a:6f:d9:52:4c:b8:74:e3:dc:6f:00:7a:f0:
                    16:6f:89:c1:96:ce:58:df:ab:9d:a0:91:0c:26:78:
                    e4:96:d9:11:a5:4b:29:43:58:b8:16:de:85:4a:3f:
                    ce:e1:63:18:a4:8e:93:b3:bc:6e:87:4c:5e:8e:ea:
                    0c:2e:ce:f4:8d:1a:ea:34:dc:19:2a:ae:29:19:5c:
                    38:b6:59:96:28:84:a2:ee:bc:58:87:42:cf:53:81:
                    a2:a4:b9:15:df:c3:01:a7:b4:5c:01:0e:89:8d:26:
                    7a:b5:63:aa:82:f3:2f:66:51:de:4c:12:9a:4c:1e:
                    e1:ed:77:43:aa:d0:dc:ef:38:f7:ef:18:da:3f:98:
                    eb:f9:54:35:90:17:3b:e1:0d:de:de:43:35:0a:1a:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:9A:3E:2B:C3:50:DC:78:4C:44:8E:24:FB:3A:BC:84:11:56:EA
            X509v3 Authority Key Identifier:
                keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:1a:83:79:2e:9a:f9:26:2f:21:80:f7:5c:7e:f1:08:77:
         18:dd:d8:cf:7e:69:83:3a:6f:80:ab:1a:f0:38:e3:83:64:f2:
         82:68:f4:12:71:63:0e:80:fd:ea:b9:ee:0a:65:42:bb:4a:e1:
         1a:ae:94:41:b7:23:0e:de:f4:58:49:8b:1e:42:c3:61:31:92:
         0b:57:66:9c:1a:01:90:25:8b:4a:07:82:3a:8e:fe:d3:7d:e8:
         5d:15:f0:b4:b4:0e:48:66:74:80:f7:7d:d2:1b:0b:ba:33:8c:
         1f:15:15:1a:ea:bd:cc:0e:d5:a9:23:ba:ba:93:57:1a:37:d2:
         a5:f0:99:69:5e:2e:60:ec:79:bf:d1:36:4c:36:14:5e:61:73:
         e4:db:6a:8c:40:b6:20:f3:36:7e:4d:73:d0:86:5f:d4:00:72:
         a3:63:1c:db:41:93:d7:28:36:25:47:a7:4d:e0:51:d0:0d:37:
         35:28:ac:51:92:50:ca:2f:e9:ce:c6:fd:82:0e:56:8c:30:0b:
         85:2a:83:ff:c4:11:6a:f2:6b:1b:3e:f5:47:cc:ac:c8:ba:2c:
         0c:2f:f1:62:4d:fd:4d:a6:a7:6f:22:1c:b7:1f:85:65:91:83:
         ea:5d:8e:5a:81:6c:11:c6:4a:fb:25:cb:95:e9:8b:5e:af:2a:
         c6:75:16:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2
N0JBMUE5ODMwHhcNMjUwODIyMjIzMDI5WhcNMjUwODI5MjIzMDI5WjAYMRYwFAYD
VQQDEw02OGE4ZWY4NS1kZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvGEhfSgV8hNSjXojH6CL/ZL5qd3XATrPFqbPEgF6oN7Rg6+/h8IjObhZBWz
AQYmTMWI3hgmSzoo1jH80zDUCakLeIWqygW8M+QyDeJhelYYfcbAasXuHw7Z8tTs
XX50EFLifgUyJxvqZlpv2VJMuHTj3G8AevAWb4nBls5Y36udoJEMJnjkltkRpUsp
Q1i4Ft6FSj/O4WMYpI6Ts7xuh0xejuoMLs70jRrqNNwZKq4pGVw4tlmWKISi7rxY
h0LPU4GipLkV38MBp7RcAQ6JjSZ6tWOqgvMvZlHeTBKaTB7h7XdDqtDc7zj37xja
P5jr+VQ1kBc74Q3e3kM1ChqgSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Dmj4r
w1DceExEjiT7OryEEVbqMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1
MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUFGRC8xMkFDRjA3Qzg1MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40
cEJxTktUSHdzclpudWhxWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPjhqDeS6a+SYvIYD3XH7xCHcY3djPfmmDOm+AqxrwOOODZPKCaPQS
cWMOgP3que4KZUK7SuEarpRBtyMO3vRYSYseQsNhMZILV2acGgGQJYtKB4I6jv7T
fehdFfC0tA5IZnSA933SGwu6M4wfFRUa6r3MDtWpI7q6k1caN9Kl8JlpXi5g7Hm/
0TZMNhReYXPk22qMQLYg8zZ+TXPQhl/UAHKjYxzbQZPXKDYlR6dN4FHQDTc1KKxR
klDKL+nOxv2CDlaMMAuFKoP/xBFq8msbPvVHzKzIuiwML/FiTf1NpqdvIhy3H4Vl
kYPqXY5agWwRxkr7JcuV6YteryrGdRb1
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:13 2025 by rpki-client