Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
File:                     wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json)
Hash identifier:          XyhvcU/eL/5My3GYZZfO3RV516SDBiey0RfkUq9oT+s=
Subject key identifier:   87:CD:13:CC:55:EB:95:2A:27:70:40:9B:35:D1:F0:1F:F7:E7:E5:F0
Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Certificate issuer:       /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
Manifest number:          0171
Signing time:             Wed 17 Sep 2025 04:19:41 +0000
Manifest this update:     Wed 17 Sep 2025 04:19:40 +0000
Manifest next update:     Wed 24 Sep 2025 04:19:40 +0000
Files and hashes:         1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: ps+/ihgtl3ki8X6skrRIC4cVkj0l5HFH342Vn2qoo/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
        Validity
            Not Before: Sep 17 04:19:40 2025 GMT
            Not After : Sep 24 04:19:40 2025 GMT
        Subject: CN=68ca36dc-f3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:80:c6:23:43:f9:43:b4:7a:45:59:2b:6e:
                    d4:46:4a:6b:55:2b:5a:1d:79:f6:cd:92:f2:a8:a9:
                    ce:93:55:13:00:6a:05:f6:3e:e8:d6:74:d3:09:ec:
                    10:b4:66:54:83:39:13:26:9d:bf:a7:ad:fa:da:0e:
                    b9:2b:de:cb:f5:ad:f8:37:75:fc:04:65:62:0d:33:
                    ae:8a:81:80:b4:47:08:53:8f:c9:21:65:1b:01:c4:
                    94:ba:5d:c4:8b:81:91:e2:fe:47:0a:42:8c:58:b0:
                    22:76:d6:79:04:40:5a:a1:23:13:0b:0e:a9:34:5c:
                    c6:58:2e:e1:88:ce:9a:47:9b:62:e5:06:a8:b8:9e:
                    07:23:18:b3:ca:3b:92:2b:fb:70:b7:20:51:2b:7e:
                    30:bd:90:aa:51:4f:8e:33:92:f0:c3:75:8e:b6:8c:
                    85:c8:91:bd:3d:61:d8:aa:f1:86:8c:e5:58:8e:17:
                    07:0b:2e:a6:c4:05:42:15:82:e0:4c:68:83:5d:bc:
                    dd:dc:97:bd:43:67:c0:b0:f3:b5:8f:56:63:e5:c0:
                    be:11:16:62:47:1b:ef:e9:d0:a0:e0:49:98:a0:1a:
                    d0:49:7a:7c:d6:4f:a5:f6:7c:36:9f:cb:3f:62:0b:
                    3b:d3:0b:10:e1:b1:c7:a5:33:e8:8b:a9:90:dc:e5:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CD:13:CC:55:EB:95:2A:27:70:40:9B:35:D1:F0:1F:F7:E7:E5:F0
            X509v3 Authority Key Identifier:
                keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:52:c0:82:87:3b:7d:98:7d:78:0f:75:d3:b6:5a:95:4c:96:
         b7:35:16:45:fb:8c:5f:c7:84:ae:f5:ce:a6:12:8a:e0:18:19:
         f4:a1:13:1a:c9:a0:89:72:fb:2c:95:2e:39:6b:6b:43:75:59:
         1e:86:25:bc:25:14:49:fa:39:1a:59:be:f3:d4:a0:4c:73:7b:
         31:c1:03:3f:13:cd:15:13:79:c2:4d:e1:b6:ec:6f:32:72:f9:
         ce:9a:fe:14:dd:72:0f:a7:3e:57:76:85:0e:c0:c6:93:ce:d6:
         ed:93:3a:3a:8c:25:76:7f:15:09:26:c0:56:ea:12:67:ba:94:
         d4:35:e4:ab:26:3f:9c:d2:65:74:76:ea:7d:9b:b6:09:3f:96:
         2f:79:ed:22:10:db:c7:6b:4f:b9:b7:2e:9c:23:09:61:61:99:
         06:19:e9:0c:92:57:49:77:0e:62:67:bc:82:5b:e2:16:78:82:
         d9:96:b5:b0:ca:f4:d9:16:88:b9:5c:fb:e4:51:e9:f2:9d:5a:
         19:82:0a:ff:6b:db:10:b0:44:49:cc:df:f8:e4:5c:cd:0a:73:
         68:d2:52:ff:83:f1:ae:1b:4d:6a:aa:93:88:60:15:18:46:84:
         d3:fa:96:40:70:2d:c8:3b:5b:a8:53:82:7f:b1:2f:48:13:e1:
         3c:c5:83:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4
OEMxRTcxMkMwHhcNMjUwOTE3MDQxOTQwWhcNMjUwOTI0MDQxOTQwWjAYMRYwFAYD
VQQDEw02OGNhMzZkYy1mM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3GAxiND+UO0ekVZK27URkprVStaHXn2zZLyqKnOk1UTAGoF9j7o1nTTCewQ
tGZUgzkTJp2/p6362g65K97L9a34N3X8BGViDTOuioGAtEcIU4/JIWUbAcSUul3E
i4GR4v5HCkKMWLAidtZ5BEBaoSMTCw6pNFzGWC7hiM6aR5ti5QaouJ4HIxizyjuS
K/twtyBRK34wvZCqUU+OM5Lww3WOtoyFyJG9PWHYqvGGjOVYjhcHCy6mxAVCFYLg
TGiDXbzd3Je9Q2fAsPO1j1Zj5cC+ERZiRxvv6dCg4EmYoBrQSXp81k+l9nw2n8s/
Ygs70wsQ4bHHpTPoi6mQ3OXPqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfNE8xV
65UqJ3BAmzXR8B/35+XwMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj
U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv
Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzUsCChzt9mH14D3XTtlqVTJa3NRZF+4xfx4Su9c6mEorgGBn0oRMa
yaCJcvsslS45a2tDdVkehiW8JRRJ+jkaWb7z1KBMc3sxwQM/E80VE3nCTeG27G8y
cvnOmv4U3XIPpz5XdoUOwMaTztbtkzo6jCV2fxUJJsBW6hJnupTUNeSrJj+c0mV0
dup9m7YJP5Yvee0iENvHa0+5ty6cIwlhYZkGGekMkldJdw5iZ7yCW+IWeILZlrWw
yvTZFoi5XPvkUenynVoZggr/a9sQsERJzN/45FzNCnNo0lL/g/GuG01qqpOIYBUY
RoTT+pZAcC3IO1uoU4J/sS9IE+E8xYNZ
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:34:43 2025 by rpki-client