Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File:                     WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier:          4sTl88bb0awnLobEp212VqPM/g/weshQ1ivzfVsXFbE=
Subject key identifier:   2E:94:A4:03:16:D5:91:CA:10:5C:AA:D8:69:F0:85:40:B4:02:0C:6B
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number:          0BCB
Signing time:             Thu 04 Sep 2025 19:11:21 +0000
Manifest this update:     Thu 04 Sep 2025 19:11:21 +0000
Manifest next update:     Thu 11 Sep 2025 19:11:21 +0000
Files and hashes:         1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: 5DKFcQrxztY6K2l90PC3uV165x1kwi08HXQrLX2BlEc=)
                          2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=)
                          3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=)
                          4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=)
                          5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 19:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3074 (0xc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Sep  4 19:11:21 2025 GMT
            Not After : Sep 11 19:11:21 2025 GMT
        Subject: CN=68b9e459-9c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:b5:e5:38:d0:08:27:34:ef:9e:e7:af:cb:
                    c9:23:eb:c2:0e:67:34:7a:1a:db:b2:4d:05:d1:38:
                    64:9d:ce:c3:aa:71:dc:31:14:a2:df:0f:08:0f:3a:
                    bb:76:af:94:cd:36:72:cd:38:3c:62:74:70:52:17:
                    46:a7:38:13:cf:8a:e2:ab:19:c3:43:79:72:d5:30:
                    cc:36:84:13:5a:7a:ec:ba:3f:b8:0e:2a:a4:e6:8d:
                    be:6b:ec:48:bc:6f:96:17:be:59:c5:8a:55:ae:55:
                    47:44:e2:f0:68:33:64:5a:f1:b0:f0:48:50:05:f9:
                    ae:07:61:27:25:50:d7:b9:50:c9:56:ce:88:f7:e3:
                    62:07:35:e5:1e:2d:23:07:26:83:41:2a:22:b5:17:
                    c2:a7:c2:ee:a8:f7:16:a3:96:d6:ce:47:b7:46:f1:
                    f8:e1:c6:e9:bb:6b:02:d1:9d:c3:ef:a1:ea:2e:23:
                    9b:70:2d:a6:04:1e:e5:a3:ca:a3:b4:dd:eb:5f:30:
                    17:e1:2a:95:ea:10:57:53:e7:bf:48:c7:f9:59:a0:
                    c5:08:92:0b:ba:9d:3a:e8:d8:1c:a1:c5:74:6c:4f:
                    db:cb:59:44:c8:ee:92:ae:54:a4:c2:c0:ad:1c:53:
                    fa:9a:fa:70:bc:40:43:4d:9c:80:5b:fe:39:06:43:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:A4:03:16:D5:91:CA:10:5C:AA:D8:69:F0:85:40:B4:02:0C:6B
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:aa:e2:aa:a1:7e:71:01:b7:97:43:61:80:04:82:6a:03:ad:
         8a:ef:e0:42:c7:b6:3d:d0:ee:3a:c1:08:21:82:df:16:6b:e0:
         f0:80:fe:64:d8:3e:0b:8a:05:3e:4b:41:16:8f:ed:6e:fe:a3:
         d5:fc:e2:f4:6e:69:34:02:0c:33:2c:26:02:3e:8b:07:94:7f:
         47:db:20:40:43:83:c3:ab:fc:2c:26:66:4d:30:ea:95:9d:06:
         f2:a1:4d:81:ec:6b:9f:bd:8b:ea:14:33:79:45:6d:1f:2a:e7:
         d4:60:9d:ce:60:62:41:85:d9:df:37:55:28:dd:9b:2d:83:13:
         32:63:74:c4:eb:a1:66:67:52:94:54:60:53:a4:34:b4:08:3d:
         1c:40:78:e9:05:eb:4c:17:66:82:ff:b0:64:4b:9e:74:f6:87:
         e5:c3:9d:14:23:71:3d:fb:c0:7e:f8:db:e9:ed:d0:08:e7:8a:
         b4:8e:aa:c4:58:9c:78:dc:15:35:b1:83:a5:69:69:47:ea:d3:
         1b:5f:ba:27:47:59:7f:9b:4a:c4:60:07:11:02:f6:2d:c1:22:
         2f:bc:a4:a0:88:97:7c:83:3f:a0:2b:d4:d3:74:06:63:91:dd:
         93:d3:bf:7b:e2:6b:7e:72:6f:d2:0d:19:5c:71:c4:95:88:bf:
         f5:a3:83:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy
NDRFNjBDQTUwHhcNMjUwOTA0MTkxMTIxWhcNMjUwOTExMTkxMTIxWjAYMRYwFAYD
VQQDEw02OGI5ZTQ1OS05YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Hi15TjQCCc0757nr8vJI+vCDmc0ehrbsk0F0Thknc7DqnHcMRSi3w8IDzq7
dq+UzTZyzTg8YnRwUhdGpzgTz4riqxnDQ3ly1TDMNoQTWnrsuj+4Diqk5o2+a+xI
vG+WF75ZxYpVrlVHROLwaDNkWvGw8EhQBfmuB2EnJVDXuVDJVs6I9+NiBzXlHi0j
ByaDQSoitRfCp8LuqPcWo5bWzke3RvH44cbpu2sC0Z3D76HqLiObcC2mBB7lo8qj
tN3rXzAX4SqV6hBXU+e/SMf5WaDFCJILup066NgcocV0bE/by1lEyO6SrlSkwsCt
HFP6mvpwvEBDTZyAW/45BkM6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6UpAMW
1ZHKEFyq2GnwhUC0AgxrMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw
RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI
YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAquKqoX5xAbeXQ2GABIJqA62K7+BCx7Y90O46wQghgt8Wa+DwgP5k
2D4LigU+S0EWj+1u/qPV/OL0bmk0AgwzLCYCPosHlH9H2yBAQ4PDq/wsJmZNMOqV
nQbyoU2B7GufvYvqFDN5RW0fKufUYJ3OYGJBhdnfN1Uo3ZstgxMyY3TE66FmZ1KU
VGBTpDS0CD0cQHjpBetMF2aC/7BkS5509oflw50UI3E9+8B++Nvp7dAI54q0jqrE
WJx43BU1sYOlaWlH6tMbX7onR1l/m0rEYAcRAvYtwSIvvKSgiJd8gz+gK9TTdAZj
kd2T07974mt+cm/SDRlcccSViL/1o4MM
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:03:26 2025 by rpki-client