Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File:                     wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier:          mDzdqg8m2OsQwgBkDzMnG9V0VJtBy6sqivO5y/3kGsg=
Subject key identifier:   3A:ED:FC:1D:6B:3D:8E:7F:5E:58:E2:BA:8C:AE:45:83:33:6A:ED:61
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       0522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number:          0513
Signing time:             Fri 22 Aug 2025 23:48:21 +0000
Manifest this update:     Fri 22 Aug 2025 23:48:21 +0000
Manifest next update:     Fri 29 Aug 2025 23:48:21 +0000
Files and hashes:         1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: sRIufKU2SfrTcwLi4z0UFGVqE7+UrHyuV6fi+LV05Sg=)
                          2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: zY32yJX3jzHsHVwyop2pV6zAgsbf1EOVZMtyU3SMaOA=)
                          3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: 5fcNDjODuX+Wud6BJhR1unaL4AuUrkvgumx1Eb2bLL0=)
                          4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: 7cDuXPQWcIW5Oc/4i0Jk6KxH1ssYqm1jhqIMrjbxO/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Aug 22 23:48:21 2025 GMT
            Not After : Aug 29 23:48:21 2025 GMT
        Subject: CN=68a901c5-8086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:19:a4:e1:03:71:0e:74:9c:a1:f7:52:bd:
                    83:cb:09:2d:d7:0f:5a:33:0c:2f:97:f9:25:56:3c:
                    89:f7:58:8a:78:8f:3a:8b:ad:3e:4d:e5:cb:ca:c3:
                    24:34:57:63:98:8c:39:38:08:a3:4a:fb:84:dd:a5:
                    74:7e:94:2e:9d:a4:c1:4e:90:5c:a8:3f:c5:b0:26:
                    4d:db:80:69:af:28:ad:13:e6:df:e2:e1:4d:f4:e4:
                    da:6a:de:d7:64:ea:ea:c0:ab:af:d5:67:4d:54:81:
                    1d:8c:3b:fd:b1:6a:1c:8f:46:8c:ba:cc:e4:ab:63:
                    06:69:0a:8e:0a:c6:f3:dd:bb:24:56:db:5f:9e:34:
                    8f:00:4c:19:d1:13:e0:ab:50:99:da:ca:41:a2:9a:
                    02:35:ad:b5:04:38:fc:fc:4f:a6:70:aa:39:8f:65:
                    7a:8d:7a:de:96:26:77:10:eb:0e:d5:40:38:3f:10:
                    e4:3b:d0:9f:4e:4b:79:f1:e0:65:09:22:96:9c:2b:
                    5c:13:f3:b9:9d:a1:4b:c2:66:41:9f:7a:61:22:ba:
                    a4:4f:b2:34:e6:52:52:23:df:02:d6:a8:15:79:03:
                    4c:e9:5b:4d:10:7c:a5:5e:a0:69:6f:0e:ba:76:b9:
                    15:7d:cf:d8:fe:b0:5c:e0:a2:5a:b3:7b:af:0c:90:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:FC:1D:6B:3D:8E:7F:5E:58:E2:BA:8C:AE:45:83:33:6A:ED:61
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:9b:86:67:da:48:72:71:9b:6d:f3:e9:d4:a1:9a:a7:0b:
         ba:60:50:82:8d:21:82:54:6f:0a:ff:68:81:09:e2:45:1c:a8:
         9f:e4:f1:59:7b:cc:93:1a:4c:75:1f:26:9f:96:22:a4:50:03:
         ae:7f:b6:07:d1:dc:39:d7:13:5e:ab:da:d3:03:ac:8f:30:12:
         61:85:e7:a7:55:19:ab:a7:61:37:a5:4e:79:c7:b6:c5:38:da:
         9e:ef:0f:a4:c7:c2:8a:ed:ca:5b:78:4f:8f:a7:62:68:36:6f:
         77:9e:51:f4:09:23:22:e2:49:cb:6f:21:e3:a0:60:41:84:0e:
         80:ee:37:63:9f:f1:9a:3a:0f:fa:2f:3e:5e:2c:9e:14:21:c0:
         10:81:e5:01:5c:d7:6f:f6:5d:32:c4:f1:1e:87:53:e2:bc:0c:
         85:cd:dd:b3:f4:ad:4f:ad:fd:e2:a0:6f:fc:6f:e8:2f:79:32:
         ea:95:18:d1:a5:4b:df:f8:89:e0:f9:d6:c7:cc:2c:fc:00:2f:
         b5:da:5d:d9:77:d2:7a:95:a8:68:92:64:0e:b5:fa:4b:86:bd:
         2f:6b:2a:24:24:da:ff:b8:e6:32:ab:ac:cc:36:c9:3e:48:2f:
         e0:d8:ca:70:51:f7:64:17:91:82:7b:3a:b0:a3:0e:c1:ce:18:
         b1:64:cf:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1
QUY0QjgwNTkwHhcNMjUwODIyMjM0ODIxWhcNMjUwODI5MjM0ODIxWjAYMRYwFAYD
VQQDEw02OGE5MDFjNS04MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4IZpOEDcQ50nKH3Ur2Dywkt1w9aMwwvl/klVjyJ91iKeI86i60+TeXLysMk
NFdjmIw5OAijSvuE3aV0fpQunaTBTpBcqD/FsCZN24BpryitE+bf4uFN9OTaat7X
ZOrqwKuv1WdNVIEdjDv9sWocj0aMuszkq2MGaQqOCsbz3bskVttfnjSPAEwZ0RPg
q1CZ2spBopoCNa21BDj8/E+mcKo5j2V6jXreliZ3EOsO1UA4PxDkO9CfTkt58eBl
CSKWnCtcE/O5naFLwmZBn3phIrqkT7I05lJSI98C1qgVeQNM6VtNEHylXqBpbw66
drkVfc/Y/rBc4KJas3uvDJDpawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrt/B1r
PY5/XljiuoyuRYMzau1hMB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5
QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDkzMS9EMUQzMkI2RTE5QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFF
c1ZIdU9NQ0ppSXBhOUxnRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8UpuGZ9pIcnGbbfPp1KGapwu6YFCCjSGCVG8K/2iBCeJFHKif5PFZ
e8yTGkx1HyafliKkUAOuf7YH0dw51xNeq9rTA6yPMBJhheenVRmrp2E3pU55x7bF
ONqe7w+kx8KK7cpbeE+Pp2JoNm93nlH0CSMi4knLbyHjoGBBhA6A7jdjn/GaOg/6
Lz5eLJ4UIcAQgeUBXNdv9l0yxPEeh1PivAyFzd2z9K1Prf3ioG/8b+gveTLqlRjR
pUvf+Ing+dbHzCz8AC+12l3Zd9J6lahokmQOtfpLhr0vayokJNr/uOYyq6zMNsk+
SC/g2MpwUfdkF5GCezqwow7BzhixZM+X
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:50 2025 by rpki-client