Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
File:                     wwhUyZUfLYZr_6nE1T05k3nYD6w.mft (raw, json)
Hash identifier:          91LBmON/HaDDqcdtoHAEEjvGhSu6vv39sKWqT05lLsk=
Subject key identifier:   A1:79:EA:82:C9:A6:9E:0D:67:0D:6F:3F:8D:49:7B:35:9F:40:E3:7F
Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
Certificate issuer:       /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
Manifest number:          031C
Signing time:             Sat 23 Aug 2025 01:25:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:25:18 +0000
Manifest next update:     Sat 30 Aug 2025 01:25:18 +0000
Files and hashes:         1: wwhUyZUfLYZr_6nE1T05k3nYD6w.crl (hash: yFb8G1HlZyklal1eLdrqX+ooWfOrw3yphWSb9cljot8=)
                          2: 2E5E44C40D7311ED90DA6411C4F9AE02.roa (hash: r8Uh9OTBqfw/i4pkMudB8AOPP/913biDEHnrkKOogok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl
                          rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C89A2, serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
        Validity
            Not Before: Aug 23 01:25:18 2025 GMT
            Not After : Aug 30 01:25:18 2025 GMT
        Subject: CN=68a9187e-d12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:c6:ec:a8:66:8f:93:60:27:ee:53:24:34:
                    a5:ff:76:28:bf:c4:6c:cc:cd:3e:e3:3f:0f:22:b3:
                    76:0f:42:e4:a2:c3:7a:40:62:9d:94:ef:ab:f1:05:
                    46:1c:9d:81:2b:d1:d9:9b:8b:0b:f6:a8:3a:a2:29:
                    b7:04:34:0a:97:83:28:0e:2d:bd:98:96:04:ce:3f:
                    cd:39:a8:33:e4:2d:90:4c:d7:aa:ca:ac:e2:01:73:
                    a4:94:c5:2f:c3:07:9a:da:95:5f:0f:18:9a:9c:b8:
                    95:71:f7:83:07:ec:ac:21:66:98:d5:44:a8:91:f3:
                    c1:58:14:ea:3e:cc:58:6d:6e:7f:8d:c9:cf:dd:80:
                    39:7a:51:b9:49:fe:ad:34:06:38:16:37:e2:57:60:
                    3e:95:39:62:2c:2b:2f:3d:1c:c4:cd:8c:c6:bb:a0:
                    38:a9:f5:0f:7f:70:82:ae:ae:0c:b7:8f:c2:a6:53:
                    90:9d:7f:30:6d:65:ee:ee:60:21:2d:f6:fb:85:82:
                    ab:85:2c:42:9c:dc:bc:bc:7a:80:75:ac:17:76:2b:
                    9f:09:bc:d5:d2:7b:c9:63:9e:cc:eb:e2:c1:0b:31:
                    64:7d:13:1a:fc:1e:a5:69:01:f9:0e:cb:3b:ab:9b:
                    29:c3:d2:58:6a:15:c6:b1:cd:56:fa:9f:43:c7:f6:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:EA:82:C9:A6:9E:0D:67:0D:6F:3F:8D:49:7B:35:9F:40:E3:7F
            X509v3 Authority Key Identifier:
                keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:49:be:50:a0:fc:e9:45:f8:c6:42:1a:54:6e:de:60:d4:33:
         3c:22:da:cd:cb:77:30:15:71:cf:99:a6:75:05:a1:f2:02:9c:
         f4:2f:76:71:77:65:8d:bd:d2:53:68:8c:d4:d4:ca:26:0e:43:
         f8:2c:6c:81:79:56:56:4e:d4:9c:88:36:5b:94:fb:ae:3d:75:
         ac:25:a7:f8:e9:1c:ae:6b:0e:9e:db:62:97:5d:67:b2:bc:78:
         8d:b3:71:2f:3d:22:a2:3d:f2:8e:48:1b:b8:ed:ea:c7:ed:70:
         28:ad:9b:53:84:32:93:e8:69:cf:8f:6d:dc:d8:b5:ca:06:36:
         7a:a8:15:53:23:9c:17:3b:06:d0:54:63:83:ea:ac:d7:30:b1:
         98:19:c5:4d:bb:df:a6:25:78:8c:3f:bd:5e:d6:0c:94:4d:3f:
         b7:70:a6:ef:45:ea:23:18:3d:12:9e:4f:72:3f:23:32:74:ad:
         c2:37:57:78:da:a6:bb:8d:14:fd:2f:cb:eb:81:65:20:da:2f:
         e6:02:2d:07:d1:14:2a:2f:e4:a8:e1:13:6d:e9:37:a9:b6:12:
         b6:83:11:3b:bb:f8:15:35:f9:63:f4:41:6f:dd:9d:35:d7:7a:
         9e:b6:5a:76:9e:54:96:c0:f7:16:c3:5d:8c:0e:04:18:00:f9:
         27:78:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:52 2025 by rpki-client