Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
File:                     wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json)
Hash identifier:          4Ju2e/CCqhpbYFDsPwiBlFurgf6XVh4ylYPhS0Nfkgo=
Subject key identifier:   F7:FB:98:29:68:B0:88:70:84:92:CC:8A:2F:13:62:ED:15:83:A8:77
Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09
Certificate issuer:       /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
Certificate serial:       14E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
Manifest number:          1961
Signing time:             Tue 12 Aug 2025 16:57:30 +0000
Manifest this update:     Tue 12 Aug 2025 16:57:29 +0000
Manifest next update:     Tue 19 Aug 2025 16:57:29 +0000
Files and hashes:         1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: eA7uuJq+4NRyCHgPvmnm7Pxty9i7lcZCj+JvGEM1Hz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5353 (0x14e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
        Validity
            Not Before: Aug 12 16:57:29 2025 GMT
            Not After : Aug 19 16:57:29 2025 GMT
        Subject: CN=689b727a-6ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:2a:76:99:8f:90:d8:38:ba:05:d5:0b:25:
                    77:fa:30:fc:20:fd:49:1f:cf:a8:a6:58:fb:ef:a8:
                    65:3b:f6:e7:2b:c2:15:89:d0:c8:aa:33:84:dc:04:
                    8c:f4:a9:73:8e:0b:89:b4:01:a7:a6:4b:ec:bb:25:
                    21:09:99:79:a9:8a:0b:82:8d:90:f6:c9:10:a6:fe:
                    d4:a1:22:2c:7a:9f:26:3d:10:47:5b:48:7a:b2:e7:
                    61:d2:bb:d7:0d:31:e4:58:f3:74:24:1a:ba:5d:6f:
                    47:a4:a2:1b:c9:c5:ed:cb:1d:ad:0e:8d:77:6c:51:
                    43:7b:4d:8a:2f:05:5b:bc:ff:ff:72:4e:0c:93:fe:
                    ec:2b:d2:cf:e5:f2:f8:77:8c:ab:78:7b:38:ba:3a:
                    96:b8:5b:b8:fc:41:8e:56:bb:0e:3a:4b:40:de:c5:
                    9e:82:9b:22:7f:a7:8a:7e:0c:ce:c2:c3:9d:4d:5c:
                    fd:b8:08:53:a7:3d:b1:f3:f8:22:f3:61:b2:8a:57:
                    ba:b6:e2:33:72:94:ac:13:47:9e:4f:5f:77:e1:12:
                    a9:b0:fa:92:4a:e6:64:cd:95:57:5e:28:3a:89:40:
                    16:28:2d:6d:95:96:4b:23:9b:0c:83:1a:69:3e:51:
                    a1:70:3a:28:c6:63:0b:eb:dc:c7:1c:2e:e2:19:fb:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:98:29:68:B0:88:70:84:92:CC:8A:2F:13:62:ED:15:83:A8:77
            X509v3 Authority Key Identifier:
                keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:58:c1:25:78:16:c1:65:3f:18:5e:6f:b2:ed:e0:39:dc:f1:
         76:11:0c:f3:62:28:cb:fa:a5:ec:a1:5f:62:f4:19:e5:f4:0b:
         ce:db:8b:13:4b:79:08:3e:c8:b3:e8:db:bc:46:19:8a:75:5a:
         4f:f9:3e:11:7e:3b:ae:47:6d:44:04:fb:ad:1d:d6:71:d8:40:
         3d:ff:29:76:bd:11:85:76:1d:1e:51:15:5e:96:b6:02:82:77:
         b9:88:6f:62:d4:9e:44:29:a7:32:c5:64:a0:c5:40:67:4b:cd:
         a1:f0:53:1b:9f:81:c7:44:5d:a3:01:03:23:87:43:e1:61:5a:
         1a:18:23:df:0a:b6:49:ec:2c:6a:e2:d4:9e:70:ed:21:76:9d:
         a3:40:d3:ea:d7:ac:eb:f1:01:4a:17:5a:19:41:49:8f:82:0e:
         fb:4b:5c:b4:64:43:59:79:1c:62:3f:83:b9:41:9d:0f:41:d8:
         fa:a0:a9:0d:a4:59:6a:0b:d4:c4:c7:90:dd:20:d8:8e:77:a9:
         8b:5d:2c:35:ee:7f:d7:ae:c7:be:5b:b4:10:fe:df:90:f8:58:
         8e:9b:68:10:2e:ea:24:3b:b8:84:1d:11:01:f3:21:29:61:70:
         cf:9e:7c:a3:88:7d:25:a8:6b:a8:cb:95:f0:d5:6e:fa:b3:74:
         a0:75:fc:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz
MzBDNEI2MDkwHhcNMjUwODEyMTY1NzI5WhcNMjUwODE5MTY1NzI5WjAYMRYwFAYD
VQQDEw02ODliNzI3YS02ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5IqdpmPkNg4ugXVCyV3+jD8IP1JH8+oplj776hlO/bnK8IVidDIqjOE3ASM
9KlzjguJtAGnpkvsuyUhCZl5qYoLgo2Q9skQpv7UoSIsep8mPRBHW0h6sudh0rvX
DTHkWPN0JBq6XW9HpKIbycXtyx2tDo13bFFDe02KLwVbvP//ck4Mk/7sK9LP5fL4
d4yreHs4ujqWuFu4/EGOVrsOOktA3sWegpsif6eKfgzOwsOdTVz9uAhTpz2x8/gi
82Gyile6tuIzcpSsE0eeT1934RKpsPqSSuZkzZVXXig6iUAWKC1tlZZLI5sMgxpp
PlGhcDooxmML69zHHC7iGft0FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPf7mClo
sIhwhJLMii8TYu0Vg6h3MB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF
MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARWMEleBbBZT8YXm+y7eA53PF2EQzzYijL+qXsoV9i9Bnl9AvO24sT
S3kIPsiz6Nu8RhmKdVpP+T4RfjuuR21EBPutHdZx2EA9/yl2vRGFdh0eURVelrYC
gne5iG9i1J5EKacyxWSgxUBnS82h8FMbn4HHRF2jAQMjh0PhYVoaGCPfCrZJ7Cxq
4tSecO0hdp2jQNPq16zr8QFKF1oZQUmPgg77S1y0ZENZeRxiP4O5QZ0PQdj6oKkN
pFlqC9TEx5DdINiOd6mLXSw17n/Xrse+W7QQ/t+Q+FiOm2gQLuokO7iEHREB8yEp
YXDPnnyjiH0lqGuoy5Xw1W76s3SgdfxJ
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:31 2025 by rpki-client