Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          aYdUvgGSDdkKPNZ1O0KLj2oIy1zIaCR1oGLh/3zd6XU=
Subject key identifier:   89:0C:F1:65:D2:EE:16:66:F5:4F:9F:55:6F:C6:A0:78:CA:A6:D4:A4
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       137E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1268
Signing time:             Mon 20 Oct 2025 17:37:04 +0000
Manifest this update:     Mon 20 Oct 2025 17:37:02 +0000
Manifest next update:     Mon 27 Oct 2025 17:37:02 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: P9DKKVyKxvVcwGLsnASrQT8Xh6qhSrRe++6rNGhqHCk=)
                          2: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          3: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: Jm69XnxkSt8CaD8B4M7m2OfdxuyjH53yi3Y2n3LjPoQ=)
                          11: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: UbbJeh1gWwixc1KBx/TcENcb/xObt11wZD4U7s3lZJw=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws=)
                          13: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          14: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          15: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4990 (0x137e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Oct 20 17:37:02 2025 GMT
            Not After : Oct 27 17:37:02 2025 GMT
        Subject: CN=68f6733f-d22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:8a:35:85:83:76:b1:3f:a3:6a:6f:8a:1a:
                    47:07:06:46:b3:5d:b1:01:b1:11:42:23:86:43:c1:
                    7d:33:2e:d7:54:e7:be:d6:f2:cd:ae:4f:e5:8f:ed:
                    85:90:6b:b3:16:8c:39:23:f1:a5:8f:da:e4:4c:9f:
                    19:ad:6d:be:8c:e2:7e:f2:9f:62:71:c4:25:ce:f9:
                    82:19:43:69:b0:11:b8:fe:42:f1:07:e6:8d:b8:9d:
                    66:c8:94:3d:4c:58:7a:3d:2d:cd:df:3a:5c:86:52:
                    e9:33:4d:a9:71:88:76:ae:a9:1f:a7:28:69:75:d7:
                    18:42:97:ab:22:88:2b:bc:2c:ed:37:39:11:7c:df:
                    5b:ed:a5:d2:fa:83:43:29:13:e8:5f:e0:47:5b:70:
                    37:2e:2d:29:ab:5c:19:ab:53:6c:03:05:61:8e:77:
                    51:6c:04:10:a9:2f:ec:7b:ca:96:d7:a1:5a:b6:2e:
                    37:c6:5d:39:5e:a7:16:94:4d:7b:a0:d9:cf:83:bb:
                    80:2c:0d:40:ed:c6:58:c4:8a:ed:68:f2:95:89:e1:
                    72:0c:2e:99:6a:6d:a0:e7:ba:ed:db:ca:da:08:7f:
                    86:f0:12:3a:ce:ee:6f:5c:e2:19:9b:a5:b6:97:4a:
                    74:8b:ea:10:31:58:38:be:cf:57:b4:f4:31:dd:62:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:F1:65:D2:EE:16:66:F5:4F:9F:55:6F:C6:A0:78:CA:A6:D4:A4
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:13:50:ad:3b:67:e1:80:a0:3f:80:5c:0e:f1:5b:cc:a0:
         a6:46:db:a5:53:28:77:2c:2f:2a:60:58:52:be:7c:f9:09:5f:
         1e:0e:f2:5d:d9:68:f7:af:ac:bd:42:93:8f:d9:b2:94:f0:07:
         46:ee:d1:91:6b:19:ca:24:d0:e7:fe:fe:4d:70:6d:93:f2:53:
         cb:28:bb:16:ed:a7:cc:8e:3d:57:27:2f:af:a6:a6:99:68:1e:
         40:dd:fb:6b:97:c7:4c:d3:7a:ee:17:14:b2:b4:6a:0c:f7:f5:
         1b:be:47:e1:45:ed:01:23:e3:d2:79:b6:ea:ba:36:37:c5:9a:
         d5:bb:db:fd:cc:07:25:ad:ae:6d:2f:56:e3:a6:1f:e3:e9:b6:
         8c:a4:ea:f0:20:c5:6a:96:d5:66:b4:0a:5e:67:b9:4e:36:89:
         05:48:b9:36:a0:ca:39:91:f6:c4:14:45:f6:74:ed:cd:0a:08:
         92:4f:e2:32:52:ed:ea:f8:ba:8f:54:d9:66:01:5d:d7:81:f0:
         4e:ac:3b:df:9a:2e:26:d7:e3:b7:02:a0:ca:1f:f6:43:41:dd:
         38:41:55:08:a9:13:f7:db:3d:a4:09:a6:0f:cd:80:91:7d:99:
         69:5a:d9:e8:93:4c:db:ae:a5:3f:9b:79:e3:23:22:ed:62:60:
         30:3c:e1:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5
N0QxQjE2NTMwHhcNMjUxMDIwMTczNzAyWhcNMjUxMDI3MTczNzAyWjAYMRYwFAYD
VQQDEw02OGY2NzMzZi1kMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAohyKNYWDdrE/o2pvihpHBwZGs12xAbERQiOGQ8F9My7XVOe+1vLNrk/lj+2F
kGuzFow5I/Glj9rkTJ8ZrW2+jOJ+8p9iccQlzvmCGUNpsBG4/kLxB+aNuJ1myJQ9
TFh6PS3N3zpchlLpM02pcYh2rqkfpyhpddcYQperIogrvCztNzkRfN9b7aXS+oND
KRPoX+BHW3A3Li0pq1wZq1NsAwVhjndRbAQQqS/se8qW16Fati43xl05XqcWlE17
oNnPg7uALA1A7cZYxIrtaPKVieFyDC6Zam2g57rt28raCH+G8BI6zu5vXOIZm6W2
l0p0i+oQMVg4vs9XtPQx3WLJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkM8WXS
7hZm9U+fVW/GoHjKptSkMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE
M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDJEQy8yRDUxQUY0MkZEM0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYy
Y25JNXVTcVRzMktYMGJGbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxnRNQrTtn4YCgP4BcDvFbzKCmRtulUyh3LC8qYFhSvnz5CV8eDvJd
2Wj3r6y9QpOP2bKU8AdG7tGRaxnKJNDn/v5NcG2T8lPLKLsW7afMjj1XJy+vpqaZ
aB5A3ftrl8dM03ruFxSytGoM9/UbvkfhRe0BI+PSebbqujY3xZrVu9v9zAclra5t
L1bjph/j6baMpOrwIMVqltVmtApeZ7lONokFSLk2oMo5kfbEFEX2dO3NCgiST+Iy
Uu3q+LqPVNlmAV3XgfBOrDvfmi4m1+O3AqDKH/ZDQd04QVUIqRP32z2kCaYPzYCR
fZlpWtnok0zbrqU/m3njIyLtYmAwPOGO
-----END CERTIFICATE-----
Generated at Wed Oct 22 17:05:28 2025 by rpki-client