Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
File:                     mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json)
Hash identifier:          alhwDft4TR/+K6Vg+8joEH8GULzHTuYqDUR5j47xHiI=
Subject key identifier:   7E:0D:FB:32:24:99:0F:E5:3A:45:75:1C:E4:9C:02:24:16:12:23:E0
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
Manifest number:          0880
Signing time:             Thu 18 Sep 2025 20:51:06 +0000
Manifest this update:     Thu 18 Sep 2025 20:51:06 +0000
Manifest next update:     Thu 25 Sep 2025 20:51:06 +0000
Files and hashes:         1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: +ob3Hwe0BfkBjW6bx2mORFMM5kTecIy8Ceys/gBN404=)
                          2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: T+G1W9rqPVXfAfXBVOCsgu5yMoOrWw64N8nuPtrgLBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: Sep 18 20:51:06 2025 GMT
            Not After : Sep 25 20:51:06 2025 GMT
        Subject: CN=68cc70ba-24a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:71:8f:84:c7:3e:5e:01:e8:eb:c6:d0:d3:
                    71:25:43:80:21:e3:43:a0:6a:4b:12:fe:31:74:62:
                    ff:61:bc:a1:de:eb:4c:3e:82:85:4c:a9:49:61:02:
                    d1:60:c2:a9:3b:b3:7a:28:2a:60:f6:98:24:c2:58:
                    a3:1e:df:96:1e:8e:d0:3a:38:ff:0a:41:8c:8d:90:
                    49:ae:9d:6e:b8:e6:d0:df:8a:14:22:3c:41:a5:4a:
                    74:0c:5e:36:b2:f6:93:80:f3:cb:58:3e:52:57:8f:
                    34:1d:27:43:6f:9f:96:57:32:9b:9d:47:f8:db:05:
                    77:6f:84:10:38:f7:3a:21:36:ce:85:aa:6f:ea:23:
                    ab:3a:70:c9:1b:29:75:f0:63:a5:21:4a:84:0d:cb:
                    74:75:a9:4c:ea:ea:5b:53:8d:f7:c4:f2:71:a7:00:
                    fc:a3:58:30:5f:1b:6e:90:1c:82:93:23:3e:ce:fe:
                    e4:03:b6:8c:3a:35:e4:04:fe:64:9e:16:b0:23:da:
                    5e:c9:86:73:34:1b:8b:ae:96:f4:29:d3:e9:43:ed:
                    7e:08:ef:c5:f9:23:13:88:93:95:8d:47:bd:49:93:
                    25:be:7d:cd:77:0f:3f:7c:e5:fe:92:5b:a0:3c:67:
                    9f:c9:bf:26:8a:a2:08:ad:39:fb:26:02:2a:35:ed:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:FB:32:24:99:0F:E5:3A:45:75:1C:E4:9C:02:24:16:12:23:E0
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:39:e9:1e:7a:fd:05:90:9a:d9:d2:49:e2:4e:02:d1:de:97:
         ad:7a:dc:90:e1:42:08:3f:b4:44:67:b2:25:55:84:90:3e:fd:
         35:ce:2d:8c:c9:97:de:46:e7:f6:66:8a:3b:27:30:dc:77:70:
         93:08:17:b4:21:5b:b1:75:a5:9b:ab:de:22:35:f8:49:9a:72:
         9f:06:8b:37:e6:00:73:16:c7:dc:fc:39:04:de:74:b7:e3:90:
         c7:6f:aa:8c:48:83:ef:00:5e:b0:57:3e:11:fb:09:59:47:b4:
         e5:4c:4a:ac:cb:68:a9:8a:00:02:d4:5c:c9:ef:15:1a:e7:98:
         60:c0:3e:26:e9:d3:86:bc:e7:d6:a8:9f:9a:4a:06:02:07:b4:
         94:ae:68:1c:be:6a:fa:89:7f:42:43:c8:9e:e7:2f:0c:0f:e0:
         d2:c2:f3:d4:f6:4c:74:bb:72:fe:dd:3b:a5:7c:2b:16:3e:69:
         96:a7:53:fb:bc:5b:e7:5f:f0:7f:02:be:c1:67:13:1c:9a:33:
         f4:8b:d8:8d:f5:40:24:17:0a:ff:b5:f9:62:20:43:30:00:94:
         29:b4:09:01:6f:ce:19:ed:82:f6:87:d1:f3:25:0d:b4:b2:df:
         75:02:f0:fd:b9:9b:e0:a0:49:fd:2a:07:51:7c:51:28:6c:d4:
         79:37:2c:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5
MERGMEVGNTQwHhcNMjUwOTE4MjA1MTA2WhcNMjUwOTI1MjA1MTA2WjAYMRYwFAYD
VQQDEw02OGNjNzBiYS0yNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwG5xj4THPl4B6OvG0NNxJUOAIeNDoGpLEv4xdGL/Ybyh3utMPoKFTKlJYQLR
YMKpO7N6KCpg9pgkwlijHt+WHo7QOjj/CkGMjZBJrp1uuObQ34oUIjxBpUp0DF42
svaTgPPLWD5SV480HSdDb5+WVzKbnUf42wV3b4QQOPc6ITbOhapv6iOrOnDJGyl1
8GOlIUqEDct0dalM6upbU433xPJxpwD8o1gwXxtukByCkyM+zv7kA7aMOjXkBP5k
nhawI9peyYZzNBuLrpb0KdPpQ+1+CO/F+SMTiJOVjUe9SZMlvn3Ndw8/fOX+klug
PGefyb8miqIIrTn7JgIqNe350wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4N+zIk
mQ/lOkV1HOScAiQWEiPgMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC
REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz
X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXOekeev0FkJrZ0kniTgLR3petetyQ4UIIP7REZ7IlVYSQPv01zi2M
yZfeRuf2Zoo7JzDcd3CTCBe0IVuxdaWbq94iNfhJmnKfBos35gBzFsfc/DkE3nS3
45DHb6qMSIPvAF6wVz4R+wlZR7TlTEqsy2ipigAC1FzJ7xUa55hgwD4m6dOGvOfW
qJ+aSgYCB7SUrmgcvmr6iX9CQ8ie5y8MD+DSwvPU9kx0u3L+3TulfCsWPmmWp1P7
vFvnX/B/Ar7BZxMcmjP0i9iN9UAkFwr/tfliIEMwAJQptAkBb84Z7YL2h9HzJQ20
st91AvD9uZvgoEn9KgdRfFEobNR5NyyX
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:01:38 2025 by rpki-client