Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          TPqKcPTCUlYOi8HyPaaC69I5fClelFQyLVNcd0Ax7bE=
Subject key identifier:   6B:7D:02:50:5C:EB:B3:B3:2B:77:E8:8F:18:BE:EE:63:B8:86:B8:69
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          19
Signing time:             Tue 05 Aug 2025 08:38:05 +0000
Manifest this update:     Tue 05 Aug 2025 08:38:05 +0000
Manifest next update:     Tue 12 Aug 2025 08:38:05 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: NPrUMek+Qb3LFPkbE84+qtpGmtbs94Y7eSMq9VGzqf4=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 08:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Aug  5 08:38:05 2025 GMT
            Not After : Aug 12 08:38:05 2025 GMT
        Subject: CN=6891c2ed-f6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:8d:91:70:0c:54:3c:00:f5:61:9e:a4:3c:
                    89:3b:79:87:60:e3:ff:06:f2:46:69:ae:5e:4b:22:
                    8e:f9:b5:9b:c4:cc:bc:1c:dd:9a:96:d0:63:f3:12:
                    c9:49:28:71:28:c4:97:94:6e:c4:db:d9:7e:23:89:
                    a5:c3:91:3b:9f:b8:04:9c:67:4a:af:a2:86:90:ac:
                    13:c5:c8:a0:f7:38:a6:b6:ba:c5:0a:0a:ed:a5:42:
                    ca:f5:00:48:86:66:e1:a6:7a:c8:46:4f:73:30:c0:
                    52:85:b3:37:e9:24:dd:1c:0b:6c:16:6c:e5:78:aa:
                    59:04:b4:c7:ee:c0:c3:0b:8b:1f:cf:ee:7f:60:f8:
                    a3:80:b7:4a:f3:46:13:76:51:e3:9a:49:8a:f9:58:
                    1b:3d:65:cd:18:6f:a4:ae:0a:07:29:03:ae:fe:8f:
                    56:c2:21:45:50:68:de:53:04:66:a7:1f:75:c3:52:
                    f1:bf:70:76:e7:cf:13:b2:39:a2:83:74:c2:a1:1d:
                    88:35:29:f3:8e:f6:9d:9e:cf:d2:39:0f:da:c7:59:
                    0f:ff:d1:eb:86:e2:25:47:4d:67:aa:c7:03:d6:6b:
                    2e:64:66:40:a5:67:21:8f:82:ee:4d:6f:07:a4:ab:
                    8a:96:71:e3:f6:2a:04:c3:8a:48:c7:15:f2:4a:cd:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:02:50:5C:EB:B3:B3:2B:77:E8:8F:18:BE:EE:63:B8:86:B8:69
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:04:28:b0:58:94:37:11:33:24:2a:eb:85:6b:ef:d0:4d:c9:
         a5:37:dd:65:f9:f3:1f:73:89:e2:35:1b:2d:57:32:24:92:b7:
         f6:18:6a:25:3e:d6:07:b4:4e:6c:75:f5:20:92:94:5b:f3:ef:
         d0:0a:42:36:03:ac:4b:89:73:f8:35:23:10:1a:21:04:9d:ab:
         f3:9b:8a:b6:9b:34:08:a4:1d:6a:38:25:ce:ea:3c:b5:b7:eb:
         cd:2c:ef:f8:b4:bb:d8:cd:1b:fa:6b:1b:e9:64:06:b4:16:1b:
         04:23:ee:0d:eb:84:d0:2c:1a:b9:19:a1:a4:27:29:1d:3c:62:
         23:c8:0e:0e:e8:d3:35:24:0e:a4:ae:8f:4e:af:dd:5e:b5:ee:
         ea:c3:97:1c:22:8e:a8:50:57:e6:af:08:e4:e7:e9:84:d4:b9:
         f6:10:db:d2:66:3d:7f:24:cf:f3:a3:de:5d:7f:e0:b8:f5:19:
         7a:81:cc:73:da:0a:47:4b:7a:05:fe:6a:a3:9c:63:dc:fd:9f:
         ff:14:a0:1d:16:98:94:95:3d:1d:e1:82:bd:fe:3a:3b:04:f6:
         f5:96:04:c3:40:ad:d4:b6:23:8d:bf:27:bd:d7:94:9a:b1:c9:
         4c:b3:59:bb:6d:44:97:b7:3f:f9:ef:cc:89:91:0c:b5:e0:08:
         c3:7c:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:25 2025 by rpki-client