Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          dLL7eCwyfO89y4Iay0AqXKBMCF1cLkNp/F1jkSwlZ9U=
Subject key identifier:   C5:8F:A1:D9:43:FF:60:DA:D4:9E:7C:BD:23:E1:AA:54:EA:F7:23:BB
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          3A
Signing time:             Thu 09 Oct 2025 00:17:42 +0000
Manifest this update:     Thu 09 Oct 2025 00:17:41 +0000
Manifest next update:     Thu 16 Oct 2025 00:17:41 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: CmBrFEX19OEiC//hreS3ovtO8ubQx6lYWyNW7PTQMh8=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 00:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Oct  9 00:17:41 2025 GMT
            Not After : Oct 16 00:17:41 2025 GMT
        Subject: CN=68e6ff25-6fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:0c:1a:86:7b:d9:1c:87:bd:5b:7f:34:51:15:
                    ab:b6:6c:02:c4:3f:87:19:1d:ae:be:7e:3a:cd:ce:
                    e3:ea:1e:93:ce:3f:40:75:1e:2a:d3:ec:fb:36:2a:
                    12:00:0c:9f:e4:d2:a3:7b:ea:2e:d5:de:60:23:56:
                    3a:8a:da:8e:f4:a6:ca:57:c8:fd:20:5e:18:e0:95:
                    e1:af:cf:09:64:a7:31:c3:9a:1f:cb:47:5a:fc:24:
                    b5:23:06:d4:88:b7:2e:c6:15:cc:54:70:02:95:0d:
                    b3:30:43:32:1a:b3:85:c0:4a:ee:79:4f:19:dd:a8:
                    a8:3c:9a:77:95:76:fd:dc:81:0c:3c:77:8f:87:ff:
                    f6:dd:f3:28:c4:ce:2f:26:7f:34:20:c0:8a:b2:fe:
                    ac:18:d4:18:a4:cf:9b:9e:9c:11:56:94:3b:78:07:
                    1a:e8:e6:42:15:be:89:72:1e:4d:f2:5b:e3:99:cd:
                    16:ed:0c:8c:46:34:c7:e6:65:7a:73:fb:bf:d0:81:
                    f9:a5:ca:3f:35:17:bb:20:73:1f:62:44:b4:c0:8d:
                    7f:4d:9d:70:03:a5:94:de:6c:a7:68:6b:d9:ae:38:
                    fe:bf:10:c0:5c:c6:b1:bf:88:3c:8e:ec:25:cf:d4:
                    f4:d5:ac:61:22:e5:9a:4b:34:24:b9:fb:fb:c8:02:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:A1:D9:43:FF:60:DA:D4:9E:7C:BD:23:E1:AA:54:EA:F7:23:BB
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:23:3f:6b:24:42:69:ce:20:67:86:27:e0:39:d7:62:64:
         f2:d4:cf:eb:88:0b:8c:d0:3b:fc:a9:d2:ad:4e:d4:43:50:77:
         3c:48:a6:ff:11:0f:09:a1:a2:9a:ca:c1:c3:02:79:dc:36:7d:
         3e:55:9e:5d:7d:b4:3b:7b:01:f8:8c:d4:d5:cf:17:67:89:96:
         a8:84:ac:50:f0:ff:50:3f:31:22:57:eb:29:4e:84:d9:58:9f:
         cf:a4:8b:a7:ff:9f:8d:d3:ed:de:fd:c4:df:98:f0:32:02:69:
         cb:5c:54:b4:62:f8:43:58:34:95:82:e8:e5:a6:63:1a:7d:05:
         13:5e:01:11:34:3f:e9:6d:1d:ef:10:60:d7:17:a0:ff:05:e8:
         56:b1:71:5e:21:b2:4b:b6:0c:f4:be:f8:d5:4e:e2:62:34:ea:
         25:45:68:0b:66:32:24:d9:cf:0a:2c:f6:fa:14:c0:7c:2e:bd:
         7b:4b:df:6c:aa:b8:14:59:76:fa:3d:33:28:2e:0b:1e:0b:77:
         1d:64:4c:f5:e5:fb:40:a7:72:27:98:30:c3:f4:bd:f5:ff:2b:
         6e:d5:96:1d:bd:18:10:3f:94:5b:d1:3c:ea:4d:64:75:da:1a:
         4c:4d:85:1e:cb:9a:7a:3b:41:4b:7b:2a:47:58:fa:31:19:71:
         2e:95:ff:e1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzFBRDExMC8GA1UEBRMoQzE1OTcxMzFFQUJDNUJCMzMyQkM5OTlENDE2RTlENUU3
RkNDMEE2OTAeFw0yNTEwMDkwMDE3NDFaFw0yNTEwMTYwMDE3NDFaMBgxFjAUBgNV
BAMTDTY4ZTZmZjI1LTZmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD9DBqGe9kch71bfzRRFau2bALEP4cZHa6+fjrNzuPqHpPOP0B1HirT7Ps2KhIA
DJ/k0qN76i7V3mAjVjqK2o70pspXyP0gXhjgleGvzwlkpzHDmh/LR1r8JLUjBtSI
ty7GFcxUcAKVDbMwQzIas4XASu55TxndqKg8mneVdv3cgQw8d4+H//bd8yjEzi8m
fzQgwIqy/qwY1Bikz5uenBFWlDt4Bxro5kIVvolyHk3yW+OZzRbtDIxGNMfmZXpz
+7/Qgfmlyj81F7sgcx9iRLTAjX9NnXADpZTebKdoa9muOP6/EMBcxrG/iDyO7CXP
1PTVrGEi5ZpLNCS5+/vIAgQ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxY+h2UP/
YNrUnny9I+GqVOr3I7swHwYDVR0jBBgwFoAUwVlxMeq8W7MyvJmdQW6dXn/MCmkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0JDMjhBRjAwNTA5
QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdNeXZKbWRRVzZkWG5fTUNt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd1ZseE1lcThXN015dkptZFFXNmRYbl9NQ21rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
MUFEL0JDMjhBRjAwNTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdN
eXZKbWRRVzZkWG5fTUNtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA0JIz9rJEJpziBnhifgOddiZPLUz+uIC4zQO/yp0q1O1ENQdzxIpv8R
DwmhoprKwcMCedw2fT5Vnl19tDt7AfiM1NXPF2eJlqiErFDw/1A/MSJX6ylOhNlY
n8+ki6f/n43T7d79xN+Y8DICactcVLRi+ENYNJWC6OWmYxp9BRNeARE0P+ltHe8Q
YNcXoP8F6FaxcV4hsku2DPS++NVO4mI06iVFaAtmMiTZzwos9voUwHwuvXtL32yq
uBRZdvo9MyguCx4Ldx1kTPXl+0CncieYMMP0vfX/K27Vlh29GBA/lFvRPOpNZHXa
GkxNhR7Lmno7QUt7KkdY+jEZcS6V/+E=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:55 2025 by rpki-client