Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          vUEhRZRaeLR0fPZpSsZpAziEeOUHDU3t58oPjAT0VVA=
Subject key identifier:   93:CF:F9:2C:9C:9E:F1:70:8F:92:6E:02:62:47:98:96:FD:05:32:8D
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       0664
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          0661
Signing time:             Mon 06 Oct 2025 22:43:19 +0000
Manifest this update:     Mon 06 Oct 2025 22:43:19 +0000
Manifest next update:     Mon 13 Oct 2025 22:43:19 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: +MeeKnscczP2/+V9w/EOf6M9IYcmBk9213rm5QMf3fA=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: YIXSyV44XhAG1Lj7gtWc38+2l5HR5ltRFiBGyckO8MU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Oct 2025 22:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Oct  6 22:43:19 2025 GMT
            Not After : Oct 13 22:43:19 2025 GMT
        Subject: CN=68e44607-1c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:3a:1c:07:fb:af:29:07:9a:d7:a0:0b:22:
                    60:0d:1c:84:f7:9e:65:52:d8:58:e3:e0:7f:a7:6f:
                    b5:4f:e1:4e:53:f9:46:8d:e9:c9:75:35:b6:0a:c6:
                    a4:7c:cc:95:11:24:3c:64:0b:4b:e1:63:0f:af:ec:
                    8c:67:25:76:27:c0:db:04:fc:8c:16:a1:d5:23:97:
                    df:d6:9b:3d:5d:40:1b:48:9d:1e:a3:a8:2b:6e:fe:
                    9e:85:6f:c4:e4:4a:34:b2:b8:0a:74:f0:7a:da:d8:
                    d4:35:77:0c:b4:ba:23:d8:88:c6:8a:9a:90:51:90:
                    e4:b2:fb:8a:57:89:94:84:18:ea:02:ed:03:3a:d5:
                    24:51:03:f0:d6:77:13:c2:56:48:f6:3d:e6:fd:3c:
                    3b:05:8f:55:41:4a:65:c7:8b:6c:86:96:2d:df:eb:
                    40:ef:71:31:fb:72:f2:4d:cd:8b:d5:91:62:32:c3:
                    c7:8d:f2:1a:38:00:c0:c1:53:10:1c:08:34:a6:bd:
                    fa:f0:6a:9b:5a:ab:34:b4:eb:b5:27:6c:c3:87:cd:
                    ae:85:2a:96:a8:07:43:55:6d:0b:a9:7f:39:c5:3f:
                    74:37:f0:97:84:5a:72:bc:71:e3:2a:6a:cf:9c:eb:
                    b4:e8:3e:11:8e:5c:68:87:d7:75:7f:10:48:1e:29:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:F9:2C:9C:9E:F1:70:8F:92:6E:02:62:47:98:96:FD:05:32:8D
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:7f:1f:85:c7:de:1a:5a:b4:98:78:e9:f2:94:47:6f:10:
         df:6a:e5:ce:97:19:8f:3e:71:08:66:0b:64:4f:a4:11:84:4e:
         1c:45:56:2d:d2:02:6d:77:44:6c:56:06:e6:19:55:a4:29:a1:
         66:d3:04:21:bb:9a:55:88:ff:32:d4:b3:2d:92:6d:5e:d1:f3:
         87:cc:a0:62:85:0f:fa:6a:a0:de:b9:6e:09:83:af:a8:12:40:
         67:89:11:51:ed:e1:cb:27:92:37:48:91:a7:bc:5e:1e:50:65:
         2f:42:64:54:3c:3e:5d:b3:45:88:cf:f6:08:27:05:18:a5:a5:
         1f:56:7e:db:d4:87:e3:c7:2b:d5:ce:a9:b7:b1:7f:84:ed:ab:
         22:1e:28:1c:96:cc:b6:b7:06:87:fe:d6:e4:be:94:4e:a8:3c:
         15:ce:d5:fe:c2:bb:ca:a7:94:73:b3:68:aa:bd:ad:55:6a:85:
         b4:70:1d:17:28:04:da:99:c5:7f:b1:ac:98:e3:ce:c7:49:2d:
         ed:0b:ad:a7:08:2a:ee:df:ca:46:3f:92:b2:2e:f2:33:9c:14:
         d6:aa:45:9b:2b:09:74:b5:68:3d:83:1a:16:45:8f:d9:31:3a:
         7c:66:e2:f4:5b:c3:8d:d9:56:6c:7c:1e:83:e5:46:90:61:c0:
         6a:37:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:41:47 2025 by rpki-client