Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File:                     WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier:          sNQW1JqhLlYFOmE0npghvB5KOJ22x7rkRy9S1Q8AlDE=
Subject key identifier:   65:72:70:91:2C:20:AE:B3:38:01:6D:2C:58:9F:F8:45:55:D5:18:1C
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer:       /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number:          06FE
Signing time:             Fri 22 Aug 2025 22:05:36 +0000
Manifest this update:     Fri 22 Aug 2025 22:05:36 +0000
Manifest next update:     Fri 29 Aug 2025 22:05:36 +0000
Files and hashes:         1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: goPHNqTK2rLEk92lzj8MP3E17AxOdgYMQbPis03WPYc=)
                          2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=)
                          3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
        Validity
            Not Before: Aug 22 22:05:36 2025 GMT
            Not After : Aug 29 22:05:36 2025 GMT
        Subject: CN=68a8e9b0-6c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:d7:48:79:02:3a:ca:72:77:48:d0:c4:21:
                    db:05:ea:dd:dd:0d:b9:7a:28:21:4d:ec:12:1a:ca:
                    28:cf:a4:2c:bc:31:9f:2c:44:d4:2b:55:45:66:48:
                    6e:61:93:c8:ec:fb:96:24:e4:75:7f:30:81:bf:e4:
                    3d:77:b7:45:63:44:f4:af:cb:2c:b4:ea:66:21:b7:
                    b3:ab:4b:4d:ac:34:61:9b:ec:60:92:4b:84:f5:90:
                    51:57:07:4e:96:49:c8:95:a3:81:a7:ed:62:ff:f1:
                    71:09:33:da:24:d1:d1:d4:34:3a:60:c9:45:0d:a3:
                    0c:aa:bc:a0:dc:05:6f:f6:12:17:df:0a:6f:a3:59:
                    43:0e:b5:9b:86:57:63:72:bd:94:74:7e:e9:07:be:
                    f3:6c:18:96:6d:4a:c5:c2:0b:03:91:ad:c2:df:9e:
                    cd:29:4d:6d:99:db:62:96:8f:cb:c5:ed:ff:ed:49:
                    9a:36:e1:41:b8:c7:7e:94:97:09:e8:5f:b7:09:a9:
                    e1:20:9a:8d:5f:a7:49:cf:b3:22:cb:70:ad:89:c0:
                    06:f1:76:b3:1b:f9:f3:00:12:8d:61:74:a1:8e:db:
                    d7:68:2d:06:b9:71:ba:8c:ed:0e:08:34:91:82:38:
                    f7:05:44:a7:a8:3d:f9:fe:a4:2b:dd:6b:7c:ab:15:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:70:91:2C:20:AE:B3:38:01:6D:2C:58:9F:F8:45:55:D5:18:1C
            X509v3 Authority Key Identifier:
                keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:b3:0a:bc:1d:03:ab:2e:5b:00:18:cc:fb:8f:c9:86:82:
         66:cf:7b:43:53:71:a7:a6:1d:76:54:bc:c6:6e:7a:4c:c9:11:
         7e:27:83:2a:0e:1b:da:1c:bf:5e:88:c7:43:b6:0d:6c:bd:4c:
         5d:d8:28:38:3a:81:0b:38:70:78:8a:65:fe:c5:6f:ee:2b:ca:
         11:2d:57:1d:f4:14:a6:ee:a3:e6:3e:9d:e2:b6:2b:5f:2e:f1:
         17:ae:24:36:78:5e:2b:60:06:38:73:50:8c:95:d0:e2:d0:a5:
         a6:19:a5:e1:04:e6:50:6c:35:a3:e4:40:03:82:01:ce:eb:52:
         67:aa:f8:75:a8:fd:7c:2e:19:9d:83:69:b7:c1:32:cb:ad:1b:
         e1:d5:98:2b:09:e9:5e:5c:65:94:a3:1b:e6:e3:bd:41:c3:38:
         80:41:d7:c5:74:44:2a:22:6e:a6:46:4f:bc:55:ad:e7:9f:17:
         44:d2:e6:25:5a:48:f7:7c:10:2a:00:2a:4d:9e:d9:60:a3:af:
         b4:6b:40:97:1f:a4:b9:fb:ea:03:8a:9e:05:47:5c:18:27:cc:
         63:2d:40:9d:46:74:a0:73:a3:f4:8a:5f:97:2f:63:75:42:68:
         5b:c9:f8:84:a0:10:01:f3:8b:a5:d5:e0:bc:96:ad:31:b2:16:
         1c:92:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:02 2025 by rpki-client