Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          r9BCTZ7oDtR7ADF9hb9Ps8jYGtUhbj7f7SwoOrQzXHk=
Subject key identifier:   7C:FC:FA:B6:2B:01:E0:07:86:0E:E2:C9:33:03:AD:BA:61:17:1B:35
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1248
Signing time:             Thu 04 Sep 2025 17:19:54 +0000
Manifest this update:     Thu 04 Sep 2025 17:19:54 +0000
Manifest next update:     Thu 11 Sep 2025 17:19:54 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: z/ND/kzmeWWAmqhNnEvm89DaXlD9UVPWHIdJwnpufQY=)
                          2: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          3: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: es46bP4peX2odqPFusPLnzVYq4GkhaY4WJQy30cV3Cc=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: JTvl8U3RWCnUN10nfObiok3Mo+lFaXJW18PZyesoW7g=)
                          11: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: YrBzsx8D0fOvnrE97Y0I7HnqAFhQ8Lr/bVnUo+wscZA=)
                          12: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          13: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          14: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 17:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4953 (0x1359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Sep  4 17:19:54 2025 GMT
            Not After : Sep 11 17:19:54 2025 GMT
        Subject: CN=68b9ca3a-76aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:9f:0d:44:d8:63:24:ca:36:48:ee:a9:64:
                    03:4d:c4:89:a9:0e:d1:a3:17:c0:7c:39:a2:6d:69:
                    e1:a4:80:db:39:99:e4:70:80:ab:42:7e:73:4a:48:
                    b1:51:2f:a0:62:f6:11:91:9c:49:f1:0c:91:af:70:
                    39:e7:fe:3a:c0:b2:48:c4:4c:8a:ce:46:86:a6:1c:
                    97:ed:1b:c2:2e:94:8c:6d:f4:75:a0:9a:ed:ca:a2:
                    88:08:e0:da:4f:af:85:a6:df:f1:74:59:18:27:32:
                    37:1d:b3:31:c5:07:33:b9:9b:34:e1:75:44:95:d6:
                    fc:42:c0:94:82:e2:57:5d:71:26:f3:d4:40:5e:f3:
                    07:54:95:cf:02:b4:08:81:ad:27:80:01:c9:22:61:
                    a1:dd:a9:71:91:c3:23:2c:ce:69:dd:6b:90:1a:8e:
                    a0:e7:89:70:11:89:c5:70:b0:a4:cb:6f:d8:41:a9:
                    74:e4:a8:53:04:be:18:1c:1a:00:cc:0b:0a:67:27:
                    39:df:d3:32:9c:9c:fd:42:03:4a:ca:ed:c6:84:48:
                    20:ea:65:9b:da:28:4e:1f:bf:1a:f8:eb:d6:5e:c4:
                    58:8e:83:7a:63:5d:b5:61:03:49:07:07:68:58:4b:
                    59:d7:d8:86:97:39:81:f3:00:a5:dc:3f:a6:75:ae:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FC:FA:B6:2B:01:E0:07:86:0E:E2:C9:33:03:AD:BA:61:17:1B:35
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:c4:1e:d8:5f:23:56:1b:2f:7b:1a:e0:37:5f:10:b3:77:
         02:0c:49:8f:44:90:79:b9:6b:88:7c:de:56:07:34:52:91:1d:
         e3:c1:e2:13:ee:76:89:ae:92:58:9c:9b:c9:d3:e4:07:a1:7e:
         19:25:33:43:66:40:d3:01:9d:6d:80:1e:0f:be:1b:e1:48:1a:
         16:88:49:2b:eb:01:40:52:db:3a:f6:59:53:a8:a1:80:1a:b4:
         ce:5d:79:da:5f:d5:16:33:cb:3a:d9:b9:83:bd:55:fd:49:72:
         1d:a0:0c:52:ca:86:50:19:42:01:5b:db:34:cb:db:3c:4f:e0:
         65:57:a0:f7:23:8e:1c:b6:b5:26:3d:39:2c:6e:e8:cf:59:73:
         f5:70:ab:f4:38:ac:0e:50:39:50:80:8c:67:fa:51:b6:b7:30:
         2e:7e:7a:6a:83:c9:f5:86:24:57:21:02:4a:9d:31:20:1d:f9:
         f2:0f:03:48:19:f4:96:60:ac:a9:21:9a:47:59:d8:f6:66:fb:
         62:26:f0:48:62:2c:e7:c9:49:09:c5:2b:4f:ef:8e:48:98:e8:
         b2:9b:a4:20:20:38:34:8d:66:ca:37:96:e1:33:62:bb:89:0d:
         9e:dc:fc:d5:10:c9:0e:75:fe:4c:58:1c:a7:08:87:9f:45:b5:
         20:78:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:12 2025 by rpki-client