Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          T2whFoNAXJ+OZb3bFmiyjmnOCHsgDIqz8iESf0hOBYA=
Subject key identifier:   49:9E:12:6E:F8:FE:7D:26:7C:58:5C:F1:FD:64:AC:F1:0C:A2:95:74
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          20
Signing time:             Tue 19 Aug 2025 08:22:21 +0000
Manifest this update:     Tue 19 Aug 2025 08:22:21 +0000
Manifest next update:     Tue 26 Aug 2025 08:22:21 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: qjX0+JuiQ3FnOOucgsMXgMQnMGB9UeKpylqhPoVZn+g=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 08:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Aug 19 08:22:21 2025 GMT
            Not After : Aug 26 08:22:21 2025 GMT
        Subject: CN=68a4343d-25cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:e6:39:5b:7e:18:ab:e9:33:24:0e:36:26:
                    5f:df:85:00:0c:ba:c8:e8:0c:9b:a4:00:60:be:08:
                    ad:56:f3:69:56:62:3b:1d:7d:ea:1d:01:19:52:41:
                    dc:70:3b:76:d7:1a:0e:05:db:61:64:74:27:70:49:
                    a4:9d:30:b6:fd:3e:59:e1:eb:fa:77:0a:01:20:d2:
                    25:ae:92:62:08:1e:0f:48:b7:46:39:2a:00:57:e2:
                    94:e7:77:3d:f2:c8:c6:e6:1a:52:e4:12:87:80:67:
                    c4:51:e8:7b:28:b2:6b:40:e3:03:ce:ec:40:8d:85:
                    ba:97:62:16:32:63:56:db:f7:56:9e:fe:66:16:ab:
                    4d:c7:08:d9:c7:72:86:01:60:e9:a3:f3:da:d0:e8:
                    77:00:3b:96:f5:08:d8:a7:7c:49:d7:07:b1:fc:2d:
                    1c:89:95:ec:72:2b:7f:66:5f:e0:b8:bf:b9:3e:23:
                    9f:d3:92:cd:84:a2:25:72:b9:2f:99:2d:66:eb:c8:
                    f2:dd:48:6d:28:c9:11:50:07:e7:74:bc:91:5f:09:
                    a9:f4:a2:70:93:89:4a:70:70:5c:f6:fa:24:8a:90:
                    f3:6a:38:1a:c5:1b:08:40:e0:bb:1d:a2:53:b8:0f:
                    61:26:8b:4d:22:5f:ea:76:5f:3a:26:d4:52:c7:9b:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9E:12:6E:F8:FE:7D:26:7C:58:5C:F1:FD:64:AC:F1:0C:A2:95:74
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:72:9f:4d:0d:0a:8b:ba:75:2c:bd:45:54:62:c0:02:66:
         f1:fc:64:77:2f:9c:2d:dd:74:6d:54:10:e6:b0:4a:f1:44:9e:
         80:52:03:0d:1f:45:02:93:63:dd:51:b9:4e:4f:78:fb:9e:6c:
         54:c0:83:6e:e4:57:c0:48:86:ad:f9:cf:c7:4d:a4:b1:22:a6:
         0c:06:61:f4:e3:64:81:15:08:00:2f:43:3e:b7:60:62:30:5a:
         3f:f7:f3:52:2b:b0:cd:fe:4e:16:f4:fb:80:61:3d:64:71:44:
         8a:f9:24:83:8e:a2:09:4a:58:2f:69:5c:52:00:0e:8c:13:17:
         26:3f:46:f5:7a:78:d5:02:38:8d:78:64:22:23:32:35:98:da:
         ca:d6:d2:9f:c1:b4:49:67:27:6f:83:b8:d9:e1:e4:f9:aa:03:
         fd:1c:db:eb:7a:28:e5:c3:27:47:58:5e:40:1e:fe:af:fa:e3:
         12:7c:cb:7b:ac:ca:3f:27:21:77:13:1f:94:c7:14:fb:fd:0e:
         34:61:12:12:e4:e6:8d:1f:79:6e:15:81:1e:d3:b2:bb:00:78:
         ce:e4:51:56:00:93:84:09:b4:02:e3:d0:2b:b3:b9:2f:bf:08:
         88:72:0b:c1:e9:80:d3:e1:13:3f:e7:c9:a8:f0:64:86:06:8b:
         14:c1:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:54 2025 by rpki-client