Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
File:                     w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft (raw, json)
Hash identifier:          mbAGHXj8XZAQZBZ2csf4z5TyiBhfGnzrjAkcUNezAWI=
Subject key identifier:   07:1C:5F:5E:18:2A:8A:78:35:C5:69:63:53:33:30:0F:0B:E7:EA:D1
Authority key identifier: C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49
Certificate issuer:       /CN=A91557F2/serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
Manifest number:          0887
Signing time:             Wed 20 Aug 2025 21:55:38 +0000
Manifest this update:     Wed 20 Aug 2025 21:55:37 +0000
Manifest next update:     Wed 27 Aug 2025 21:55:37 +0000
Files and hashes:         1: w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl (hash: vvjLmBjjgviatUqLdO74XnGyS4NlOG6hYKhMCdQUvtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 21:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
        Validity
            Not Before: Aug 20 21:55:37 2025 GMT
            Not After : Aug 27 21:55:37 2025 GMT
        Subject: CN=68a6445a-6d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:af:bb:ad:b8:3c:ad:95:7c:af:ef:6e:42:
                    ee:b8:1c:58:ac:70:03:9a:6c:9e:42:71:fb:bb:39:
                    df:37:28:25:6e:71:73:ec:fb:23:69:fe:1a:fe:7c:
                    65:5a:74:fc:51:90:a0:ed:b9:d8:11:e8:0b:ce:51:
                    76:38:c3:98:10:19:58:b0:b8:d9:59:ce:33:ab:3a:
                    60:f4:f7:48:66:51:5c:84:33:b3:63:9b:4a:d4:af:
                    44:5a:12:33:2b:26:63:38:b6:41:59:aa:48:10:3b:
                    e7:44:09:fd:11:a8:16:6b:18:23:85:91:bb:93:7a:
                    38:09:f4:99:32:08:e0:00:6e:b6:81:55:97:cc:87:
                    e4:30:0d:eb:82:14:ef:36:47:57:39:2a:14:48:63:
                    6b:4a:d9:ce:28:ee:22:4d:0f:10:43:46:b3:f8:fd:
                    d0:b9:9a:7d:20:02:65:eb:37:76:8a:c2:10:06:7c:
                    ed:12:3d:de:10:40:e9:f5:1b:00:d5:f5:6e:01:41:
                    c7:bf:0b:1d:b7:0c:9d:1a:fd:eb:45:dd:00:69:5b:
                    28:1e:1a:55:fa:8d:f4:e0:85:61:d2:23:32:86:52:
                    27:0b:a9:39:cb:a9:3d:14:8a:be:bd:b6:95:8e:8c:
                    90:36:00:6f:4a:02:52:1f:98:de:2f:73:fd:69:a2:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:5F:5E:18:2A:8A:78:35:C5:69:63:53:33:30:0F:0B:E7:EA:D1
            X509v3 Authority Key Identifier:
                keyid:C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:df:b2:61:72:f3:55:63:8b:05:d5:7e:4d:cc:75:bd:c1:
         09:a6:07:83:de:86:50:a0:7f:20:fc:5d:c8:87:88:26:c3:68:
         26:8a:9e:23:11:93:26:55:65:d4:fb:2c:23:02:c2:45:d2:01:
         f5:48:7d:1a:95:1b:0a:83:43:90:9c:16:7f:a6:a1:1c:d7:9d:
         f1:6c:12:4d:cf:c0:df:2c:e7:cd:30:79:09:e9:7e:c2:96:28:
         a2:b3:8b:31:b0:8f:7f:ce:c7:5f:a1:90:8b:d2:41:c3:ed:e5:
         d4:e6:b5:27:76:8d:81:0e:fd:3d:48:0d:03:de:90:70:93:33:
         01:1e:7e:0b:f1:f5:f0:4d:ba:20:8a:17:ef:e2:dd:5b:9b:55:
         b9:cd:01:6b:19:d9:61:76:88:55:a7:0b:e2:59:fe:fb:54:cd:
         ad:67:80:8e:62:be:e1:c2:4a:6d:24:78:d8:ac:65:6e:cc:55:
         aa:0e:a0:e3:15:b2:d6:39:a7:2f:f9:79:c1:3d:46:02:86:0d:
         73:4e:14:3d:3a:4b:7c:46:fd:06:8e:5e:ad:49:21:7e:ac:c2:
         e7:54:fc:aa:3d:b0:c5:12:3c:12:bd:93:ce:50:c1:ea:2a:4d:
         b5:11:ef:6a:ad:62:15:ff:79:51:08:47:e1:65:32:5f:2e:a1:
         49:1d:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:32:14 2025 by rpki-client