Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          TxFtXWvQZpU1JELpyAiC9oPb7VF4YPWLDkz+JaxBm7w=
Subject key identifier:   C4:FE:85:11:93:7E:CD:8D:7B:05:52:02:C8:90:D9:FD:4F:9A:C3:BC
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          07C8
Signing time:             Fri 08 Aug 2025 21:31:37 +0000
Manifest this update:     Fri 08 Aug 2025 21:31:36 +0000
Manifest next update:     Fri 15 Aug 2025 21:31:36 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: SIXC7HP6hw1fQVScyuNgZdTGEgZb+JUr9gYIuxUONVE=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Aug  8 21:31:36 2025 GMT
            Not After : Aug 15 21:31:36 2025 GMT
        Subject: CN=68966cb9-be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:ac:d3:b0:b1:07:1b:5e:44:92:ca:bc:0b:
                    14:d8:ff:cd:2d:ed:e2:fe:31:48:49:ab:c8:b2:fc:
                    dd:36:6b:f1:29:ad:bc:02:eb:e6:ba:4a:75:53:ae:
                    8e:63:0a:b5:0c:e0:18:09:56:81:c8:40:1d:3c:22:
                    4e:67:e7:40:62:a3:b2:47:6e:52:38:9a:88:d0:6e:
                    e9:77:18:f5:38:9b:aa:44:3d:13:28:ff:43:ef:d3:
                    be:05:77:f9:c0:e5:fe:44:19:b6:36:19:5f:f2:72:
                    86:37:ea:a5:54:cd:e4:ba:24:d4:90:c6:5b:ac:dc:
                    90:e1:4e:21:d9:32:4d:29:33:f0:33:b1:e7:37:07:
                    28:57:90:2e:4f:da:ed:0b:6f:59:44:4a:20:73:2c:
                    9d:ef:a8:35:a4:37:1f:c2:ef:d6:3b:96:c1:7d:07:
                    e4:a9:4e:2c:1c:d6:1c:e7:5b:01:51:fb:9c:90:a5:
                    47:68:32:ea:f7:4d:37:cb:65:25:53:03:ee:a9:1c:
                    92:f0:dc:34:c5:80:fc:49:80:c5:72:a3:a7:22:6a:
                    97:3e:f4:f4:9d:e0:ee:77:5d:2f:82:4a:12:81:8f:
                    cf:22:86:58:bb:0a:8a:85:0c:18:07:fe:79:69:42:
                    25:42:4d:6c:3b:80:f9:7c:58:0a:a0:d2:a1:0d:49:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:85:11:93:7E:CD:8D:7B:05:52:02:C8:90:D9:FD:4F:9A:C3:BC
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:78:8b:e1:57:4c:06:0e:8e:ba:74:d9:7a:5d:45:63:4d:
         b0:b6:39:dc:f0:b1:68:09:15:e8:15:92:62:5c:bb:da:bb:56:
         fd:f8:43:90:6c:fe:84:f0:bc:32:1c:7e:32:e5:99:d6:2b:4f:
         1d:b6:46:a5:e1:ee:84:a2:63:88:a7:05:2a:05:11:c2:58:12:
         82:c9:27:4d:15:a4:59:63:ee:10:b3:0b:b7:da:e2:b4:2d:af:
         fe:ca:7d:cd:59:45:c1:5f:d8:41:36:ec:90:39:3c:c2:3f:10:
         d6:76:d7:58:f2:65:b2:a5:cc:5f:dd:37:f4:90:09:e7:34:69:
         63:36:c1:c9:3e:78:eb:06:ca:f3:32:76:92:89:b2:90:0f:e4:
         a1:61:60:3f:46:2e:83:64:1f:c5:8b:db:53:86:28:32:d5:42:
         88:8b:c7:f5:38:b4:08:0a:d8:db:cd:68:8a:76:99:6c:a8:fd:
         8f:dd:24:e1:40:31:c7:14:45:45:4e:a7:18:8b:b3:a7:39:6e:
         b3:4d:13:0b:69:11:51:41:ad:d7:6f:26:76:1b:62:72:92:02:
         d9:a7:64:eb:0f:6f:85:2a:43:1e:ad:2c:11:ed:7f:e7:33:28:
         7e:4f:a1:ec:39:f2:87:02:6b:fc:02:ff:5b:24:c5:ba:c0:69:
         79:31:b3:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBNzAxMTAvBgNVBAUTKEMxMkYwRjU3MkRBMzM4RDIxMzQ0MUVGMDdDQTUxMUQx
QTlDODlCNkQwHhcNMjUwODA4MjEzMTM2WhcNMjUwODE1MjEzMTM2WjAYMRYwFAYD
VQQDEw02ODk2NmNiOS1iZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8q6s07CxBxteRJLKvAsU2P/NLe3i/jFISavIsvzdNmvxKa28Auvmukp1U66O
Ywq1DOAYCVaByEAdPCJOZ+dAYqOyR25SOJqI0G7pdxj1OJuqRD0TKP9D79O+BXf5
wOX+RBm2Nhlf8nKGN+qlVM3kuiTUkMZbrNyQ4U4h2TJNKTPwM7HnNwcoV5AuT9rt
C29ZREogcyyd76g1pDcfwu/WO5bBfQfkqU4sHNYc51sBUfuckKVHaDLq9003y2Ul
UwPuqRyS8Nw0xYD8SYDFcqOnImqXPvT0neDud10vgkoSgY/PIoZYuwqKhQwYB/55
aUIlQk1sO4D5fFgKoNKhDUl1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT+hRGT
fs2NewVSAsiQ2f1PmsO8MB8GA1UdIwQYMBaAFMEvD1ctozjSE0Qe8HylEdGpyJtt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0E3MC9BNzEyNUQ3NjAz
QUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9OSVRSQjd3ZktVUjBhbklt
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTOFBWeTJqT05JVFJCN3dmS1VSMGFuSW0yMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0E3MC9BNzEyNUQ3NjAzQUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9O
SVRSQjd3ZktVUjBhbkltMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpmXiL4VdMBg6OunTZel1FY02wtjnc8LFoCRXoFZJiXLvau1b9+EOQ
bP6E8LwyHH4y5ZnWK08dtkal4e6EomOIpwUqBRHCWBKCySdNFaRZY+4Qswu32uK0
La/+yn3NWUXBX9hBNuyQOTzCPxDWdtdY8mWypcxf3Tf0kAnnNGljNsHJPnjrBsrz
MnaSibKQD+ShYWA/Ri6DZB/Fi9tThigy1UKIi8f1OLQICtjbzWiKdplsqP2P3STh
QDHHFEVFTqcYi7OnOW6zTRMLaRFRQa3XbyZ2G2JykgLZp2TrD2+FKkMerSwR7X/n
Myh+T6HsOfKHAmv8Av9bJMW6wGl5MbNm
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:32 2025 by rpki-client