Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          hnRJ1I8AoPHPNAxzI8IMfLqkclOtb8S0aE2+Cx37xB0=
Subject key identifier:   72:BF:5B:41:AB:70:34:11:3E:B3:2E:8E:85:20:C1:D9:7A:BC:11:B7
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          29
Signing time:             Sat 19 Jul 2025 08:00:16 +0000
Manifest this update:     Sat 19 Jul 2025 08:00:16 +0000
Manifest next update:     Sat 26 Jul 2025 08:00:16 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: j2iRGs6VCYxv4i1GPE3lOksNE7qZYvB6EbpVlwDRADw=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Jul 19 08:00:16 2025 GMT
            Not After : Jul 26 08:00:16 2025 GMT
        Subject: CN=687b5090-0483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:60:15:ed:f8:9f:6f:4b:ce:bb:b6:81:a5:
                    7a:58:c6:99:54:dc:67:de:04:00:6c:cf:e9:8d:5b:
                    d2:46:36:99:17:63:84:b1:ad:3f:60:d9:98:15:ec:
                    22:ea:78:e0:28:da:ca:b7:b7:ac:63:1e:bd:bb:76:
                    a2:dc:64:22:df:b5:dc:59:88:62:e2:17:f8:db:19:
                    3d:6d:ea:bc:72:b0:c1:e6:4e:75:6c:4a:d2:4b:9d:
                    a3:98:05:cd:04:d2:2b:b6:65:76:55:a4:55:63:b2:
                    ff:1e:80:11:09:19:c9:59:dc:cc:f9:0c:0f:31:69:
                    2d:87:4d:c8:1a:9c:d6:b1:bf:d4:4f:b7:29:36:da:
                    c3:60:e4:be:5b:18:5f:71:20:16:d5:16:50:b2:a6:
                    38:b7:ea:69:66:c5:39:62:c9:ba:d8:92:80:ae:7a:
                    5b:d0:22:06:7c:a2:c1:3f:c4:d3:8a:b5:17:dc:82:
                    00:40:ae:64:96:6d:58:7b:7e:05:ce:f6:6a:4d:e4:
                    42:c5:39:b4:4c:03:61:2e:db:d0:d9:90:6f:29:a3:
                    68:eb:d9:16:b3:30:41:18:cb:c7:ee:31:c2:a4:e0:
                    78:0e:54:03:3a:85:1f:93:b0:24:56:9d:28:12:98:
                    65:92:19:01:4f:34:d9:59:45:91:56:a0:68:d1:65:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BF:5B:41:AB:70:34:11:3E:B3:2E:8E:85:20:C1:D9:7A:BC:11:B7
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:ef:03:33:6d:67:3b:b2:a3:37:f9:5e:ef:49:0c:05:81:
         46:33:f5:07:3f:a7:b1:05:df:ab:98:7e:83:f9:4d:ea:12:74:
         c3:f7:f1:77:64:e0:b2:d3:63:86:7b:31:16:a7:3f:d4:9c:d8:
         85:e4:86:fb:0b:16:f9:af:f7:40:27:d2:de:f9:f0:b9:74:8c:
         e0:20:7b:ad:c5:83:d2:72:31:eb:f3:5e:1d:a3:04:d4:0a:67:
         a7:c3:86:14:7c:80:14:91:8f:1e:c3:85:35:e9:05:e8:b5:01:
         88:47:72:71:e0:f5:92:49:9f:63:f5:ef:c0:1d:87:c9:d1:ea:
         65:ea:90:17:33:ae:ee:90:6d:8f:4f:6f:fe:56:eb:46:98:da:
         3c:48:7c:fb:49:5e:a7:1c:67:fa:d8:16:19:49:4b:97:05:5b:
         5e:1a:e2:ad:66:c2:9c:4d:76:15:36:ea:1d:71:0a:52:20:bb:
         1f:72:f1:c8:be:dd:7e:2f:1a:22:b1:b5:cb:d5:23:aa:c8:b6:
         fb:1c:12:f6:d4:e4:2e:9b:dc:9c:d1:8a:15:de:60:57:68:6b:
         84:b2:01:56:e7:6c:58:75:c2:7c:36:26:9f:46:db:1a:cd:8a:
         c2:d1:30:75:ac:cf:71:4e:3e:91:c0:a1:86:5e:3e:66:33:a0:
         f1:19:81:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MTJCQzExMC8GA1UEBRMoRDMwOTQwQ0M2RjBDMTAyNEI4NDBCQkI3RDNEODAxMjYz
NjA2Q0E1OTAeFw0yNTA3MTkwODAwMTZaFw0yNTA3MjYwODAwMTZaMBgxFjAUBgNV
BAMTDTY4N2I1MDkwLTA0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ/GAV7fifb0vOu7aBpXpYxplU3GfeBABsz+mNW9JGNpkXY4SxrT9g2ZgV7CLq
eOAo2sq3t6xjHr27dqLcZCLftdxZiGLiF/jbGT1t6rxysMHmTnVsStJLnaOYBc0E
0iu2ZXZVpFVjsv8egBEJGclZ3Mz5DA8xaS2HTcganNaxv9RPtyk22sNg5L5bGF9x
IBbVFlCypji36mlmxTliybrYkoCuelvQIgZ8osE/xNOKtRfcggBArmSWbVh7fgXO
9mpN5ELFObRMA2Eu29DZkG8po2jr2RazMEEYy8fuMcKk4HgOVAM6hR+TsCRWnSgS
mGWSGQFPNNlZRZFWoGjRZbpnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcr9bQatw
NBE+sy6OhSDB2Xq8EbcwHwYDVR0jBBgwFoAU0wlAzG8MECS4QLu309gBJjYGylkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMkJDLzIxQTk1MzE0MjQ4
QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3ls
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMHdsQXpHOE1FQ1M0UUx1MzA5Z0JKallHeWxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
MkJDLzIxQTk1MzE0MjQ4QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNT
NFFMdTMwOWdCSmpZR3lsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAfc7wMzbWc7sqM3+V7vSQwFgUYz9Qc/p7EF36uYfoP5TeoSdMP38Xdk
4LLTY4Z7MRanP9Sc2IXkhvsLFvmv90An0t758Ll0jOAge63Fg9JyMevzXh2jBNQK
Z6fDhhR8gBSRjx7DhTXpBei1AYhHcnHg9ZJJn2P178Adh8nR6mXqkBczru6QbY9P
b/5W60aY2jxIfPtJXqccZ/rYFhlJS5cFW14a4q1mwpxNdhU26h1xClIgux9y8ci+
3X4vGiKxtcvVI6rItvscEvbU5C6b3JzRihXeYFdoa4SyAVbnbFh1wnw2Jp9G2xrN
isLRMHWsz3FOPpHAoYZePmYzoPEZgds=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:28 2025 by rpki-client