Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File:                     wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier:          9F1kaTQE3AvcjEPNhJXEpXniphL7WTp+Sg6/WVwd0nw=
Subject key identifier:   FC:A3:1B:CD:40:6B:F7:77:22:07:CD:8E:72:71:CA:74:54:7E:9E:0D
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number:          0787
Signing time:             Sun 02 Nov 2025 21:29:41 +0000
Manifest this update:     Sun 02 Nov 2025 21:29:40 +0000
Manifest next update:     Sun 09 Nov 2025 21:29:40 +0000
Files and hashes:         1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: qj018HjdCes5A7Z9mf6kObbF/KnON5e0kAW7K/DNuLg=)
                          2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
        Validity
            Not Before: Nov  2 21:29:40 2025 GMT
            Not After : Nov  9 21:29:40 2025 GMT
        Subject: CN=6907cd44-c6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:8a:26:a3:3e:aa:e1:b2:b8:e5:46:d4:04:
                    da:f9:a5:2e:57:6c:9a:a9:1f:82:a6:29:f2:cc:04:
                    64:41:32:db:01:38:7d:b1:86:fb:94:ef:4a:05:10:
                    4a:f5:ae:01:d6:d7:38:05:a1:b6:02:6f:b9:57:75:
                    21:85:1b:5e:89:6c:1e:11:5e:c2:3b:c4:ea:a4:86:
                    24:be:0c:fa:13:a1:05:b9:a4:ee:93:7a:d7:d3:c1:
                    05:60:c7:08:75:a9:02:f6:e2:02:09:0e:ff:0c:e1:
                    13:ed:ac:34:95:3b:e1:67:f9:fa:7c:71:70:96:60:
                    30:67:99:d2:1f:4a:c8:21:a9:84:2f:17:ed:61:11:
                    62:2e:8a:67:1e:3e:9a:43:7d:db:16:03:33:4c:48:
                    23:1f:b7:55:d0:20:c6:12:77:d8:03:cb:a9:f2:50:
                    e7:97:f9:cc:a1:6c:df:b5:f0:08:8a:06:8e:9f:f5:
                    c1:69:de:5d:10:4f:a9:fc:d7:6a:13:5a:4f:0e:35:
                    ea:24:98:d8:1b:54:92:d5:73:42:20:11:ff:4a:c7:
                    e2:8a:a5:7a:fc:49:58:7e:62:4e:11:9f:84:a9:d8:
                    2f:eb:bb:69:0a:e4:3f:59:ae:c0:05:06:d3:4f:60:
                    60:fa:4b:a6:19:8d:a9:38:de:02:eb:8b:ec:4f:2f:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A3:1B:CD:40:6B:F7:77:22:07:CD:8E:72:71:CA:74:54:7E:9E:0D
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:80:96:cb:e7:ad:6b:36:b5:16:d5:1d:62:25:97:db:eb:
         c7:04:20:46:56:d8:cf:e0:19:0d:4f:ca:9c:01:c9:34:07:6e:
         92:68:ae:88:17:18:da:91:d2:06:5e:72:c6:e2:d8:4c:6a:f2:
         de:8e:2f:f2:62:d7:5c:2e:5f:de:a2:f6:3b:ff:a8:d2:4c:d2:
         10:a4:21:75:51:61:b1:c2:7f:d7:50:cb:d8:b8:cb:1b:82:3b:
         0a:4d:e2:b4:3f:6f:0f:30:bf:1f:5a:ae:19:e5:58:7d:38:cb:
         5a:07:3c:28:8a:d9:15:70:f1:b7:ad:d1:89:6e:77:44:1f:25:
         02:74:c9:4d:92:5a:ff:db:40:c9:8b:f4:88:0a:7d:6b:a7:b4:
         70:cf:29:09:c1:dc:21:f7:d9:83:01:56:fb:fb:8d:57:35:9d:
         c5:6b:5a:55:ba:62:f6:45:b8:7c:c1:f5:f3:11:8f:d5:b9:2a:
         45:15:5a:5d:55:c2:a5:a9:f3:3d:f2:0c:dd:50:9f:ee:44:92:
         d2:2d:d0:f8:72:6b:9a:b7:bd:93:9d:b1:c3:fd:27:54:ed:a9:
         41:9d:02:f1:58:bc:8a:55:c8:30:10:ef:36:8f:d2:99:1f:ad:
         eb:c3:d5:9a:c1:c6:3c:a1:e7:83:29:cb:1a:e9:89:c4:51:f9:
         3f:5a:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:26 2025 by rpki-client