Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          ACqLN+gbMtZOh2zYL90NlcNvMOOX6gd71YKBd9h/+Dc=
Subject key identifier:   9E:D8:63:90:1E:FC:5D:D2:56:C8:21:70:17:24:4D:7B:BE:52:83:2F
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          0200
Signing time:             Tue 05 Aug 2025 02:57:08 +0000
Manifest this update:     Tue 05 Aug 2025 02:57:07 +0000
Manifest next update:     Tue 12 Aug 2025 02:57:07 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: Md0Q92+BuzfIDdpiEKLQQT1kvXJzAyWt+QEci0Jws1M=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 02:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: Aug  5 02:57:07 2025 GMT
            Not After : Aug 12 02:57:07 2025 GMT
        Subject: CN=68917303-b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:76:ab:d6:c2:47:c8:2e:3b:35:c0:ae:a7:
                    61:b3:f5:06:8f:da:29:e6:75:06:0e:2e:39:c6:ac:
                    f3:52:bb:59:cf:40:d0:db:46:63:50:b2:5e:ee:a9:
                    6d:a5:94:ee:c0:96:79:30:41:e1:c3:9b:6d:6d:31:
                    f1:6c:58:47:c9:71:3e:28:65:f7:37:1b:30:24:ec:
                    1d:a1:bc:3c:1e:d1:61:c8:3a:0b:7f:d0:fd:74:44:
                    cb:84:77:6f:ae:6c:b5:4e:74:42:b3:1d:a6:a1:71:
                    71:db:26:f0:d7:93:1a:17:12:91:ae:80:fa:ed:8a:
                    9a:f0:48:d5:7a:ce:d6:1c:79:c3:8c:5a:56:39:81:
                    45:89:9c:c8:d3:c7:90:e0:bc:1e:aa:bb:0c:1d:8c:
                    ab:c2:3f:62:f1:b3:01:aa:fb:76:23:40:e2:05:05:
                    b0:22:68:6b:1e:54:ef:75:e9:1c:1e:85:32:02:f2:
                    21:07:98:8f:32:c8:0a:45:e1:0d:7b:e6:a7:06:19:
                    47:2f:dc:c9:7c:37:f5:e0:01:e1:d1:95:f2:bf:9b:
                    6e:50:ce:cb:ac:15:e9:a8:82:ea:ca:b8:13:77:69:
                    e8:0c:7f:8a:92:e5:d1:38:f1:c0:4d:04:42:36:40:
                    92:64:26:bf:ad:0c:45:8a:01:ee:8a:c1:75:ca:9f:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:63:90:1E:FC:5D:D2:56:C8:21:70:17:24:4D:7B:BE:52:83:2F
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:75:83:1d:8d:f6:1a:b2:50:36:25:13:27:1c:7d:c8:5e:
         fc:31:06:86:6c:08:f5:15:53:e4:35:a5:83:8c:e8:8f:b4:09:
         a6:9f:77:c9:26:9f:34:af:ff:34:f3:5c:a1:5b:2a:b7:5d:35:
         ab:b7:90:59:2e:a7:d6:ff:e0:f0:47:15:07:af:fe:8b:af:19:
         85:cc:23:32:79:c9:a1:20:46:00:2f:48:f7:2a:5b:d3:9e:a0:
         2a:ba:0f:80:4c:b2:ea:91:5f:9f:70:ca:6f:d0:2c:98:ac:ac:
         09:4a:1e:c7:cd:84:b5:30:17:56:be:0d:36:e7:6d:ca:88:8d:
         0c:c4:b7:cb:df:04:7a:c7:60:db:18:90:17:87:3e:7c:7b:0b:
         a8:4a:b7:2e:c9:ec:d8:2c:ed:e4:42:ad:70:d0:1f:5c:f7:3e:
         8e:b2:b8:68:75:a6:5f:13:7e:aa:04:56:3a:c4:62:15:cd:ba:
         46:39:33:0a:79:56:45:ef:9a:d7:c0:82:29:1f:2a:6d:f9:e4:
         20:67:fa:6f:9a:f8:88:68:05:84:a6:ad:c6:05:ba:db:12:58:
         43:a8:44:f4:2a:dc:42:94:3b:47:80:e8:f4:fc:2e:80:84:dc:
         09:54:9c:46:bd:40:66:29:0e:6c:18:82:b0:5e:8f:ca:19:8f:
         96:ee:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:04 2025 by rpki-client