Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
File:                     0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json)
Hash identifier:          z7k0Czcnv+CfWebQXO6DhiXdhJGosobk1Rlk3I0iFJY=
Subject key identifier:   77:7B:EE:D7:15:09:A9:D3:3C:20:86:2D:2F:29:BE:8D:0E:05:86:F1
Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1
Certificate issuer:       /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1
Certificate serial:       07C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
Manifest number:          1236
Signing time:             Sun 24 Aug 2025 19:35:44 +0000
Manifest this update:     Sun 24 Aug 2025 19:35:43 +0000
Manifest next update:     Sun 31 Aug 2025 19:35:43 +0000
Files and hashes:         1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: EdLGKLbvzYR5JCHc6/DG1Wb2awwiB2/4N/Ul0yNSD7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl
                          rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4102, serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1
        Validity
            Not Before: Aug 24 19:35:43 2025 GMT
            Not After : Aug 31 19:35:43 2025 GMT
        Subject: CN=68ab698f-04d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:97:68:32:24:0c:51:0c:91:c4:29:2e:a0:
                    fb:6e:b5:6f:ac:33:c6:9f:2b:bd:f1:1b:c2:a5:40:
                    33:d5:df:3d:3a:06:06:48:72:28:de:4c:76:0f:f3:
                    e4:25:1e:9a:89:0f:db:ba:31:b6:16:cd:b0:ed:74:
                    54:be:21:fd:ca:fb:d5:0f:c8:3e:bb:4d:b7:59:4f:
                    01:50:eb:22:be:0a:95:65:c7:9e:56:41:ad:eb:f5:
                    e7:7f:08:ae:e1:90:b7:cf:54:7f:6a:c4:cd:1f:17:
                    77:61:e2:12:de:62:4a:06:1e:df:3b:23:e7:d1:9d:
                    05:62:f6:07:a0:49:c2:c9:40:21:7c:f2:79:c0:15:
                    e8:66:18:d7:16:46:29:79:c8:ad:89:0f:e3:c1:d4:
                    54:ee:e0:96:a0:72:c1:2c:92:4b:46:ed:53:12:ae:
                    2a:35:d0:01:14:b5:45:df:b1:01:53:45:db:7e:48:
                    42:83:69:db:b8:7e:39:59:45:f5:d2:81:bf:10:36:
                    25:a5:7e:e3:68:60:0e:63:37:27:b4:86:5c:0e:a8:
                    39:07:f3:c2:e5:95:62:38:71:93:70:08:45:94:75:
                    47:90:36:64:3d:2a:61:e6:41:85:00:e8:4b:48:2b:
                    d3:8d:d7:b0:ed:65:bb:43:5b:74:cc:e2:6a:3f:08:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7B:EE:D7:15:09:A9:D3:3C:20:86:2D:2F:29:BE:8D:0E:05:86:F1
            X509v3 Authority Key Identifier:
                keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2a:4c:b1:7c:ef:ed:f9:60:d7:bb:33:a4:42:b0:50:db:9b:
         ca:35:52:ea:f0:08:92:e3:c5:56:5d:b3:db:e2:6c:fb:f8:71:
         a2:bb:9b:86:a6:90:ba:70:52:b1:60:aa:d1:42:1e:49:15:c5:
         8d:5b:48:c6:97:37:18:ce:7a:97:1c:70:76:7d:34:10:fc:b1:
         90:f0:a0:0f:88:b3:32:fb:d4:6e:3a:78:63:eb:d9:0e:6e:d8:
         0d:a8:0a:3d:3d:b7:ee:55:e5:65:29:46:5a:a9:e3:99:a4:ee:
         af:c3:d8:65:76:3c:ff:f1:c0:a0:c5:d9:7a:0e:92:0b:c8:96:
         8e:ae:de:90:a8:7e:f0:9c:93:4a:dd:7d:93:8f:e5:07:7e:34:
         66:cf:a0:ee:08:1f:28:6f:97:42:77:c8:39:f1:30:1f:d8:7a:
         98:f6:6d:91:c6:44:13:dd:7f:fe:25:9c:c5:5a:66:f9:b4:8e:
         6a:86:54:69:73:8f:65:c5:0b:60:f2:6a:75:57:45:bb:77:28:
         7a:cc:e9:c6:f6:80:47:86:f4:26:32:39:41:12:57:e7:86:00:
         27:a9:0c:c4:42:0e:2d:4e:54:8b:e2:c4:c3:81:a5:11:7e:f5:
         d1:5a:a4:fb:54:0f:09:09:30:0d:e4:60:cb:d1:28:fa:e8:9d:
         4f:ff:ed:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky
Q0IwRDAwRTEwHhcNMjUwODI0MTkzNTQzWhcNMjUwODMxMTkzNTQzWjAYMRYwFAYD
VQQDEw02OGFiNjk4Zi0wNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA51GXaDIkDFEMkcQpLqD7brVvrDPGnyu98RvCpUAz1d89OgYGSHIo3kx2D/Pk
JR6aiQ/bujG2Fs2w7XRUviH9yvvVD8g+u023WU8BUOsivgqVZceeVkGt6/Xnfwiu
4ZC3z1R/asTNHxd3YeIS3mJKBh7fOyPn0Z0FYvYHoEnCyUAhfPJ5wBXoZhjXFkYp
ecitiQ/jwdRU7uCWoHLBLJJLRu1TEq4qNdABFLVF37EBU0XbfkhCg2nbuH45WUX1
0oG/EDYlpX7jaGAOYzcntIZcDqg5B/PC5ZViOHGTcAhFlHVHkDZkPSph5kGFAOhL
SCvTjdew7WW7Q1t0zOJqPwjAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd77tcV
CanTPCCGLS8pvo0OBYbxMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1
NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM
amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNKkyxfO/t+WDXuzOkQrBQ25vKNVLq8AiS48VWXbPb4mz7+HGiu5uG
ppC6cFKxYKrRQh5JFcWNW0jGlzcYznqXHHB2fTQQ/LGQ8KAPiLMy+9RuOnhj69kO
btgNqAo9PbfuVeVlKUZaqeOZpO6vw9hldjz/8cCgxdl6DpILyJaOrt6QqH7wnJNK
3X2Tj+UHfjRmz6DuCB8ob5dCd8g58TAf2HqY9m2RxkQT3X/+JZzFWmb5tI5qhlRp
c49lxQtg8mp1V0W7dyh6zOnG9oBHhvQmMjlBElfnhgAnqQzEQg4tTlSL4sTDgaUR
fvXRWqT7VA8JCTAN5GDL0Sj66J1P/+3/
-----END CERTIFICATE-----
Generated at Sun Aug 24 22:23:16 2025 by rpki-client