Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File:                     wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier:          HZlqED8AKEcDCrW1yP7BALIeKXKPu2Yyf3/VuZINFqQ=
Subject key identifier:   31:0F:82:BE:D9:77:B9:07:76:D6:46:6D:92:C9:EF:EA:88:8B:C2:86
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer:       /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number:          C4
Signing time:             Sat 06 Sep 2025 19:51:29 +0000
Manifest this update:     Sat 06 Sep 2025 19:51:28 +0000
Manifest next update:     Sat 13 Sep 2025 19:51:28 +0000
Files and hashes:         1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: qBDtE3HvHPdhJYTEuF5ZZdggEJgjZrR7RwE1prZLIhM=)
                          2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 18:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
        Validity
            Not Before: Sep  6 19:51:28 2025 GMT
            Not After : Sep 13 19:51:28 2025 GMT
        Subject: CN=68bc90c1-083c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:7e:40:7d:8b:fb:4b:d9:05:62:9a:04:60:
                    d1:70:8c:3a:e6:ac:06:94:03:89:74:6a:b5:2c:80:
                    16:15:b2:6a:a9:d7:2a:cc:ac:19:4e:12:61:05:14:
                    2d:28:2a:41:3c:18:5d:5a:6f:c2:67:87:07:d7:2d:
                    96:e7:e9:0a:30:20:e9:7d:4a:bb:ca:ae:cf:7b:12:
                    a7:02:e7:1d:55:17:04:da:34:ec:45:05:a8:19:11:
                    e8:79:0b:ee:e0:99:b5:e3:93:ec:6b:9c:3d:64:4e:
                    c2:1f:d1:bf:29:0d:c9:20:58:89:c6:03:8e:af:25:
                    92:6d:53:4e:85:c7:57:1e:4b:9d:d7:9f:76:61:9c:
                    ef:90:b1:3f:e0:88:1f:d8:42:f9:a3:9d:71:90:19:
                    8e:de:a7:64:e4:cb:ab:59:cc:2f:af:34:5d:b1:c7:
                    79:ae:11:25:fe:63:7c:c9:45:05:e0:a9:1f:b8:cd:
                    f4:c5:d6:d0:55:a1:ba:ce:0d:80:f2:71:31:9a:3f:
                    5e:94:a1:0f:83:fe:14:e4:6c:ac:3f:54:d6:5e:fe:
                    4e:5b:10:f1:e5:4f:61:88:97:d0:e6:51:ec:85:89:
                    3b:62:b4:71:61:60:68:c4:53:49:c4:80:76:58:5b:
                    bc:7a:01:dd:52:7d:53:76:b0:04:24:63:d1:1d:ea:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:82:BE:D9:77:B9:07:76:D6:46:6D:92:C9:EF:EA:88:8B:C2:86
            X509v3 Authority Key Identifier:
                keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:7c:be:26:28:cb:ad:42:88:22:2f:e0:2d:b8:81:59:4d:
         fe:44:87:a6:5e:96:79:25:6f:4d:68:25:f1:1e:6d:43:55:5b:
         e3:31:b0:6b:b8:d7:f9:9a:a6:13:54:49:70:f0:d6:29:7f:9c:
         ed:24:1f:52:38:f7:eb:92:19:95:e8:9e:a8:f5:b9:d6:5e:3d:
         60:16:e1:54:d8:1c:01:14:92:fd:2a:fd:44:66:ee:dc:23:10:
         c6:24:b2:26:03:dc:6b:a5:60:82:0b:de:35:6d:4c:0a:ec:dd:
         d0:5e:17:d3:d9:61:2d:40:cf:09:c4:5f:f0:4e:7a:30:f8:5d:
         3d:28:75:49:12:da:99:53:a6:3f:51:77:6b:37:15:17:43:be:
         18:d5:6f:cc:c1:10:8c:06:bc:d0:38:13:30:66:1a:cf:11:f0:
         71:3d:e7:30:f0:ac:52:d4:72:88:25:98:b6:c8:05:d4:4a:13:
         61:96:71:e1:fa:da:25:71:ad:18:02:73:3c:64:a2:02:1d:3a:
         3c:9f:c8:ba:cf:1d:ae:b3:be:35:50:0e:b6:6e:a6:73:70:70:
         13:09:e8:71:c9:47:70:96:7a:b5:73:34:81:50:19:c4:c2:82:
         a5:be:c2:20:88:96:2d:c8:94:80:aa:01:62:ca:8e:48:67:5b:
         9f:cc:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:57 2025 by rpki-client