Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File:                     WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier:          ajN4Sdgu4myBzUyzSO6H8d99we5s5YMsv4QGWMu4x80=
Subject key identifier:   81:40:42:02:2D:43:DE:EF:45:18:41:62:77:CF:86:9A:78:41:4F:7D
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer:       /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial:       0EF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number:          0EEA
Signing time:             Fri 22 Aug 2025 17:45:29 +0000
Manifest this update:     Fri 22 Aug 2025 17:45:28 +0000
Manifest next update:     Fri 29 Aug 2025 17:45:28 +0000
Files and hashes:         1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: jBjEz5hUvoCbdklTLAfEftU/12XTGBPQX8VhtvOqjcs=)
                          2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: 7xDsnkCThpvbOtffnvk+M6w2z5g0OVkEFMaM0Kg+k0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
                          rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3826 (0xef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
        Validity
            Not Before: Aug 22 17:45:28 2025 GMT
            Not After : Aug 29 17:45:28 2025 GMT
        Subject: CN=68a8acb8-65a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:5d:a0:74:da:b0:07:18:03:97:c4:58:6c:
                    9e:92:22:36:32:15:b9:1b:14:f3:0f:34:1e:8d:e7:
                    57:08:97:0c:b0:6b:b7:66:45:42:90:a2:6c:3d:69:
                    60:92:c9:4d:6d:10:82:df:9e:5e:06:ad:23:66:30:
                    91:71:42:dc:d0:8b:27:02:32:80:3a:60:23:67:9e:
                    7b:e5:50:19:4e:9f:e1:e1:27:c2:d2:38:06:b8:4a:
                    f6:b4:3b:b0:45:0b:f6:e8:db:5a:c8:30:4e:d8:08:
                    fb:e0:16:08:33:e3:1d:a9:f0:de:06:4d:02:79:f7:
                    a1:1d:52:08:fa:ff:ec:9a:b7:ea:bb:91:06:2b:ee:
                    f7:4e:e4:6d:55:00:6f:b1:0e:e7:57:c7:fb:53:2f:
                    ef:14:45:35:af:77:e0:19:7a:f5:21:3b:c8:c0:70:
                    0a:c1:aa:5a:ca:ff:02:17:3d:13:36:82:eb:ae:b2:
                    0f:57:e8:9b:a1:4e:76:b4:3f:f2:63:34:c6:c1:5c:
                    48:ae:0e:85:30:eb:6f:4e:9d:3e:a9:c1:ec:00:5f:
                    df:f2:5e:42:48:32:6e:f4:78:2f:35:f9:ce:46:1d:
                    e4:72:c7:71:6f:8d:2d:cf:8a:c2:30:d7:f9:a4:a5:
                    90:e8:04:94:dd:dc:df:2c:8c:19:1d:d6:64:19:be:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:42:02:2D:43:DE:EF:45:18:41:62:77:CF:86:9A:78:41:4F:7D
            X509v3 Authority Key Identifier:
                keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:f8:49:96:5a:11:b6:ef:a0:30:d9:5b:9c:36:80:3e:23:
         f4:5e:4b:a3:42:a8:57:f1:b4:6e:18:90:14:e3:1e:66:d5:9f:
         01:28:fa:d7:ae:99:a9:11:b3:e4:b1:b1:5d:f6:61:7d:53:d3:
         9c:62:6e:82:4c:61:87:01:e7:9a:82:b8:8c:b2:b4:58:f8:bb:
         1a:1d:6c:38:5f:cb:12:b1:50:aa:de:fd:67:3f:01:62:5b:4b:
         7f:03:73:31:f6:ab:39:53:ea:0a:18:05:7b:e5:84:bb:c9:6a:
         d1:ee:a7:4c:4b:8d:4c:66:8d:a5:8f:6b:e9:e9:66:8d:e7:bb:
         9f:6a:63:c4:ae:6c:41:29:03:44:d2:f2:68:0a:5a:7e:58:2c:
         32:97:a1:09:77:92:2a:93:36:b8:3d:c8:ff:50:01:c7:5b:19:
         bf:05:5c:47:5c:28:0b:f6:66:19:3a:56:72:db:c3:23:13:4d:
         a3:93:11:d5:34:03:32:99:cb:da:80:88:93:d5:2e:56:1d:bc:
         66:e2:21:38:d2:bc:70:6c:6b:ae:8e:38:8a:36:8b:85:59:05:
         d8:a2:b9:66:47:d2:f5:34:1f:8e:4e:b3:22:59:29:e1:09:d7:
         b6:ae:31:cf:3e:30:26:e0:58:54:88:9e:48:c3:97:76:88:53:
         56:92:9e:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC
MEQxNjhCQ0MwHhcNMjUwODIyMTc0NTI4WhcNMjUwODI5MTc0NTI4WjAYMRYwFAYD
VQQDEw02OGE4YWNiOC02NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3w1doHTasAcYA5fEWGyekiI2MhW5GxTzDzQejedXCJcMsGu3ZkVCkKJsPWlg
kslNbRCC355eBq0jZjCRcULc0IsnAjKAOmAjZ5575VAZTp/h4SfC0jgGuEr2tDuw
RQv26NtayDBO2Aj74BYIM+MdqfDeBk0CefehHVII+v/smrfqu5EGK+73TuRtVQBv
sQ7nV8f7Uy/vFEU1r3fgGXr1ITvIwHAKwapayv8CFz0TNoLrrrIPV+iboU52tD/y
YzTGwVxIrg6FMOtvTp0+qcHsAF/f8l5CSDJu9HgvNfnORh3kcsdxb40tz4rCMNf5
pKWQ6ASU3dzfLIwZHdZkGb4lEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFAQgIt
Q97vRRhBYnfPhpp4QU99MB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4
MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H
cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPi/hJlloRtu+gMNlbnDaAPiP0XkujQqhX8bRuGJAU4x5m1Z8BKPrX
rpmpEbPksbFd9mF9U9OcYm6CTGGHAeeagriMsrRY+LsaHWw4X8sSsVCq3v1nPwFi
W0t/A3Mx9qs5U+oKGAV75YS7yWrR7qdMS41MZo2lj2vp6WaN57ufamPErmxBKQNE
0vJoClp+WCwyl6EJd5Iqkza4Pcj/UAHHWxm/BVxHXCgL9mYZOlZy28MjE02jkxHV
NAMymcvagIiT1S5WHbxm4iE40rxwbGuujjiKNouFWQXYorlmR9L1NB+OTrMiWSnh
Cde2rjHPPjAm4FhUiJ5Iw5d2iFNWkp7H
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:35 2025 by rpki-client