Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File:                     wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier:          g+klA1DGZ6PdElUVRTfm6So3zhbsmC39rhJ/A/n0lgE=
Subject key identifier:   BA:7C:58:D9:69:CD:87:F9:D3:BE:4B:17:9E:F8:E0:93:92:D0:B5:3E
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer:       /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial:       0A72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number:          0A69
Signing time:             Fri 18 Jul 2025 19:52:39 +0000
Manifest this update:     Fri 18 Jul 2025 19:52:39 +0000
Manifest next update:     Fri 25 Jul 2025 19:52:39 +0000
Files and hashes:         1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: iTimerqBwMu5eUYKrnkgqEnL3myizN8cErRaYOHmXfM=)
                          2: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: bbsqzdWTrHCUcjDQ3qFOyBjJItBXTD8UAHJWnxMcjUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
                          rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
        Validity
            Not Before: Jul 18 19:52:39 2025 GMT
            Not After : Jul 25 19:52:39 2025 GMT
        Subject: CN=687aa607-98f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:2c:e1:fa:1f:ea:f8:ee:60:38:32:eb:ad:
                    6c:85:25:4f:c6:14:8e:ba:e8:f3:d5:af:bc:04:71:
                    67:4c:30:fe:2c:68:d6:f6:d1:3d:8c:f3:fe:1a:e6:
                    d0:aa:9b:6f:9a:ee:4b:51:f0:b5:72:87:3e:db:52:
                    96:95:1f:f3:31:52:8b:f8:48:d8:36:ca:a6:b8:94:
                    67:92:21:7a:06:9f:fe:30:84:27:92:17:bd:6b:b0:
                    ef:bd:cf:33:da:7e:d7:9c:b5:1f:d1:c7:48:31:df:
                    5b:06:90:14:8c:a9:7d:e9:83:ed:9e:37:6b:53:d4:
                    e2:c6:e9:e6:0b:54:56:26:e5:60:2c:3d:4e:ed:dc:
                    a2:29:06:07:d1:21:38:c8:ab:7b:24:bc:99:12:91:
                    76:1f:08:5b:be:23:54:c4:dd:a1:e6:99:ac:30:68:
                    8f:81:b4:8c:a3:63:2b:32:0b:d4:48:f8:bc:fb:17:
                    42:88:c6:62:81:5b:bb:d8:41:32:8d:12:42:bf:76:
                    bf:90:7e:e1:a3:da:87:66:03:3a:d7:15:77:5c:e9:
                    19:2e:f8:a1:a1:09:65:fe:9e:d0:aa:f2:35:57:fb:
                    53:cc:2a:b9:f0:35:9c:40:fd:f1:66:59:88:77:c2:
                    74:35:1a:68:88:41:9b:20:69:e6:3d:ea:04:06:d0:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:58:D9:69:CD:87:F9:D3:BE:4B:17:9E:F8:E0:93:92:D0:B5:3E
            X509v3 Authority Key Identifier:
                keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:93:ca:79:9e:64:33:12:84:c9:34:c4:29:b3:24:9c:ef:
         a1:8a:04:68:16:d2:a2:74:34:f3:46:92:74:57:a9:82:3e:2b:
         47:a2:e4:c4:d4:c4:a9:01:6d:ed:e4:ab:d2:f1:7e:b8:6d:69:
         f1:22:2a:fb:09:c9:16:0c:57:4e:ce:35:97:20:10:8e:d3:cc:
         0a:67:ac:af:3f:12:e1:e3:94:0a:08:b6:b8:fb:fe:b8:c3:26:
         d0:5e:a5:ef:dc:00:5c:af:66:3d:71:3c:34:6b:27:84:2c:d1:
         78:8b:4b:ad:18:15:5e:6d:e9:93:f5:67:b0:73:13:21:a6:ae:
         ba:36:5e:27:26:95:95:7d:68:4b:d2:f0:49:21:d1:8e:11:69:
         59:cd:ce:51:c6:65:3c:1c:db:cc:09:cd:a0:b6:6a:76:44:e3:
         22:2f:c3:24:c6:d0:c7:51:e7:04:da:14:52:20:51:bc:4d:f6:
         82:23:33:34:cd:cc:d3:c5:3a:04:f3:6a:b0:bb:15:1e:bb:c9:
         c1:8e:48:e6:8f:34:f8:85:19:83:71:8e:24:14:79:3f:ac:35:
         99:f4:fb:a9:7f:61:21:0e:ca:4f:a8:e4:c6:f6:5e:9a:20:72:
         59:be:ab:3c:b6:72:a6:ac:3c:a9:b1:42:5a:39:20:1b:22:c8:
         f5:4a:40:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAwN0IxMTAvBgNVBAUTKEMyNzgwQ0ZENTdBOTk4Njk5M0RCRjZDMEQ2QkRFRUY3
NkI0NTE5NzIwHhcNMjUwNzE4MTk1MjM5WhcNMjUwNzI1MTk1MjM5WjAYMRYwFAYD
VQQDEw02ODdhYTYwNy05OGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4Ys4fof6vjuYDgy661shSVPxhSOuujz1a+8BHFnTDD+LGjW9tE9jPP+GubQ
qptvmu5LUfC1coc+21KWlR/zMVKL+EjYNsqmuJRnkiF6Bp/+MIQnkhe9a7Dvvc8z
2n7XnLUf0cdIMd9bBpAUjKl96YPtnjdrU9TixunmC1RWJuVgLD1O7dyiKQYH0SE4
yKt7JLyZEpF2HwhbviNUxN2h5pmsMGiPgbSMo2MrMgvUSPi8+xdCiMZigVu72EEy
jRJCv3a/kH7ho9qHZgM61xV3XOkZLvihoQll/p7QqvI1V/tTzCq58DWcQP3xZlmI
d8J0NRpoiEGbIGnmPeoEBtAEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp8WNlp
zYf5075LF5744JOS0LU+MB8GA1UdIwQYMBaAFMJ4DP1XqZhpk9v2wNa97vdrRRly
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDA3Qi8wOURFMzQ4MjY3
MTMxMUVBQTREMjY3NTNDNEY5QUUwMi93bmdNX1ZlcG1HbVQyX2JBMXIzdTkydEZH
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3duZ01fVmVwbUdtVDJfYkExcjN1OTJ0RkdYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDA3Qi8wOURFMzQ4MjY3MTMxMUVBQTREMjY3NTNDNEY5QUUwMi93bmdNX1ZlcG1H
bVQyX2JBMXIzdTkydEZHWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAux5PKeZ5kMxKEyTTEKbMknO+higRoFtKidDTzRpJ0V6mCPitHouTE
1MSpAW3t5KvS8X64bWnxIir7CckWDFdOzjWXIBCO08wKZ6yvPxLh45QKCLa4+/64
wybQXqXv3ABcr2Y9cTw0ayeELNF4i0utGBVebemT9WewcxMhpq66Nl4nJpWVfWhL
0vBJIdGOEWlZzc5RxmU8HNvMCc2gtmp2ROMiL8MkxtDHUecE2hRSIFG8TfaCIzM0
zczTxToE82qwuxUeu8nBjkjmjzT4hRmDcY4kFHk/rDWZ9Pupf2EhDspPqOTG9l6a
IHJZvqs8tnKmrDypsUJaOSAbIsj1SkDI
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:52:32 2025 by rpki-client