Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
File:                     We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json)
Hash identifier:          1QpTqrMcSPOQEqplNTAjeLbn3nHx7E88KcHWJCbQBqw=
Subject key identifier:   65:35:A7:00:3F:A2:28:EE:46:43:5D:E6:9D:5C:C2:C6:F0:94:BB:74
Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
Certificate issuer:       /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
Manifest number:          0723
Signing time:             Fri 08 Aug 2025 22:14:58 +0000
Manifest this update:     Fri 08 Aug 2025 22:14:58 +0000
Manifest next update:     Fri 15 Aug 2025 22:14:58 +0000
Files and hashes:         1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: iwXWbKCLBBBdAPA6u+MxWECgWStM6j3kQJDtI9+ebVk=)
                          2: FD9457225B1011F0A31EF763C4F9AE02.roa (hash: f2u+VQYSLCUV6iKDxcf/7BZ46ThgcrDUrUJ8DXZ7tUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
                          rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
        Validity
            Not Before: Aug  8 22:14:58 2025 GMT
            Not After : Aug 15 22:14:58 2025 GMT
        Subject: CN=689676e2-5dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:17:4d:07:00:ea:f9:45:fc:0e:2f:7b:10:
                    42:44:c7:73:2f:0b:29:69:fd:76:45:29:ca:ef:d9:
                    53:78:6b:9a:27:03:9d:6d:be:79:2a:1d:66:d4:25:
                    5d:55:12:13:c8:d4:50:50:73:e5:bb:c2:35:d4:54:
                    57:a3:fa:3e:a0:4e:ca:41:99:e6:e0:a9:c0:b2:ee:
                    99:e9:86:5c:e5:d9:c8:f3:c3:68:be:4b:9b:ce:df:
                    81:7f:3f:ce:78:7b:da:cc:5d:30:f7:9e:ca:46:95:
                    bd:70:5f:4e:82:63:a5:e2:45:7e:4e:de:ed:a6:19:
                    20:f9:45:46:5c:d9:2a:51:cf:ef:b6:31:a8:07:91:
                    f4:e1:fe:14:0d:09:27:e3:d8:3e:bc:13:93:05:18:
                    f2:88:30:21:72:d4:37:83:48:cd:fe:e8:ac:69:46:
                    74:03:da:e1:11:3d:04:18:73:1c:08:d7:21:68:18:
                    b8:d1:f3:a5:28:f8:77:c0:3b:86:eb:be:eb:11:d8:
                    4a:96:09:bc:f0:fd:10:77:2c:ac:40:71:d8:56:fc:
                    b8:f0:84:7d:74:e6:d3:f8:a0:ca:e4:73:94:b7:f8:
                    76:2d:aa:3b:3c:fd:2d:be:94:ed:55:6f:eb:fe:ab:
                    16:e0:41:a8:15:0e:64:03:93:b9:a0:d0:e4:b3:3c:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:A7:00:3F:A2:28:EE:46:43:5D:E6:9D:5C:C2:C6:F0:94:BB:74
            X509v3 Authority Key Identifier:
                keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:9a:aa:9e:33:ad:35:0d:20:f0:5a:23:be:03:a7:50:6d:
         f6:1e:9e:7b:a4:9b:8b:86:e0:09:17:87:c5:02:95:bd:f0:51:
         47:53:5e:0a:81:2d:76:0e:b2:bf:dd:e1:ca:5a:a0:d4:7b:51:
         c8:c5:5e:f5:69:a7:b0:68:62:a8:11:60:2b:b8:41:c8:8a:a8:
         6c:2f:43:93:9a:8e:ab:4b:86:7c:fd:fb:b1:ab:e8:f0:12:21:
         da:aa:54:21:33:3f:46:a4:4c:bd:a1:60:3e:12:cd:f2:08:80:
         ea:6e:5e:2f:18:14:82:29:b7:fc:c6:b2:df:be:f1:d7:c0:e3:
         e3:d7:13:f4:5a:70:08:11:50:2a:b6:42:e6:61:49:56:db:5f:
         d4:8b:71:34:70:9c:90:6d:16:94:34:43:a9:d2:09:21:e8:74:
         e5:1c:f7:23:bd:cb:a7:1b:0a:8a:73:bf:ae:6c:9d:c8:b2:02:
         5a:8f:74:81:b7:36:82:f8:06:a5:3c:15:0b:c8:1e:0b:ac:16:
         65:5f:12:4e:1b:6a:df:5c:1e:6d:6b:4a:6f:11:21:88:34:ec:
         0e:cb:57:20:5f:41:ff:a1:eb:a3:a7:7a:fb:93:1e:52:f8:df:
         b6:51:bb:fb:23:b6:d8:81:6f:85:30:c8:5d:2d:33:08:e7:d1:
         c3:ab:62:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGQUYxMTAvBgNVBAUTKDU5RURFODE2OUIwQTJDMzIxNDY5RkYxMUIxNjI4QkRF
MEMxRjJDNDEwHhcNMjUwODA4MjIxNDU4WhcNMjUwODE1MjIxNDU4WjAYMRYwFAYD
VQQDEw02ODk2NzZlMi01ZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3MXTQcA6vlF/A4vexBCRMdzLwspaf12RSnK79lTeGuaJwOdbb55Kh1m1CVd
VRITyNRQUHPlu8I11FRXo/o+oE7KQZnm4KnAsu6Z6YZc5dnI88Novkubzt+Bfz/O
eHvazF0w957KRpW9cF9OgmOl4kV+Tt7tphkg+UVGXNkqUc/vtjGoB5H04f4UDQkn
49g+vBOTBRjyiDAhctQ3g0jN/uisaUZ0A9rhET0EGHMcCNchaBi40fOlKPh3wDuG
677rEdhKlgm88P0QdyysQHHYVvy48IR9dObT+KDK5HOUt/h2Lao7PP0tvpTtVW/r
/qsW4EGoFQ5kA5O5oNDkszx0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU1pwA/
oijuRkNd5p1cwsbwlLt0MB8GA1UdIwQYMBaAFFnt6BabCiwyFGn/EbFii94MHyxB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUZBRi8wNzE3NjI0MDQ5
MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xESVVhZjhSc1dLTDNnd2ZM
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dlM29GcHNLTERJVWFmOFJzV0tMM2d3ZkxFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUZBRi8wNzE3NjI0MDQ5MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xE
SVVhZjhSc1dLTDNnd2ZMRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBB2JqqnjOtNQ0g8FojvgOnUG32Hp57pJuLhuAJF4fFApW98FFHU14K
gS12DrK/3eHKWqDUe1HIxV71aaewaGKoEWAruEHIiqhsL0OTmo6rS4Z8/fuxq+jw
EiHaqlQhMz9GpEy9oWA+Es3yCIDqbl4vGBSCKbf8xrLfvvHXwOPj1xP0WnAIEVAq
tkLmYUlW21/Ui3E0cJyQbRaUNEOp0gkh6HTlHPcjvcunGwqKc7+ubJ3IsgJaj3SB
tzaC+AalPBULyB4LrBZlXxJOG2rfXB5ta0pvESGINOwOy1cgX0H/oeujp3r7kx5S
+N+2Ubv7I7bYgW+FMMhdLTMI59HDq2Lq
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:23 2025 by rpki-client