Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File:                     wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier:          s761W5zfyNsXm3T7WChxglgke2PZRZd7qvyyemu5/xo=
Subject key identifier:   E8:17:EF:0D:47:3B:CE:97:49:4A:2C:DE:D5:B1:6A:78:C4:9B:7F:0C
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer:       /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number:          01E8
Signing time:             Thu 07 Aug 2025 03:07:57 +0000
Manifest this update:     Thu 07 Aug 2025 03:07:56 +0000
Manifest next update:     Thu 14 Aug 2025 03:07:56 +0000
Files and hashes:         1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: 3CH0HYhkIZ3VpbFg+aCpw/nBIIleopyGfFNBLjICSHc=)
                          2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 03:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
        Validity
            Not Before: Aug  7 03:07:56 2025 GMT
            Not After : Aug 14 03:07:56 2025 GMT
        Subject: CN=6894188c-a8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:8a:21:99:1b:0f:85:e3:88:9b:0f:13:7d:
                    1c:d1:41:67:b5:8e:f2:d9:75:b6:96:4a:ac:27:7d:
                    aa:e3:08:6a:eb:ff:61:c2:a5:1b:ca:cf:71:37:35:
                    c5:8a:50:2d:f5:3a:41:1d:8b:88:14:83:aa:ee:9c:
                    9b:97:b6:16:73:46:21:e1:df:f6:1b:7f:07:4c:ec:
                    6a:4f:69:3c:07:f0:ed:67:85:c8:f4:c1:e9:14:0f:
                    d3:20:49:8d:13:00:fa:b4:9f:f4:d6:c1:ae:7d:f0:
                    9a:99:62:fe:11:8b:e0:3b:36:b4:13:4c:6b:1b:90:
                    32:b0:08:d9:92:af:8a:d8:d4:c3:c0:20:67:77:6d:
                    42:99:cf:e2:13:a0:61:6e:f6:64:9b:1e:a6:8d:61:
                    d3:89:0a:5a:71:36:e7:d7:74:f8:5d:db:df:23:f9:
                    2d:7d:17:40:f5:ee:a1:47:a9:94:1e:77:73:0f:a4:
                    3c:19:b5:d3:51:b5:6f:f6:93:97:60:e4:1e:ca:f8:
                    f6:5a:6f:31:32:ad:c0:c2:1e:8a:30:68:e0:26:45:
                    c7:8e:8f:d1:6d:cd:29:9c:bf:e9:84:15:34:af:e2:
                    8a:f9:1c:c3:f9:71:83:dd:71:8b:aa:7f:91:7c:d3:
                    1e:52:26:20:56:46:77:8a:f2:e6:45:96:85:cf:60:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:EF:0D:47:3B:CE:97:49:4A:2C:DE:D5:B1:6A:78:C4:9B:7F:0C
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:10:b1:d3:47:e6:c6:44:be:6d:a4:95:91:5f:e0:b9:5c:
         36:53:ae:cc:01:96:9d:78:4c:69:bd:20:d9:39:d0:a4:95:ff:
         2e:c1:60:e5:04:97:b2:23:72:80:c1:f2:cc:16:77:e3:3e:76:
         36:ff:c4:b2:ed:27:83:b5:51:28:73:f8:b0:2f:3c:86:20:21:
         88:9b:83:49:ab:e0:b0:63:79:7a:59:e7:ec:de:ad:5d:8c:02:
         3c:cb:f8:7d:9d:62:a1:e4:77:bd:ec:10:de:21:85:f4:74:d6:
         cf:60:a9:5a:ee:80:c6:c4:33:f3:b6:ce:6d:25:74:4e:82:cc:
         07:60:17:2c:30:a1:64:6c:fa:d3:08:a3:09:cb:eb:e2:15:c3:
         c3:64:ec:f9:57:fe:aa:0a:8e:eb:83:ae:4c:8e:07:5a:f6:a7:
         49:54:b1:6a:f5:0a:9d:3a:42:45:47:18:a8:96:63:b6:e6:93:
         d0:19:6c:ff:76:60:a2:7d:6f:37:8a:d3:02:6c:aa:61:14:d1:
         5d:89:6e:54:4e:92:1d:a5:67:73:55:51:bd:b2:90:85:68:41:
         1b:4a:78:fd:1d:18:3f:a4:ff:64:93:86:f9:77:55:8a:7f:90:
         d3:57:7e:cb:7f:fd:ac:58:e8:6b:38:d5:bf:73:2c:90:82:c1:
         7e:66:59:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2
OUM5MDAzRjQwHhcNMjUwODA3MDMwNzU2WhcNMjUwODE0MDMwNzU2WjAYMRYwFAYD
VQQDEw02ODk0MTg4Yy1hOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCqKIZkbD4XjiJsPE30c0UFntY7y2XW2lkqsJ32q4whq6/9hwqUbys9xNzXF
ilAt9TpBHYuIFIOq7pybl7YWc0Yh4d/2G38HTOxqT2k8B/DtZ4XI9MHpFA/TIEmN
EwD6tJ/01sGuffCamWL+EYvgOza0E0xrG5AysAjZkq+K2NTDwCBnd21Cmc/iE6Bh
bvZkmx6mjWHTiQpacTbn13T4XdvfI/ktfRdA9e6hR6mUHndzD6Q8GbXTUbVv9pOX
YOQeyvj2Wm8xMq3Awh6KMGjgJkXHjo/Rbc0pnL/phBU0r+KK+RzD+XGD3XGLqn+R
fNMeUiYgVkZ3ivLmRZaFz2BDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgX7w1H
O86XSUos3tWxanjEm38MMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx
QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF
cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi1BCx00fmxkS+baSVkV/guVw2U67MAZadeExpvSDZOdCklf8uwWDl
BJeyI3KAwfLMFnfjPnY2/8Sy7SeDtVEoc/iwLzyGICGIm4NJq+CwY3l6Wefs3q1d
jAI8y/h9nWKh5He97BDeIYX0dNbPYKla7oDGxDPzts5tJXROgswHYBcsMKFkbPrT
CKMJy+viFcPDZOz5V/6qCo7rg65Mjgda9qdJVLFq9QqdOkJFRxiolmO25pPQGWz/
dmCifW83itMCbKphFNFdiW5UTpIdpWdzVVG9spCFaEEbSnj9HRg/pP9kk4b5d1WK
f5DTV37Lf/2sWOhrONW/cyyQgsF+ZlmW
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:16:03 2025 by rpki-client