Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File:                     -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier:          BWg3ppGc6G8IYA8hGfoUuMTofKuqp2L8JHoc8tXNXuE=
Subject key identifier:   8D:43:E4:29:A4:3B:A6:C5:B8:8D:04:92:69:25:97:91:64:B2:4B:8D
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number:          0136
Signing time:             Tue 05 Aug 2025 04:57:15 +0000
Manifest this update:     Tue 05 Aug 2025 04:57:14 +0000
Manifest next update:     Tue 12 Aug 2025 04:57:14 +0000
Files and hashes:         1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: w+YqGj1UcnmacZmg+4kQtVMcvMy63o2fWu07OjqEBF0=)
                          2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Aug  5 04:57:14 2025 GMT
            Not After : Aug 12 04:57:14 2025 GMT
        Subject: CN=68918f2a-bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:d3:87:c6:81:a8:bd:73:5f:f2:45:31:7e:
                    1f:60:06:e7:1e:17:43:13:f0:c3:94:f6:70:75:9c:
                    17:26:c3:4d:0a:05:3a:b1:5b:07:7c:73:ab:4a:b5:
                    6c:fc:96:6d:ce:56:0e:93:e9:1b:bd:65:92:ea:19:
                    23:b4:e2:22:f1:2e:a7:cf:3a:8b:2c:20:63:37:fc:
                    98:2f:2b:09:e8:96:a3:3b:db:1a:b5:91:0e:12:94:
                    09:be:4f:cd:c5:b7:82:fc:1d:dd:de:59:6d:67:d8:
                    92:f0:b2:d0:31:ad:0b:85:07:1b:c4:3a:9a:47:52:
                    fc:b5:92:e5:f7:9a:a3:2e:68:f9:fe:95:28:73:c7:
                    29:65:70:bb:0c:0c:0f:30:ec:eb:cf:23:88:16:ac:
                    ad:67:1b:91:1d:78:b1:6c:00:23:6d:e4:15:73:05:
                    d8:bf:df:61:61:1c:d5:b2:3a:2f:0d:7b:20:4d:17:
                    1c:c2:85:6a:26:7b:cf:d2:03:74:24:11:22:aa:95:
                    7c:54:84:87:dc:7c:5b:93:f3:5a:e9:ac:f7:2d:71:
                    87:ad:c2:f1:a8:e7:09:d3:bc:b9:d0:ea:79:e5:d3:
                    de:0d:23:e6:62:9d:76:f0:a5:fa:5a:7f:0d:2f:6b:
                    5b:f5:4f:c6:28:95:1f:91:7e:55:dd:79:47:8f:5e:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:E4:29:A4:3B:A6:C5:B8:8D:04:92:69:25:97:91:64:B2:4B:8D
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:b4:3b:70:82:77:a3:0b:9e:90:99:e3:f7:25:0f:c4:ff:
         c9:0a:20:92:73:b2:c8:46:0c:75:38:9a:c2:7d:04:04:60:4e:
         0a:78:12:fb:c6:3f:3e:7e:50:c0:7e:88:66:66:dc:50:e8:24:
         69:9b:2c:03:95:ea:02:33:67:22:4c:69:f3:00:f8:fa:f6:26:
         c0:2d:84:af:d0:87:2c:b2:00:68:51:b7:f7:be:63:ef:e8:81:
         0d:b6:44:b4:32:63:c5:97:ba:6e:5b:5e:98:ab:ef:21:60:67:
         e3:67:18:84:97:6a:33:6e:bc:ba:2b:53:7f:de:22:f3:3c:3e:
         d7:9c:fd:df:1f:bb:5f:a4:fa:e5:bd:e3:a9:c9:a9:a5:65:a2:
         9a:9d:4c:4a:f9:55:4c:4c:22:e1:e7:69:f5:f0:7b:9d:14:2f:
         76:2a:6b:b7:6a:2e:11:f1:78:9e:40:ba:25:9b:6d:75:04:ac:
         59:6e:44:35:03:8b:d2:0d:07:08:1f:de:fa:ce:e0:ad:a9:86:
         5a:c8:ea:df:81:37:0a:b2:d8:9b:0c:30:00:92:f3:40:d6:f6:
         72:15:98:14:72:9b:02:70:c3:e2:a8:96:cb:03:bb:87:70:a9:
         bb:c5:8e:27:08:bf:ec:97:37:04:88:05:b0:06:5c:c3:63:d1:
         d0:11:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:48 2025 by rpki-client