Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          hdc5Ia1Bj60nKtBUJzVOFY58W4hkN0CBTZjqyCslzqc=
Subject key identifier:   50:10:D4:D3:C8:2D:9D:25:A5:04:ED:BF:CC:E7:68:98:6A:43:C1:7C
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       05C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          05BB
Signing time:             Fri 08 Aug 2025 23:33:08 +0000
Manifest this update:     Fri 08 Aug 2025 23:33:07 +0000
Manifest next update:     Fri 15 Aug 2025 23:33:07 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: WxOF4BEQwyMWVqmqxlPGbw8NCEFk8TPYiVtdiW6Ox20=)
                          2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=)
                          3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
                          rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Aug  8 23:33:07 2025 GMT
            Not After : Aug 15 23:33:07 2025 GMT
        Subject: CN=68968933-a40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:17:38:35:a5:41:1b:96:17:93:ab:21:b6:
                    54:dc:d4:ee:b6:79:e5:e8:ea:24:93:ad:df:38:2a:
                    13:56:99:a2:84:5b:be:79:54:f4:1d:1e:20:68:dd:
                    47:d2:53:7f:63:7d:ac:17:87:10:39:a8:fd:fc:22:
                    23:52:a0:48:f8:5e:8b:e7:80:14:6b:86:43:be:b3:
                    cc:42:7f:42:d2:92:63:f3:cc:ea:ae:18:c9:40:31:
                    6c:41:bf:b9:64:ff:f7:96:46:75:b5:9d:b2:8e:7d:
                    49:0a:5b:d6:25:fa:67:d3:39:a3:b3:ea:45:3a:18:
                    6a:79:84:0b:6f:da:51:d6:ec:e1:df:b1:19:c6:b2:
                    a1:52:00:75:ce:10:ba:50:4c:99:86:20:6d:b0:1f:
                    dc:22:d8:86:37:34:04:27:9b:fb:52:6f:b9:1c:a1:
                    46:20:e4:47:d2:9a:b1:41:60:f7:aa:6f:13:92:11:
                    b2:28:a8:09:f6:c7:95:07:91:f9:30:79:fd:d4:0f:
                    f8:4e:2e:94:31:5d:3b:a6:01:56:51:c5:62:46:fe:
                    2a:29:fe:30:1c:63:db:78:5e:55:37:a4:cb:b7:3a:
                    b0:84:bc:d5:13:d2:48:ee:d3:c5:99:f9:5f:c4:a5:
                    ba:3d:a3:f0:60:7d:e6:2f:76:e2:30:33:bb:60:45:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:D4:D3:C8:2D:9D:25:A5:04:ED:BF:CC:E7:68:98:6A:43:C1:7C
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:52:d7:9a:ad:de:8c:45:a9:fe:da:17:f0:38:49:f6:d2:
         0e:92:c6:32:77:fb:34:f6:f5:b2:5b:ea:3d:af:8c:32:51:ba:
         3b:4e:89:80:a9:53:fb:b3:c8:c4:52:5f:f4:76:73:60:ea:d8:
         e1:59:22:d8:46:89:29:84:63:30:2f:87:07:05:ea:17:0b:e1:
         5f:b9:bb:f8:9b:4f:2f:76:0d:2b:32:05:f9:9b:b7:54:0a:ba:
         a7:7c:42:e5:f1:26:33:bc:0c:1d:23:97:9c:1c:fa:a6:af:c8:
         e4:24:81:c4:1a:92:c3:cc:b0:1c:08:8d:c5:2b:1e:9d:17:e0:
         f8:81:5a:eb:04:51:18:b4:17:cc:0d:12:50:ff:24:26:0b:9e:
         ce:f4:e9:90:6d:c6:87:1e:be:fe:aa:c1:bf:e8:55:59:85:98:
         05:b4:af:cd:73:94:c3:bb:45:60:bc:8d:0e:ff:82:96:fd:b5:
         28:70:56:98:44:5c:8a:7b:15:d2:65:ef:2f:04:6c:8b:1f:6c:
         c1:f6:07:b4:13:d8:4c:1a:15:21:7b:e7:71:3d:be:97:77:54:
         96:02:fa:a3:3e:2a:4a:77:7c:01:82:fd:2f:76:57:20:30:14:
         da:91:16:42:2f:0c:d0:2f:16:9e:a2:1e:36:f2:5f:7e:c0:89:
         6a:36:2b:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0
QUE3NDI4RTkwHhcNMjUwODA4MjMzMzA3WhcNMjUwODE1MjMzMzA3WjAYMRYwFAYD
VQQDEw02ODk2ODkzMy1hNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3AXODWlQRuWF5OrIbZU3NTutnnl6Ookk63fOCoTVpmihFu+eVT0HR4gaN1H
0lN/Y32sF4cQOaj9/CIjUqBI+F6L54AUa4ZDvrPMQn9C0pJj88zqrhjJQDFsQb+5
ZP/3lkZ1tZ2yjn1JClvWJfpn0zmjs+pFOhhqeYQLb9pR1uzh37EZxrKhUgB1zhC6
UEyZhiBtsB/cItiGNzQEJ5v7Um+5HKFGIORH0pqxQWD3qm8TkhGyKKgJ9seVB5H5
MHn91A/4Ti6UMV07pgFWUcViRv4qKf4wHGPbeF5VN6TLtzqwhLzVE9JI7tPFmflf
xKW6PaPwYH3mL3biMDO7YEUK/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAQ1NPI
LZ0lpQTtv8znaJhqQ8F8MB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz
RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq
U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8rVLXmq3ejEWp/toX8DhJ9tIOksYyd/s09vWyW+o9r4wyUbo7TomA
qVP7s8jEUl/0dnNg6tjhWSLYRokphGMwL4cHBeoXC+Ffubv4m08vdg0rMgX5m7dU
CrqnfELl8SYzvAwdI5ecHPqmr8jkJIHEGpLDzLAcCI3FKx6dF+D4gVrrBFEYtBfM
DRJQ/yQmC57O9OmQbcaHHr7+qsG/6FVZhZgFtK/Nc5TDu0VgvI0O/4KW/bUocFaY
RFyKexXSZe8vBGyLH2zB9ge0E9hMGhUhe+dxPb6Xd1SWAvqjPipKd3wBgv0vdlcg
MBTakRZCLwzQLxaeoh428l9+wIlqNisT
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:47 2025 by rpki-client