Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          Fqvlxqeb/JDiLFfdm3U6+l7zWhcn4Z2kv2b2LIsOdrQ=
Subject key identifier:   01:E8:FB:F0:B6:2F:13:0B:D8:CB:C7:4E:82:94:E4:53:75:29:7A:0A
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          011D
Signing time:             Sat 23 Aug 2025 04:59:16 +0000
Manifest this update:     Sat 23 Aug 2025 04:59:16 +0000
Manifest next update:     Sat 30 Aug 2025 04:59:16 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: UARwo3Ra+LSW9z3uTv06vgjunKwtS7ZS1z4107lJFJ8=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Aug 23 04:59:16 2025 GMT
            Not After : Aug 30 04:59:16 2025 GMT
        Subject: CN=68a94aa4-3310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:72:fc:59:56:0a:c2:e6:71:8e:5c:20:b0:
                    22:3d:b2:06:8a:4e:49:fc:9d:d2:06:ac:74:c6:f5:
                    06:bb:3b:1d:d8:29:82:bb:7b:f1:4b:92:4d:73:42:
                    de:f5:37:3d:3a:d3:9a:b5:fe:d3:9a:26:77:80:d0:
                    e8:29:87:10:38:24:1d:3a:21:3d:fe:64:34:fc:42:
                    3f:88:30:13:ac:da:5d:58:ad:8b:8a:c0:c3:59:e6:
                    ba:73:24:00:ec:b2:d7:7a:7a:f2:63:95:ab:82:8f:
                    38:5d:38:86:38:9c:62:b6:97:6d:e5:6f:95:61:93:
                    17:18:b9:40:d3:b6:10:40:b0:ee:6d:2c:48:76:89:
                    72:d3:ae:a8:a1:65:7b:00:6a:8d:70:6f:b0:8a:6f:
                    29:4c:b3:6a:f1:06:6d:a3:f9:49:40:24:60:3f:81:
                    3c:92:cb:19:c0:c2:c0:34:98:c5:05:f1:1c:c3:98:
                    5a:c1:0a:4a:96:34:93:98:cb:2d:fe:a0:7f:80:ae:
                    48:44:75:24:8e:d8:0b:24:ba:db:3b:11:b2:4a:82:
                    74:74:2f:01:cd:6e:9a:2d:b8:c8:1c:a9:cf:b9:32:
                    a3:83:b3:41:0b:47:ca:99:f3:db:26:50:24:05:52:
                    b6:c4:6d:05:2f:3e:ad:31:ab:e5:e3:45:91:25:cf:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:FB:F0:B6:2F:13:0B:D8:CB:C7:4E:82:94:E4:53:75:29:7A:0A
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:78:1c:0c:e6:47:bb:ef:fa:2c:9b:d2:e9:02:d9:13:08:a4:
         17:1e:0d:ac:cf:1e:56:63:4f:59:1b:9a:8e:3d:3b:2c:d4:f0:
         29:8c:76:c7:23:53:72:81:2a:17:d1:79:67:9f:bc:b5:86:d7:
         fa:f5:d0:0e:f9:46:8b:8d:75:ec:aa:79:c7:8a:24:cd:77:de:
         b0:6a:f3:17:77:05:d1:a2:be:82:94:ea:0a:21:57:95:c6:df:
         df:08:be:f6:8d:f8:00:0d:88:21:ed:47:fd:f3:31:09:0e:40:
         5a:41:63:13:ab:b3:d5:46:c0:0c:a0:e2:bd:34:1f:3c:bc:ea:
         ac:8c:01:33:99:b9:7b:cb:b8:cb:86:10:39:32:5c:fd:86:60:
         6f:25:7e:db:3a:7e:3d:33:1c:57:81:98:51:46:a4:af:27:f7:
         9b:6e:ae:7a:b1:88:37:2c:02:99:02:fe:f2:e0:b7:7c:40:ef:
         01:c9:4c:66:be:da:d3:de:f8:33:45:21:83:75:a5:4b:a7:41:
         c5:d1:37:2f:7f:ea:86:a7:1d:5e:ee:a2:95:8c:e8:85:0b:be:
         0a:ab:3b:90:71:6f:07:16:61:fe:a0:78:77:25:a5:b3:d6:3e:
         a0:8c:f3:c1:3f:31:67:b1:b9:7b:49:69:60:e0:16:43:74:c7:
         e5:87:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:21 2025 by rpki-client