Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          PVfLPUfufo8O+qXejJNpJZOZzw0N+1O0p35j5sBWjr4=
Subject key identifier:   5C:EB:00:DD:95:3D:B5:D8:DE:F4:8D:C0:69:EF:BC:77:EB:10:55:87
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          C3
Signing time:             Mon 21 Jul 2025 06:00:31 +0000
Manifest this update:     Mon 21 Jul 2025 06:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:31 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: ad3nkEj3uvU7wBFA+S/LPQoX3Qt78R+Nf4TEsjZ1U0s=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Jul 21 06:00:31 2025 GMT
            Not After : Jul 28 06:00:31 2025 GMT
        Subject: CN=687dd77f-1218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:7f:f0:87:12:ca:56:7f:40:d9:27:c6:76:
                    4a:0b:c8:a2:69:8f:6c:26:67:b7:c3:f6:a6:a0:70:
                    51:eb:25:f7:d2:93:5f:9a:ed:79:0f:2c:90:f4:34:
                    5f:4b:79:af:2a:ec:0f:f0:cc:d9:fa:74:6e:8b:ec:
                    92:27:56:1d:07:0b:e2:71:10:e4:f3:dc:ce:30:3d:
                    0d:6e:56:5d:83:61:21:5f:be:3a:5e:b7:92:41:d3:
                    4b:5b:1d:5d:58:a4:b7:dc:f3:32:62:62:c2:e4:3c:
                    b6:10:1d:35:3c:bd:d0:5d:bf:ec:f6:41:f5:2a:77:
                    5f:6c:42:60:19:0f:57:6e:78:0d:d9:a6:a7:65:6a:
                    e0:cb:ad:70:0c:ff:23:a1:94:e0:a5:92:79:c8:4b:
                    b8:5f:e0:e9:d1:29:d5:50:0f:1f:8f:69:d9:01:c5:
                    91:16:c3:76:29:67:bb:6a:b0:b1:1b:af:fd:a7:b1:
                    12:ee:03:2e:51:ee:05:2e:60:23:97:d0:3c:88:6f:
                    e5:a7:c9:a4:47:29:67:fd:f8:ca:bc:9c:14:c8:d6:
                    7f:d6:f7:27:12:3d:67:36:c9:6d:29:fb:e0:b8:23:
                    da:69:f1:06:63:cb:75:5d:68:35:3f:a1:e2:99:68:
                    d0:3f:67:d3:15:48:b7:49:41:c0:1e:cd:9b:b1:7b:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EB:00:DD:95:3D:B5:D8:DE:F4:8D:C0:69:EF:BC:77:EB:10:55:87
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:3d:d9:12:22:9e:26:9b:db:85:8c:aa:a8:35:ab:cc:ef:
         97:4d:dc:36:ff:7e:b6:89:72:c4:79:8f:99:bc:ab:bc:31:b7:
         1f:06:83:43:6f:b3:48:18:2a:31:e1:23:e4:b3:6f:3a:9b:7f:
         dc:eb:e6:db:19:e5:59:f0:ff:05:fe:c1:ce:dc:f8:9c:fc:b8:
         de:c4:25:0b:30:8a:5b:b3:05:62:e9:91:ea:3d:30:a2:cb:ca:
         4d:d5:9b:cc:d4:f8:75:98:5d:bc:65:1e:44:98:af:dc:a9:73:
         aa:15:36:46:31:ef:e3:8c:2d:9c:fb:ce:fb:32:0e:c0:e2:4a:
         0e:b8:94:a8:c5:f1:91:8a:82:f7:72:c9:41:08:73:05:03:37:
         71:15:dd:23:a8:bf:0e:8a:a5:30:e1:9c:2c:45:cb:5f:d0:ba:
         5c:0b:2c:88:b3:5c:15:1f:b3:27:41:49:39:15:28:87:ae:6d:
         ed:a4:7e:fa:c6:46:fe:4a:65:11:e8:1b:98:2f:85:43:a8:37:
         85:dd:64:57:9d:45:70:56:b3:73:45:79:42:96:b2:78:8d:86:
         01:17:24:7d:84:bc:ad:3c:b6:75:a7:6c:dc:72:a4:b7:5e:28:
         cb:88:4e:f6:ca:ae:4e:6c:fb:b5:18:4a:b9:77:f7:0d:31:cb:
         f6:85:43:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy
Q0VFMzZFRjIwHhcNMjUwNzIxMDYwMDMxWhcNMjUwNzI4MDYwMDMxWjAYMRYwFAYD
VQQDEw02ODdkZDc3Zi0xMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7TZ/8IcSylZ/QNknxnZKC8iiaY9sJme3w/amoHBR6yX30pNfmu15DyyQ9DRf
S3mvKuwP8MzZ+nRui+ySJ1YdBwvicRDk89zOMD0NblZdg2EhX746XreSQdNLWx1d
WKS33PMyYmLC5Dy2EB01PL3QXb/s9kH1KndfbEJgGQ9XbngN2aanZWrgy61wDP8j
oZTgpZJ5yEu4X+Dp0SnVUA8fj2nZAcWRFsN2KWe7arCxG6/9p7ES7gMuUe4FLmAj
l9A8iG/lp8mkRyln/fjKvJwUyNZ/1vcnEj1nNsltKfvguCPaafEGY8t1XWg1P6Hi
mWjQP2fTFUi3SUHAHs2bsXtguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzrAN2V
PbXY3vSNwGnvvHfrEFWHMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz
MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC
czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhXz3ZEiKeJpvbhYyqqDWrzO+XTdw2/362iXLEeY+ZvKu8MbcfBoND
b7NIGCox4SPks286m3/c6+bbGeVZ8P8F/sHO3Pic/LjexCULMIpbswVi6ZHqPTCi
y8pN1ZvM1Ph1mF28ZR5EmK/cqXOqFTZGMe/jjC2c+877Mg7A4koOuJSoxfGRioL3
cslBCHMFAzdxFd0jqL8OiqUw4ZwsRctf0LpcCyyIs1wVH7MnQUk5FSiHrm3tpH76
xkb+SmUR6BuYL4VDqDeF3WRXnUVwVrNzRXlClrJ4jYYBFyR9hLytPLZ1p2zccqS3
XijLiE72yq5ObPu1GEq5d/cNMcv2hUOD
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:34:42 2025 by rpki-client