Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
File:                     2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json)
Hash identifier:          Pb2unct/nMrdx869JXvLh/RWpDadTVvWJUC/cjtc31M=
Subject key identifier:   D0:D8:CB:A4:37:DD:94:F7:12:03:10:29:38:CC:59:91:D0:3F:C8:2C
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Certificate issuer:       /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
Manifest number:          01F8
Signing time:             Wed 13 Aug 2025 02:55:29 +0000
Manifest this update:     Wed 13 Aug 2025 02:55:28 +0000
Manifest next update:     Wed 20 Aug 2025 02:55:28 +0000
Files and hashes:         1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: y/766ByveT4GM5tBWoXL3tfL8egF60sHW7izBMAvpt0=)
                          2: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: WBxu67wj7qK+1XHnF6Gm/tpT83HjDxcRJ+5R7dbCf7I=)
                          3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: +qSb4R4TGVMwO8UibifLnyUfy5g07BZr/1fOfOFiaKg=)
                          4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: TjgZvd8NTyfnTIYx+SMzczM6IMYvFc5scP1aWMMbHyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
                          rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 02:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
        Validity
            Not Before: Aug 13 02:55:28 2025 GMT
            Not After : Aug 20 02:55:28 2025 GMT
        Subject: CN=689bfea1-25c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:e9:be:99:21:7f:7d:bd:65:6a:64:85:a9:
                    7b:46:e5:8a:c4:4a:25:e7:8d:54:22:92:f3:44:c1:
                    9e:99:19:5f:da:72:78:7d:f7:1d:9b:a5:5b:3d:39:
                    f8:8e:92:95:d2:a1:63:ee:66:98:62:5e:bf:5b:d6:
                    14:76:74:99:44:12:1f:8c:8c:65:16:88:e0:18:6d:
                    65:f9:d2:8f:ae:89:44:d6:1e:52:48:ec:8f:92:21:
                    6f:53:db:3b:63:84:e9:ca:f5:3a:cc:39:f9:47:8f:
                    70:d1:39:be:4a:6c:90:ff:52:4b:fc:31:5e:06:b8:
                    16:f5:12:84:e2:77:2e:6d:b5:de:04:29:9f:f2:c8:
                    2b:0f:13:5e:bd:97:ee:01:03:db:8a:2d:67:0b:22:
                    24:23:78:b2:d0:56:b4:cf:70:f4:79:ab:e2:38:d0:
                    fe:1c:2d:3d:2e:ba:4a:37:39:3c:2d:bc:3e:65:54:
                    1f:e8:e4:29:9b:0d:81:ca:ce:a0:93:13:27:f1:9e:
                    48:15:18:ef:dd:e1:47:d4:7d:ae:7d:97:e0:0f:d8:
                    d7:bd:94:1a:5f:72:67:7d:bd:3b:54:c3:5a:d0:63:
                    d3:c5:44:ce:23:31:69:51:20:1b:95:a2:41:5b:10:
                    77:67:ca:ba:4a:de:ee:65:96:2d:0d:7e:ba:60:50:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:CB:A4:37:DD:94:F7:12:03:10:29:38:CC:59:91:D0:3F:C8:2C
            X509v3 Authority Key Identifier:
                keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:16:54:bc:6a:a1:bf:28:48:07:3a:ef:c9:98:d0:29:58:38:
         64:24:c0:a5:4d:81:61:8d:b8:e5:ed:70:c3:3a:80:79:f7:83:
         c4:e2:df:a0:29:58:9d:1f:40:f7:4d:9c:21:4e:72:e2:f8:e8:
         d8:e9:2f:dd:c6:06:61:e0:1f:da:5c:01:e9:0c:42:74:09:f0:
         54:65:b0:4d:5a:b4:88:2f:76:5f:f1:b3:18:bb:1c:95:1d:4e:
         71:75:b9:14:4d:8c:7a:92:9e:60:c2:a0:55:af:db:bf:26:eb:
         d2:62:e2:81:f0:42:fd:6e:5b:b9:5e:56:f2:5e:f0:5a:9e:13:
         f2:86:ff:03:21:e3:aa:fb:cd:d3:bd:e8:b5:d7:d7:82:f3:ea:
         92:b1:80:1b:b0:2a:05:84:37:d6:b1:f6:f0:74:37:da:63:1d:
         31:38:5f:ed:cb:82:39:5d:b2:6a:e0:ec:fd:3d:2e:3c:e6:52:
         90:61:d0:e4:a5:6d:87:b8:1d:d8:fc:91:ba:1d:c8:32:3a:c9:
         d9:6c:f0:64:ae:f1:e5:1f:e5:71:1a:9a:f6:06:2e:09:ac:2c:
         3b:a4:26:48:b9:58:88:2e:77:07:03:8f:0c:22:5b:42:e0:4d:
         46:75:fb:78:26:00:93:d9:7a:1c:55:15:2a:59:50:68:71:fe:
         05:80:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:58 2025 by rpki-client