Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File:                     wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier:          FXDTQIAL2JxU9brING1kk7ySUlZjo+nnhBNth7QEMVQ=
Subject key identifier:   35:47:42:97:6D:E7:39:04:F5:E9:52:89:A3:B1:64:21:B6:6D:7D:43
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer:       /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial:       114E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number:          113A
Signing time:             Tue 12 Aug 2025 17:23:16 +0000
Manifest this update:     Tue 12 Aug 2025 17:23:15 +0000
Manifest next update:     Tue 19 Aug 2025 17:23:15 +0000
Files and hashes:         1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: DmAAryTuJVtXndVv8GgQFg6An5gRQFe4gK1rMXdSyEY=)
                          2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4430 (0x114e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
        Validity
            Not Before: Aug 12 17:23:15 2025 GMT
            Not After : Aug 19 17:23:15 2025 GMT
        Subject: CN=689b7884-bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:d8:cb:39:55:54:ae:a0:65:a6:af:e3:d6:
                    40:c3:4c:42:a1:0d:ec:25:57:c9:dd:5d:b3:09:54:
                    6c:55:02:8d:d0:50:d4:9e:c2:f8:ac:e9:77:33:0f:
                    2b:85:64:cd:3f:9b:78:26:83:b1:71:03:35:83:1a:
                    29:2f:f2:5b:0b:14:48:57:d0:2c:54:6c:41:4f:8b:
                    08:c3:bb:2a:e2:69:84:e1:19:57:96:98:7e:16:e5:
                    62:ac:a6:7f:f8:5d:a5:d7:14:0c:dc:a5:8f:01:82:
                    6a:55:92:a8:f6:cf:48:70:0f:3d:c7:1e:f0:37:a7:
                    e9:62:8d:4c:e2:06:93:b9:6c:ec:02:83:4d:fe:d6:
                    d2:bd:c8:05:9c:4f:b0:b7:52:1c:5c:90:ad:f2:17:
                    0f:cc:d2:c6:0e:d7:9e:1b:84:8c:33:07:6b:b1:c2:
                    d2:b6:f3:3d:50:63:80:e3:2b:2b:ec:9e:9d:42:66:
                    7b:1b:25:2d:68:0f:0e:6e:d0:df:08:1c:81:05:e3:
                    f6:1e:78:ae:29:93:45:79:c4:ba:97:a2:d5:4b:d1:
                    7d:48:0b:4d:12:ff:b3:bc:57:5b:2b:76:ee:bd:b2:
                    9f:ed:9b:bf:64:0b:91:46:b5:b9:ae:51:19:5b:9d:
                    55:d8:3d:df:6a:f2:96:a3:7d:05:e5:e6:e4:97:5e:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:42:97:6D:E7:39:04:F5:E9:52:89:A3:B1:64:21:B6:6D:7D:43
            X509v3 Authority Key Identifier:
                keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:1b:22:e0:f4:b6:56:94:c7:9c:e0:2e:37:36:ef:7f:80:
         a3:d7:cb:a5:a1:39:26:e1:7c:11:7a:db:bc:56:15:7a:84:4c:
         46:e4:83:9f:ce:45:27:80:6d:82:21:3c:ee:65:76:3a:6a:f3:
         11:49:db:40:dc:0a:d1:d6:4f:7c:0b:e6:5d:7f:2f:ca:44:e6:
         a4:75:34:1e:62:d1:9a:18:f5:13:86:6b:8c:9c:38:fc:94:bb:
         1c:73:5e:70:20:27:d5:1e:57:2a:95:33:36:c3:1f:49:67:41:
         20:d6:28:b8:09:e5:ec:63:d3:80:2b:2a:0d:01:5f:72:df:ff:
         89:e8:c4:0f:16:39:49:f6:e7:aa:03:e8:e5:b4:cf:fc:db:e3:
         ad:9a:8e:b1:4a:1c:77:e4:55:ad:63:95:3a:ea:e2:20:11:32:
         4f:ea:61:37:8a:0c:21:73:31:31:d1:bf:bb:6b:a6:04:73:e5:
         38:16:d1:fc:90:17:07:09:af:b0:0a:1c:af:34:43:d8:df:60:
         7a:36:03:63:a8:81:4b:10:24:6e:f1:21:86:38:cb:8b:67:e1:
         7a:b7:ed:83:1d:9d:37:a6:37:0e:11:37:88:69:dd:7e:50:63:
         9f:5c:04:93:f3:a0:08:55:1a:a2:e1:a7:c1:01:42:96:34:44:
         ab:79:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:55:38 2025 by rpki-client