Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File:                     8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier:          f2myDY3hvth15sRQYC5O4T+sO5P2LBfet5mXUbBZYMY=
Subject key identifier:   8D:F9:95:1A:B8:45:F3:8E:E9:B7:24:B4:BF:30:7F:3E:A3:06:D0:F5
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer:       /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number:          82
Signing time:             Mon 11 Aug 2025 06:55:26 +0000
Manifest this update:     Mon 11 Aug 2025 06:55:25 +0000
Manifest next update:     Mon 18 Aug 2025 06:55:25 +0000
Files and hashes:         1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: wz07KI9HPMMzPRWH+NrNTRcWjim2BFjH3OXrtfSF4zQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
        Validity
            Not Before: Aug 11 06:55:25 2025 GMT
            Not After : Aug 18 06:55:25 2025 GMT
        Subject: CN=689993dd-cca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:63:8f:31:0a:06:c4:d9:be:3e:39:6c:7d:
                    45:47:6c:ed:83:b9:b0:33:45:23:82:e9:05:aa:f1:
                    ed:d1:80:70:10:d7:df:fa:8d:c4:bc:e0:92:2c:a7:
                    13:b5:7b:dd:41:cf:c0:d5:3f:fb:94:fc:4a:8d:61:
                    89:47:57:69:e4:ce:a4:0f:e2:3f:33:5b:96:b3:42:
                    8b:1e:c6:fc:b3:90:d9:de:0e:33:61:60:f1:c5:0d:
                    69:89:a2:c8:d3:82:24:4c:8a:a9:d8:ac:7f:b2:d5:
                    1c:b7:21:dd:a4:3e:de:89:7c:94:4c:f4:4f:de:f3:
                    32:25:48:93:96:5d:fe:c9:c7:20:c7:f4:ff:0b:8e:
                    2d:14:ca:e6:47:c9:0c:e0:88:89:e5:bd:a7:a0:23:
                    67:93:51:73:7c:4c:c2:16:2b:70:0b:19:2c:0d:8e:
                    5e:48:58:59:e0:42:12:c6:4f:c7:67:19:0f:9e:c0:
                    1b:5d:c2:bb:ed:b4:9b:b7:5c:d6:7f:dd:22:04:23:
                    cb:8c:f7:c0:aa:17:29:5b:d6:87:c9:2a:6d:33:89:
                    c3:ca:81:f6:36:67:2d:2d:97:34:15:f0:f7:d3:e6:
                    24:ca:1f:36:ce:70:d1:85:dd:e0:c5:cb:8a:b9:08:
                    dc:b7:5c:2c:d2:11:4e:23:86:50:17:bf:47:82:67:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F9:95:1A:B8:45:F3:8E:E9:B7:24:B4:BF:30:7F:3E:A3:06:D0:F5
            X509v3 Authority Key Identifier:
                keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fe:0b:42:50:f7:79:29:56:14:32:ac:05:e2:b6:5b:5a:2d:
         70:e9:3d:f1:0c:52:95:67:96:cf:85:47:da:94:de:a1:b0:fe:
         44:d8:38:a6:b7:ed:d7:3b:42:28:35:39:8e:26:8d:4b:77:0c:
         fc:82:e7:57:63:0f:7c:20:2d:e3:ac:9c:ff:34:a9:45:e8:b4:
         be:b6:f3:37:00:b8:54:13:4f:d4:3c:70:fb:06:0e:98:6a:1b:
         b3:7b:d9:64:61:e9:62:da:e4:a1:73:dc:bc:ec:ae:b6:ad:00:
         22:a5:c5:ce:10:97:91:cb:39:23:bd:c7:a6:ea:ad:16:e1:7a:
         13:c9:ad:2d:3c:cd:96:ab:f4:19:e1:b0:ba:61:07:0b:bb:ae:
         ea:f7:6c:f7:30:b0:c7:50:fb:35:eb:a3:82:3f:55:45:11:85:
         ac:0d:42:39:95:ac:b6:f4:7b:2a:cd:56:9d:8b:23:4c:e3:c0:
         68:d8:2a:a5:2f:93:9a:4d:4e:42:47:69:fa:f6:d5:ba:c3:c3:
         ba:60:b4:a4:e3:3d:f3:f8:b2:b3:e2:a4:c9:9a:04:75:75:34:
         aa:e1:10:af:db:d9:33:9e:de:1d:c2:62:76:6e:1e:6a:97:fb:
         a9:56:b8:bd:4f:09:ab:ce:38:ae:3c:95:99:48:6e:30:61:55:
         51:88:67:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Q3NTYxMTAvBgNVBAUTKEYzMDlCNDkzQTkyRUU3QzYyOTVFMDA5MDYzMEEyNTFB
MUQxMzY1MTcwHhcNMjUwODExMDY1NTI1WhcNMjUwODE4MDY1NTI1WjAYMRYwFAYD
VQQDEw02ODk5OTNkZC1jY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7G9jjzEKBsTZvj45bH1FR2ztg7mwM0UjgukFqvHt0YBwENff+o3EvOCSLKcT
tXvdQc/A1T/7lPxKjWGJR1dp5M6kD+I/M1uWs0KLHsb8s5DZ3g4zYWDxxQ1piaLI
04IkTIqp2Kx/stUctyHdpD7eiXyUTPRP3vMyJUiTll3+yccgx/T/C44tFMrmR8kM
4IiJ5b2noCNnk1FzfEzCFitwCxksDY5eSFhZ4EISxk/HZxkPnsAbXcK77bSbt1zW
f90iBCPLjPfAqhcpW9aHySptM4nDyoH2NmctLZc0FfD30+Ykyh82znDRhd3gxcuK
uQjct1ws0hFOI4ZQF79HgmdWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI35lRq4
RfOO6bcktL8wfz6jBtD1MB8GA1UdIwQYMBaAFPMJtJOpLufGKV4AkGMKJRodE2UX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDc1Ni82QTQyMUE4MEIw
NjcxMUVGODIxNEQ0NjlDNEY5QUUwMi84d20wazZrdTU4WXBYZ0NRWXdvbEdoMFRa
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDc1Ni82QTQyMUE4MEIwNjcxMUVGODIxNEQ0NjlDNEY5QUUwMi84d20wazZrdTU4
WXBYZ0NRWXdvbEdoMFRaUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD/gtCUPd5KVYUMqwF4rZbWi1w6T3xDFKVZ5bPhUfalN6hsP5E2Dim
t+3XO0IoNTmOJo1Ldwz8gudXYw98IC3jrJz/NKlF6LS+tvM3ALhUE0/UPHD7Bg6Y
ahuze9lkYeli2uShc9y87K62rQAipcXOEJeRyzkjvcem6q0W4XoTya0tPM2Wq/QZ
4bC6YQcLu67q92z3MLDHUPs166OCP1VFEYWsDUI5lay29HsqzVadiyNM48Bo2Cql
L5OaTU5CR2n69tW6w8O6YLSk4z3z+LKz4qTJmgR1dTSq4RCv29kznt4dwmJ2bh5q
l/upVri9TwmrzjiuPJWZSG4wYVVRiGfL
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:19:00 2025 by rpki-client