Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
File:                     wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json)
Hash identifier:          bmxXAyU1bOOeiVR9XYXpu97SeaW3uS6aRkBaDEVOgps=
Subject key identifier:   9C:CB:34:3C:EA:68:F8:68:74:A1:B7:F7:72:F2:D1:4F:76:83:3A:D9
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
Manifest number:          018D
Signing time:             Tue 17 Jun 2025 02:38:54 +0000
Manifest this update:     Tue 17 Jun 2025 02:38:54 +0000
Manifest next update:     Tue 24 Jun 2025 02:38:54 +0000
Files and hashes:         1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: KvCNfW4neH1InOuZ5rqfthA9u6pdIer1nI6ocogYeiQ=)
                          2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Jrs9iVpBkhWObUZZRk09z2kiCsYhTgr/jMdFkC3tj10=)
                          3: AB6EF82E29BC11F09DD00E61C4F9AE02.roa (hash: 1jJkOHpbFqLU6pLY6mTAFBdhrTjIN6aPx3N6rDr9+Zg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl
                          rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 02:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323, serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: Jun 17 02:38:54 2025 GMT
            Not After : Jun 24 02:38:54 2025 GMT
        Subject: CN=6850d53e-a4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:d9:ff:98:82:cd:3b:9b:63:30:2b:57:f3:
                    0b:54:c5:ac:97:7a:95:ac:85:0e:7c:7c:f8:28:b1:
                    c1:dd:d4:a8:e7:fe:6e:7f:40:c6:ca:32:db:49:67:
                    65:84:5b:22:0c:b5:4d:41:c3:32:a7:da:09:97:bc:
                    b6:50:fc:1c:a4:37:73:c4:89:31:23:b5:00:08:55:
                    38:55:1d:4f:36:ce:f9:f7:16:1c:79:56:18:e4:54:
                    a7:5c:36:0a:c1:44:55:32:e4:c8:42:67:83:30:69:
                    e0:b2:06:26:0b:96:63:47:3e:f1:3e:e8:a8:74:d1:
                    ad:e1:1d:c6:0a:63:85:4e:70:16:d1:4f:21:78:24:
                    37:e3:94:f4:ca:6e:34:6d:cc:b1:be:2c:51:38:58:
                    8a:25:5b:43:3e:33:0f:6c:33:5f:50:28:46:8c:94:
                    f7:93:b0:d3:f0:c8:e5:2c:e8:19:fd:10:4a:a5:7a:
                    6d:eb:89:1d:b2:39:99:44:20:01:5a:3a:00:08:46:
                    51:51:6a:df:33:06:17:e5:02:a1:db:64:57:e4:81:
                    be:97:d1:99:91:6d:32:26:d0:3f:d7:84:61:94:e1:
                    1b:0b:94:7c:37:ac:2b:8a:ea:66:61:d1:f3:7d:62:
                    ed:e7:d0:e7:bf:6f:ec:e7:ce:34:2f:ec:82:e2:8b:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CB:34:3C:EA:68:F8:68:74:A1:B7:F7:72:F2:D1:4F:76:83:3A:D9
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:14:27:4c:17:14:ff:3c:50:c3:54:7f:a6:38:1b:27:9f:8b:
         e2:0b:26:81:1b:98:23:1f:d0:a8:f7:d1:6c:dc:37:56:38:27:
         bb:64:62:90:fe:1f:1a:8f:6d:50:77:21:5b:5e:ea:26:82:52:
         6e:1f:a2:f9:cc:ea:df:31:cf:9b:38:b3:45:a2:44:ec:2c:2c:
         b9:85:f5:c0:4e:e7:17:55:13:c8:40:99:b4:59:24:24:bb:ce:
         bd:19:e8:1a:4c:4c:00:80:d9:ac:01:ec:99:bb:19:11:8c:73:
         50:e0:32:f9:d2:b3:ac:44:3a:11:f0:34:ad:b7:a4:4f:d9:66:
         54:69:36:bf:a7:e9:83:51:a7:9d:54:70:f8:56:af:4c:0e:9e:
         0f:79:37:4a:47:0e:8c:43:68:a3:59:04:1e:a4:88:29:26:03:
         e8:74:5d:24:7c:ea:bb:f0:8b:68:25:cf:b8:d9:92:c1:30:22:
         1b:25:ba:dd:64:f8:72:73:d6:c6:2e:a8:be:18:1b:6f:c2:58:
         60:0e:06:77:07:9b:fd:4a:e8:ea:00:30:c8:56:09:f0:8d:35:
         4e:26:0b:45:6d:7a:cd:e6:9a:b2:6f:01:0d:7f:00:b2:d4:21:
         7c:e5:fc:9a:51:f8:53:24:da:5b:4a:54:29:28:c3:87:cb:eb:
         c7:b4:b6:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3
RkE5Mjg1RDEwHhcNMjUwNjE3MDIzODU0WhcNMjUwNjI0MDIzODU0WjAYMRYwFAYD
VQQDEw02ODUwZDUzZS1hNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlonZ/5iCzTubYzArV/MLVMWsl3qVrIUOfHz4KLHB3dSo5/5uf0DGyjLbSWdl
hFsiDLVNQcMyp9oJl7y2UPwcpDdzxIkxI7UACFU4VR1PNs759xYceVYY5FSnXDYK
wURVMuTIQmeDMGngsgYmC5ZjRz7xPuiodNGt4R3GCmOFTnAW0U8heCQ345T0ym40
bcyxvixROFiKJVtDPjMPbDNfUChGjJT3k7DT8MjlLOgZ/RBKpXpt64kdsjmZRCAB
WjoACEZRUWrfMwYX5QKh22RX5IG+l9GZkW0yJtA/14RhlOEbC5R8N6wriupmYdHz
fWLt59Dnv2/s5840L+yC4ovEMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzLNDzq
aPhodKG393Ly0U92gzrZMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG
RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW
Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHFCdMFxT/PFDDVH+mOBsnn4viCyaBG5gjH9Co99Fs3DdWOCe7ZGKQ
/h8aj21QdyFbXuomglJuH6L5zOrfMc+bOLNFokTsLCy5hfXATucXVRPIQJm0WSQk
u869GegaTEwAgNmsAeyZuxkRjHNQ4DL50rOsRDoR8DStt6RP2WZUaTa/p+mDUaed
VHD4Vq9MDp4PeTdKRw6MQ2ijWQQepIgpJgPodF0kfOq78ItoJc+42ZLBMCIbJbrd
ZPhyc9bGLqi+GBtvwlhgDgZ3B5v9SujqADDIVgnwjTVOJgtFbXrN5pqybwENfwCy
1CF85fyaUfhTJNpbSlQpKMOHy+vHtLZ/
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:04:36 2025 by rpki-client