Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File:                     WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier:          nVSW1rTXD1cpYBJidITC8uHtqLWXX+cgxuIEaA0dAdA=
Subject key identifier:   5C:81:71:40:CC:E7:0A:3F:BE:76:C8:03:AA:0B:51:A6:EF:3F:35:7D
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number:          09CF
Signing time:             Sat 06 Sep 2025 20:11:30 +0000
Manifest this update:     Sat 06 Sep 2025 20:11:30 +0000
Manifest next update:     Sat 13 Sep 2025 20:11:30 +0000
Files and hashes:         1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: VvPmzWlvPdPEhBZRowdBh0Em/kiqYwUParEqSv9wJJo=)
                          2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=)
                          3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Sep  6 20:11:30 2025 GMT
            Not After : Sep 13 20:11:30 2025 GMT
        Subject: CN=68bc9572-d465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:52:73:0a:8c:c0:3a:4a:90:8b:e0:de:b0:
                    da:e4:ba:6e:07:8d:d4:ee:99:78:d7:91:0e:ed:5f:
                    5f:f9:b4:95:36:c3:fd:d7:0f:18:e5:46:64:05:0b:
                    41:06:cd:7d:54:8c:4a:64:d3:6f:d7:fe:76:c3:37:
                    a9:0a:9b:30:a0:f2:83:56:50:d8:b3:d3:26:37:38:
                    ad:61:e4:13:f4:1a:97:75:09:5f:c6:fe:8c:b8:54:
                    62:d4:05:1b:2e:2e:3e:b5:fe:da:1e:5c:be:98:0b:
                    b1:9d:07:7c:84:55:76:d5:51:06:a8:72:ee:31:67:
                    4c:70:3b:61:3e:57:ad:fa:04:38:be:3d:af:16:7b:
                    ce:d5:e8:84:bd:fc:16:36:9c:98:89:e1:11:24:7c:
                    bd:db:29:97:5e:df:f9:e3:d1:5c:e5:f6:18:88:35:
                    1a:2f:3b:0a:70:43:01:46:67:11:6f:0f:8a:c7:cf:
                    b9:72:ca:78:f9:72:62:1d:9f:98:3e:e7:5d:62:7e:
                    ee:ae:6d:ec:bc:fa:0b:ef:6e:f5:4f:70:85:e8:68:
                    19:0a:65:b5:09:44:cb:39:6b:77:4d:a1:e6:ba:9e:
                    df:28:cf:95:04:3b:9b:2b:14:0d:8c:c0:a6:bb:98:
                    ab:e3:2a:0d:d4:82:8a:11:c2:6f:48:6f:0d:dc:33:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:81:71:40:CC:E7:0A:3F:BE:76:C8:03:AA:0B:51:A6:EF:3F:35:7D
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:8b:67:20:cf:9e:a4:64:e3:80:82:ba:d0:31:5e:61:63:
         82:0d:3a:a9:2e:c7:70:bb:be:04:83:2a:03:e8:b2:2b:65:b0:
         73:5b:ff:32:78:07:b5:d3:19:fa:55:a5:2b:7e:c6:6e:8b:c3:
         16:42:07:d3:ef:a0:d7:76:fd:42:5c:b2:52:c5:ba:74:44:e7:
         ae:6e:5f:8c:ec:6b:b3:eb:8b:5c:c4:16:5a:ee:27:8b:12:bc:
         f5:40:a8:8c:d3:2c:04:8c:4a:8f:be:41:bd:06:81:4e:9e:06:
         b9:1c:e5:af:35:11:5e:b0:68:f9:cd:4e:19:8c:ee:0b:38:da:
         cf:db:ee:f0:df:fc:99:e1:6f:ec:de:fd:29:45:55:79:23:49:
         71:fd:4f:c9:8a:a5:13:ea:80:be:a0:39:09:ae:9f:fe:84:a1:
         b9:03:16:c1:e7:8c:cd:f4:ce:52:44:07:7b:f6:2b:6d:6e:d9:
         99:85:10:28:82:ba:58:da:f3:23:bd:e6:8b:a4:ce:a8:a7:9b:
         b6:7f:e1:9e:41:62:2c:e8:75:af:1c:23:56:6f:87:dc:09:0c:
         30:fe:0a:08:cf:f5:78:41:60:9c:02:77:b2:26:dc:c6:33:e3:
         e3:cd:76:a9:d1:30:53:1d:bc:59:be:05:6c:20:56:55:4e:af:
         2c:98:86:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3
NDdFQTAyNjAwHhcNMjUwOTA2MjAxMTMwWhcNMjUwOTEzMjAxMTMwWjAYMRYwFAYD
VQQDEw02OGJjOTU3Mi1kNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLhScwqMwDpKkIvg3rDa5LpuB43U7pl415EO7V9f+bSVNsP91w8Y5UZkBQtB
Bs19VIxKZNNv1/52wzepCpswoPKDVlDYs9MmNzitYeQT9BqXdQlfxv6MuFRi1AUb
Li4+tf7aHly+mAuxnQd8hFV21VEGqHLuMWdMcDthPlet+gQ4vj2vFnvO1eiEvfwW
NpyYieERJHy92ymXXt/549Fc5fYYiDUaLzsKcEMBRmcRbw+Kx8+5csp4+XJiHZ+Y
PuddYn7urm3svPoL7271T3CF6GgZCmW1CUTLOWt3TaHmup7fKM+VBDubKxQNjMCm
u5ir4yoN1IKKEcJvSG8N3DMSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyBcUDM
5wo/vnbIA6oLUabvPzV9MB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE
NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5
VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMJYtnIM+epGTjgIK60DFeYWOCDTqpLsdwu74EgyoD6LIrZbBzW/8y
eAe10xn6VaUrfsZui8MWQgfT76DXdv1CXLJSxbp0ROeubl+M7Guz64tcxBZa7ieL
Erz1QKiM0ywEjEqPvkG9BoFOnga5HOWvNRFesGj5zU4ZjO4LONrP2+7w3/yZ4W/s
3v0pRVV5I0lx/U/JiqUT6oC+oDkJrp/+hKG5AxbB54zN9M5SRAd79ittbtmZhRAo
grpY2vMjveaLpM6op5u2f+GeQWIs6HWvHCNWb4fcCQww/goIz/V4QWCcAneyJtzG
M+PjzXap0TBTHbxZvgVsIFZVTq8smIYs
-----END CERTIFICATE-----
Generated at Mon Sep 8 04:19:51 2025 by rpki-client