Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          99DkIfup8CJ7uV0decZOyENBhSjcgtcys9vKkMMAHjg=
Subject key identifier:   4A:67:2F:22:76:EF:2F:02:36:09:83:1F:4B:6C:14:DF:D7:24:36:21
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       05A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          05A2
Signing time:             Fri 22 Aug 2025 23:21:54 +0000
Manifest this update:     Fri 22 Aug 2025 23:21:53 +0000
Manifest next update:     Fri 29 Aug 2025 23:21:53 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: h/IaS0dOh50CV+lLX+S7H9nedsDvyN/TOUaZF79s8rQ=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1447 (0x5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Aug 22 23:21:53 2025 GMT
            Not After : Aug 29 23:21:53 2025 GMT
        Subject: CN=68a8fb91-626f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:86:99:b9:28:d7:30:f5:4b:72:75:77:c3:
                    bf:3f:fb:36:3f:0c:d9:85:bf:76:b3:7c:dd:da:ae:
                    47:b4:90:9d:ea:63:d8:6a:5b:bf:93:0c:95:a2:50:
                    7b:ed:63:0c:b8:88:89:d9:6e:d7:34:15:bd:1b:3f:
                    45:19:f0:73:ad:02:84:78:d2:7d:91:bf:2e:a9:0b:
                    66:60:92:4b:40:9b:ed:d2:1c:f4:45:23:16:7b:9d:
                    4d:cd:24:91:58:13:0a:7c:8d:9b:4e:21:00:90:97:
                    61:f5:24:4d:90:31:27:f1:f1:77:f5:c8:0b:04:3d:
                    60:6d:07:df:66:ca:97:11:7e:e7:ff:53:da:6c:f8:
                    c1:0b:c4:d1:a2:bf:99:d5:91:27:cd:c3:e2:9e:3b:
                    f5:ac:60:3a:df:6e:37:4b:4b:e9:ee:b4:e9:4a:97:
                    70:85:25:23:84:a0:6a:17:7c:1e:ba:ea:10:d9:08:
                    f7:6e:d0:f8:26:c7:fe:82:5e:4e:e3:fc:4f:3f:f0:
                    0f:57:1e:3c:d0:22:b1:c1:b2:c9:e2:7c:51:09:e3:
                    d4:db:3c:8d:38:d2:6b:ef:58:7d:e9:96:0e:2e:3b:
                    5b:78:58:e1:50:63:06:33:69:5a:42:2c:a5:16:ba:
                    8c:0c:b9:f8:08:7d:c6:d8:24:3b:6a:33:06:83:a8:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:67:2F:22:76:EF:2F:02:36:09:83:1F:4B:6C:14:DF:D7:24:36:21
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:f5:78:a2:66:46:6b:22:98:0d:37:28:74:f1:57:79:ba:
         b6:dd:53:9d:46:9d:da:96:63:fa:e5:e6:66:d2:d5:e8:67:2a:
         18:ac:99:91:26:fa:db:41:dc:91:91:6a:aa:a4:36:36:6a:4b:
         00:a6:8b:af:29:da:fd:a5:0e:66:7d:da:53:51:53:32:93:0a:
         7d:59:4b:de:f7:e3:ce:0d:58:ff:e7:2d:f1:71:fb:ea:01:6a:
         87:0c:ef:8b:51:ed:e3:cc:78:47:96:2a:c0:90:3a:f6:29:50:
         29:bc:d8:9f:24:2f:4c:a6:ac:d5:c1:98:20:51:7b:ae:c4:78:
         d5:3c:9c:9c:00:47:48:a5:77:17:9d:1e:aa:bc:27:45:be:21:
         b8:7f:1e:49:df:84:78:92:33:41:7a:2e:7d:ee:73:a7:19:35:
         fa:55:51:3a:c6:dd:dc:f4:32:23:ae:d3:5d:66:35:c2:43:c6:
         f6:87:6a:2f:ff:c0:92:58:71:71:2e:3b:1c:8c:ec:77:1a:28:
         cc:8c:e8:ad:e1:c9:64:a2:93:ea:86:62:71:b4:0e:a4:87:10:
         da:e3:1e:a6:b1:d1:88:e6:2e:69:f0:01:46:69:74:4e:12:59:
         79:bc:f3:3e:9e:c1:ee:0e:37:65:5a:a0:e3:3a:19:5f:3e:fe:
         70:e4:27:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD
MzQxNzdBQ0YwHhcNMjUwODIyMjMyMTUzWhcNMjUwODI5MjMyMTUzWjAYMRYwFAYD
VQQDEw02OGE4ZmI5MS02MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzq6Gmbko1zD1S3J1d8O/P/s2PwzZhb92s3zd2q5HtJCd6mPYalu/kwyVolB7
7WMMuIiJ2W7XNBW9Gz9FGfBzrQKEeNJ9kb8uqQtmYJJLQJvt0hz0RSMWe51NzSSR
WBMKfI2bTiEAkJdh9SRNkDEn8fF39cgLBD1gbQffZsqXEX7n/1PabPjBC8TRor+Z
1ZEnzcPinjv1rGA63243S0vp7rTpSpdwhSUjhKBqF3weuuoQ2Qj3btD4Jsf+gl5O
4/xPP/APVx480CKxwbLJ4nxRCePU2zyNONJr71h96ZYOLjtbeFjhUGMGM2laQiyl
FrqMDLn4CH3G2CQ7ajMGg6iC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpnLyJ2
7y8CNgmDH0tsFN/XJDYhMB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF
MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2
alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOzfV4omZGayKYDTcodPFXebq23VOdRp3almP65eZm0tXoZyoYrJmR
JvrbQdyRkWqqpDY2aksApouvKdr9pQ5mfdpTUVMykwp9WUve9+PODVj/5y3xcfvq
AWqHDO+LUe3jzHhHlirAkDr2KVApvNifJC9MpqzVwZggUXuuxHjVPJycAEdIpXcX
nR6qvCdFviG4fx5J34R4kjNBei597nOnGTX6VVE6xt3c9DIjrtNdZjXCQ8b2h2ov
/8CSWHFxLjscjOx3GijMjOit4clkopPqhmJxtA6khxDa4x6msdGI5i5p8AFGaXRO
Ell5vPM+nsHuDjdlWqDjOhlfPv5w5Cdt
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:25 2025 by rpki-client