Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File:                     wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier:          1gxHb5NTMXIrgtiaheHg/jEucof89A6/n/OX9UkpPGU=
Subject key identifier:   50:E1:45:8F:66:4E:79:88:BF:FB:AA:D7:C7:11:3B:C9:A7:BD:6D:91
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0ED2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number:          0EB3
Signing time:             Wed 22 Oct 2025 18:07:12 +0000
Manifest this update:     Wed 22 Oct 2025 18:07:11 +0000
Manifest next update:     Wed 29 Oct 2025 18:07:11 +0000
Files and hashes:         1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: GE4BLABY3G+ouiZ0JGUqzgCrfQin5s2ksBEIm5y99Aw=)
                          2: 247099D084C611F09EBC052BC4F9AE02.roa (hash: LjL6siy8mS8KnL6NQqX66YEFFKmRPoJ1dR18D6pEQ04=)
                          3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=)
                          4: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=)
                          5: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: SEuSI2XPVxN+1pVxedn+P+yPZW6RvN2NRh14bu8L37Y=)
                          6: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 18:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3794 (0xed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Oct 22 18:07:11 2025 GMT
            Not After : Oct 29 18:07:11 2025 GMT
        Subject: CN=68f91d4f-9557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:d7:94:1b:66:64:32:35:68:83:c6:7c:63:
                    b2:77:a3:46:d6:bf:4a:4a:7c:e7:b4:bd:26:35:30:
                    ce:9e:75:f1:46:30:ec:d7:f9:cb:b0:98:e7:f2:4b:
                    8a:cf:0a:29:4d:f1:41:61:93:5e:83:0c:4c:54:a5:
                    0d:85:4c:18:6c:38:ed:b6:0b:ab:fc:af:d6:88:24:
                    44:c8:f3:bd:e0:1f:1d:4b:f9:97:d7:5b:b3:8b:7c:
                    56:ee:96:3c:92:95:a2:eb:07:4b:bc:4b:0d:26:16:
                    9f:b4:f5:e5:d4:9f:cb:9f:e0:ab:62:e4:14:ce:a2:
                    0b:bc:f6:79:13:c8:98:83:77:23:e7:f8:91:f1:c4:
                    16:b3:9b:a0:1c:74:38:06:01:a4:b5:e5:98:60:4a:
                    8c:de:c9:1c:9e:a8:5a:af:be:e2:ed:ea:30:b5:59:
                    9f:db:bb:c3:49:b0:25:9b:3c:f7:40:9b:48:b2:02:
                    1f:55:67:1e:8e:db:4c:88:97:94:93:d2:ea:92:98:
                    b5:09:cd:3b:5f:7f:92:05:8d:28:8f:af:0b:b0:1c:
                    0c:ce:a5:90:2b:52:37:e0:3a:74:ac:15:e1:51:c5:
                    3b:c8:ce:62:ab:da:e3:38:5c:cd:a1:09:17:d4:28:
                    a9:03:95:fa:c1:16:54:5d:f3:16:08:66:9d:dc:f8:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:45:8F:66:4E:79:88:BF:FB:AA:D7:C7:11:3B:C9:A7:BD:6D:91
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:00:17:04:b6:a1:0f:18:c2:00:8e:ef:af:27:cc:ba:03:8f:
         b0:b8:13:ba:2a:b6:eb:f4:6d:23:9e:71:ca:22:09:29:dd:64:
         73:a4:80:73:cb:9d:a2:f5:76:be:b0:f6:ae:65:1e:ff:2b:1a:
         bb:a0:59:d5:11:80:9e:9a:94:c6:2b:c0:40:ad:29:72:99:bd:
         ad:0e:e7:3a:21:d3:57:4d:53:05:a7:d7:6b:0f:95:d7:1b:7d:
         d3:f9:c9:f0:5f:a4:8c:5d:08:06:31:6d:76:36:99:ee:eb:bf:
         a7:8f:56:c4:9e:76:4e:41:f9:56:cd:5c:58:17:83:65:40:2b:
         65:82:35:a5:a2:5b:e3:79:12:29:a7:cb:2e:43:77:d4:6c:cc:
         84:db:20:a6:93:99:01:43:73:ac:38:aa:79:4f:e4:1f:9b:f5:
         df:3a:c4:21:5f:b1:c8:de:22:09:6a:33:bd:e0:1b:88:4c:83:
         3a:38:7d:ae:51:61:9c:5f:7d:39:db:26:cb:ce:ae:1b:08:32:
         8e:72:1e:fa:5f:72:d9:3d:9e:2f:e5:99:8d:28:55:9e:06:05:
         ef:87:b5:76:3e:4b:60:2b:1e:dd:b3:68:0f:ba:76:19:c2:8f:
         10:d2:94:ba:8c:2b:c0:bd:f9:3d:e6:40:59:69:4b:96:e8:99:
         aa:e1:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:15:13 2025 by rpki-client