Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
File:                     wipR7M5tlu_1Mou8JblTGLTB2i4.mft (raw, json)
Hash identifier:          HH+Q0EoSwpysb4sjseNFW0k83tkqvHao2+nBM5q/vCQ=
Subject key identifier:   DE:1C:8B:68:8A:A9:14:B4:5F:01:B2:83:C4:74:33:E7:39:8C:D3:63
Authority key identifier: C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
Certificate issuer:       /CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
Manifest number:          68
Signing time:             Sat 19 Jul 2025 07:18:40 +0000
Manifest this update:     Sat 19 Jul 2025 07:18:40 +0000
Manifest next update:     Sat 26 Jul 2025 07:18:40 +0000
Files and hashes:         1: wipR7M5tlu_1Mou8JblTGLTB2i4.crl (hash: Ovb6GezzJgIhqHYfu9ca0zysm0MMaVWh4tOn4/GHMY8=)
                          2: 048B6F32D19D11EFB536C03DC4F9AE02.roa (hash: KB4EUqrfcsOAzIiEQ7XWVFbrnOWdV6fKnfW3hotUhtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
        Validity
            Not Before: Jul 19 07:18:40 2025 GMT
            Not After : Jul 26 07:18:40 2025 GMT
        Subject: CN=687b46d0-2a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:09:7f:47:58:9f:e6:14:d9:4a:79:56:87:
                    9e:80:f5:aa:14:45:fd:2c:d7:92:18:a5:5a:47:a9:
                    78:d2:ca:2d:47:0e:a1:1b:03:70:d0:95:18:a7:2c:
                    f0:37:92:15:5f:f2:6c:a7:1b:88:f2:8a:86:62:80:
                    38:5f:8d:62:51:23:e6:9a:07:d5:2f:c3:e2:d0:fd:
                    7b:c4:a7:d1:35:45:fd:b6:1c:7c:cb:6b:0f:bd:bc:
                    e2:61:0a:7a:46:b5:c7:82:03:bd:50:1f:ce:be:d0:
                    83:0b:df:d2:60:c6:a3:c9:84:81:0b:da:0b:34:ab:
                    fe:d1:6d:e5:b8:77:46:2a:8e:3d:c3:e4:47:ed:28:
                    de:5d:97:27:74:b2:ed:c4:61:d4:50:88:e3:d5:e4:
                    c7:4d:c6:8b:93:42:a5:e9:af:db:27:e9:3b:b4:6f:
                    d4:cd:bc:b2:5e:39:90:9c:9a:61:cf:fe:2b:2b:8c:
                    a0:32:32:02:92:db:ff:fa:97:19:3c:d2:01:1d:32:
                    ad:06:2b:e5:f7:1e:a9:66:f0:af:52:20:8f:a8:fb:
                    f3:f5:e2:68:96:c9:ea:78:06:19:d8:7b:45:ec:be:
                    27:fb:87:22:01:38:60:38:59:00:13:d0:f8:44:48:
                    eb:24:0a:fc:98:ae:5f:83:96:71:16:88:1a:aa:c8:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:8B:68:8A:A9:14:B4:5F:01:B2:83:C4:74:33:E7:39:8C:D3:63
            X509v3 Authority Key Identifier:
                keyid:C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:e9:6e:4b:3a:6d:a7:71:29:89:a4:8f:07:b0:4d:16:53:
         85:6c:ed:6e:78:f8:09:9b:cb:7f:3b:06:8f:47:ad:79:f9:ad:
         72:27:5a:cc:6f:93:a1:10:b4:25:cb:e3:bf:00:ee:5f:30:79:
         e9:cc:88:1a:70:e3:a2:6a:4f:e8:ef:f8:f6:b5:2b:be:95:06:
         73:3f:87:5a:cb:62:62:4a:99:b8:e9:44:b0:31:ef:4f:5c:68:
         54:ed:5e:de:2e:6a:f1:4d:ed:46:00:8d:e9:34:74:3e:68:17:
         cf:1c:0f:94:50:9b:5e:54:4e:a5:29:30:02:ca:01:30:fb:46:
         5b:f8:ab:9e:b3:9d:82:c7:00:17:1d:3a:53:1c:70:73:9b:b6:
         60:d6:92:a4:2c:b2:d1:ac:15:16:1d:fd:66:00:5e:f5:ea:df:
         fb:27:65:be:70:e9:4e:f8:f9:14:a3:0d:bf:80:c0:fc:4a:7f:
         69:c8:8b:bd:2e:c7:21:0a:67:db:2b:a5:d7:cc:a3:9b:74:83:
         80:c0:40:df:4d:78:7a:2f:b9:12:f4:bc:47:3b:71:59:bf:5b:
         a0:a6:5a:de:10:ca:c7:5f:ad:ec:c0:2f:50:c4:f1:77:06:07:
         84:4e:c8:ab:a2:b4:88:94:47:8e:67:b0:46:03:58:37:f5:19:
         4d:db:d4:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NzRBNjExMC8GA1UEBRMoQzIyQTUxRUNDRTZEOTZFRkY1MzI4QkJDMjVCOTUzMThC
NEMxREEyRTAeFw0yNTA3MTkwNzE4NDBaFw0yNTA3MjYwNzE4NDBaMBgxFjAUBgNV
BAMTDTY4N2I0NmQwLTJhODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxTwl/R1if5hTZSnlWh56A9aoURf0s15IYpVpHqXjSyi1HDqEbA3DQlRinLPA3
khVf8mynG4jyioZigDhfjWJRI+aaB9Uvw+LQ/XvEp9E1Rf22HHzLaw+9vOJhCnpG
tceCA71QH86+0IML39JgxqPJhIEL2gs0q/7RbeW4d0Yqjj3D5EftKN5dlyd0su3E
YdRQiOPV5MdNxouTQqXpr9sn6Tu0b9TNvLJeOZCcmmHP/isrjKAyMgKS2//6lxk8
0gEdMq0GK+X3Hqlm8K9SII+o+/P14miWyep4BhnYe0Xsvif7hyIBOGA4WQAT0PhE
SOskCvyYrl+DlnEWiBqqyHGlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3hyLaIqp
FLRfAbKDxHQz5zmM02MwHwYDVR0jBBgwFoAUwipR7M5tlu/1Mou8JblTGLTB2i4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2Lzc5N0U5QTg2RDE5
QzExRUY4M0NFQUQzQ0M0RjlBRTAyL3dpcFI3TTV0bHVfMU1vdThKYmxUR0xUQjJp
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd2lwUjdNNXRsdV8xTW91OEpibFRHTFRCMmk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3
NEE2Lzc5N0U5QTg2RDE5QzExRUY4M0NFQUQzQ0M0RjlBRTAyL3dpcFI3TTV0bHVf
MU1vdThKYmxUR0xUQjJpNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAD6R6W5LOm2ncSmJpI8HsE0WU4Vs7W54+Amby387Bo9HrXn5rXInWsxv
k6EQtCXL478A7l8weenMiBpw46JqT+jv+Pa1K76VBnM/h1rLYmJKmbjpRLAx709c
aFTtXt4uavFN7UYAjek0dD5oF88cD5RQm15UTqUpMALKATD7Rlv4q56znYLHABcd
OlMccHObtmDWkqQsstGsFRYd/WYAXvXq3/snZb5w6U74+RSjDb+AwPxKf2nIi70u
xyEKZ9srpdfMo5t0g4DAQN9NeHovuRL0vEc7cVm/W6CmWt4QysdfrezAL1DE8XcG
B4ROyKuitIiUR45nsEYDWDf1GU3b1IA=
-----END CERTIFICATE-----
Generated at Sun Jul 20 03:15:09 2025 by rpki-client