Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
File:                     WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json)
Hash identifier:          a7oE6731me60yz0XQs4zEH/d18z2aUre/j3NPdZ4PQc=
Subject key identifier:   C7:03:3C:A6:BF:6C:4E:AB:F0:A5:07:92:CB:B9:E9:3A:94:BE:4B:67
Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
Certificate issuer:       /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
Certificate serial:       077D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
Manifest number:          0777
Signing time:             Fri 30 May 2025 21:42:33 +0000
Manifest this update:     Fri 30 May 2025 21:42:33 +0000
Manifest next update:     Fri 06 Jun 2025 21:42:33 +0000
Files and hashes:         1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: RZex+kRVEp6i5gTweuCdboNO3srE4TdFOjIS89ICs/I=)
                          2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
        Validity
            Not Before: May 30 21:42:33 2025 GMT
            Not After : Jun  6 21:42:33 2025 GMT
        Subject: CN=683a2649-aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:68:28:a5:be:2e:c7:2e:f6:90:5f:26:1a:
                    2f:7a:29:c7:9e:5a:2f:d7:0b:57:59:43:98:83:0e:
                    07:02:78:ee:a4:3b:e2:ab:34:19:a1:e7:c1:99:9f:
                    b6:00:82:5a:56:5f:c8:01:20:e8:a8:a8:ef:1f:bb:
                    d3:2e:63:02:87:0a:1b:11:15:9a:18:c3:5a:2b:68:
                    86:c5:79:98:ad:b5:a7:04:38:56:4e:78:ac:38:91:
                    dc:c1:14:4c:ba:09:8e:f4:74:51:14:c0:b8:22:4d:
                    b3:4b:c9:2f:2b:14:a7:a6:98:a6:93:bc:10:0e:38:
                    a8:45:56:8d:70:14:c4:db:8e:fc:ff:56:31:59:ee:
                    67:7e:25:f7:63:5b:7c:f1:9f:da:7a:61:27:ee:31:
                    d6:2c:4f:11:5c:df:83:55:97:e2:26:70:61:d9:e0:
                    75:2f:f0:09:5c:5d:42:90:54:52:53:86:36:f1:94:
                    13:58:60:07:d2:c2:54:54:b2:10:63:30:7c:8d:17:
                    5b:4c:15:b1:d6:0c:1a:5b:37:3c:5b:a2:63:c2:f4:
                    ff:bd:b7:d9:ae:41:9f:21:8b:cc:42:34:1d:8d:b8:
                    2e:b8:cd:d2:b9:74:91:35:8c:82:c9:4e:2e:e9:ff:
                    e6:00:6e:c3:6b:f7:f1:dd:ac:2b:38:33:be:7e:99:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:03:3C:A6:BF:6C:4E:AB:F0:A5:07:92:CB:B9:E9:3A:94:BE:4B:67
            X509v3 Authority Key Identifier:
                keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:49:ec:f4:91:c2:b2:c4:e9:14:a4:ab:ef:fd:f6:f0:81:
         04:c1:2b:ca:88:53:cd:7c:ca:c8:86:68:59:25:93:46:84:0d:
         af:63:2c:30:a3:c8:cf:13:b2:78:53:31:97:45:d3:5e:c0:f8:
         f8:bc:ed:66:9d:44:31:70:40:c5:58:b7:ee:6b:22:0b:ad:28:
         7b:b2:fe:0b:f0:e4:f4:31:12:27:27:af:60:d5:f8:82:90:e3:
         55:b9:bf:c4:44:18:c5:b9:7a:8d:6c:e0:31:0c:94:e8:e9:5a:
         d7:f3:4d:2d:32:b2:47:31:e8:00:92:a7:32:bf:37:1f:6a:e0:
         fa:b3:28:a1:0d:e3:ee:71:c6:c4:91:5e:70:90:6a:44:23:1e:
         3d:bb:4d:91:46:c4:3c:d3:9c:33:5b:0d:57:8f:c7:6f:84:d4:
         cb:db:d2:c9:99:5b:45:45:61:c0:0a:74:9c:91:5d:f5:11:d0:
         fa:04:c9:0e:de:10:0f:7f:41:f8:62:7c:2c:3e:b4:10:e4:42:
         90:24:a5:cc:b8:34:c8:e6:ff:9d:fb:38:63:3c:ec:a2:5b:b1:
         2a:fa:f1:4c:85:54:68:4d:24:ab:4c:b7:43:80:33:60:3e:b9:
         c3:02:54:4d:ff:b4:d3:7c:d0:98:cd:4d:6c:2b:36:ef:b3:cf:
         5e:ce:ec:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1
NjRGQ0QyREIwHhcNMjUwNTMwMjE0MjMzWhcNMjUwNjA2MjE0MjMzWjAYMRYwFAYD
VQQDEw02ODNhMjY0OS1hZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKdoKKW+Lscu9pBfJhoveinHnlov1wtXWUOYgw4HAnjupDviqzQZoefBmZ+2
AIJaVl/IASDoqKjvH7vTLmMChwobERWaGMNaK2iGxXmYrbWnBDhWTnisOJHcwRRM
ugmO9HRRFMC4Ik2zS8kvKxSnppimk7wQDjioRVaNcBTE2478/1YxWe5nfiX3Y1t8
8Z/aemEn7jHWLE8RXN+DVZfiJnBh2eB1L/AJXF1CkFRSU4Y28ZQTWGAH0sJUVLIQ
YzB8jRdbTBWx1gwaWzc8W6JjwvT/vbfZrkGfIYvMQjQdjbguuM3SuXSRNYyCyU4u
6f/mAG7Da/fx3awrODO+fplbywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcDPKa/
bE6r8KUHksu56TqUvktnMB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1
MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX
Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyOkns9JHCssTpFKSr7/328IEEwSvKiFPNfMrIhmhZJZNGhA2vYyww
o8jPE7J4UzGXRdNewPj4vO1mnUQxcEDFWLfuayILrSh7sv4L8OT0MRInJ69g1fiC
kONVub/ERBjFuXqNbOAxDJTo6VrX800tMrJHMegAkqcyvzcfauD6syihDePuccbE
kV5wkGpEIx49u02RRsQ805wzWw1Xj8dvhNTL29LJmVtFRWHACnSckV31EdD6BMkO
3hAPf0H4YnwsPrQQ5EKQJKXMuDTI5v+d+zhjPOyiW7Eq+vFMhVRoTSSrTLdDgDNg
PrnDAlRN/7TTfNCYzU1sKzbvs89ezuw/
-----END CERTIFICATE-----
Generated at Sat May 31 16:30:27 2025 by rpki-client