Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          TxuNoyXthy2Cja8XC8s5gaHx7h41CpZZk6dLarUjU+k=
Subject key identifier:   FB:2A:4F:47:F4:D3:86:03:54:12:68:97:FC:E1:AC:49:F7:EB:3B:8E
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          F4
Signing time:             Wed 17 Sep 2025 05:49:24 +0000
Manifest this update:     Wed 17 Sep 2025 05:49:23 +0000
Manifest next update:     Wed 24 Sep 2025 05:49:23 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: iKlySkIbO88z5EfuaQ5UH5IvNhuQ7Qwe+eJMudIqAA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 05:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Sep 17 05:49:23 2025 GMT
            Not After : Sep 24 05:49:23 2025 GMT
        Subject: CN=68ca4be3-8bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:ae:ed:aa:5c:ed:a5:70:03:33:3c:28:01:
                    07:e4:0d:3c:55:19:16:0e:3c:1a:90:fe:ae:43:8e:
                    b1:f3:3f:12:68:1d:2c:13:bd:49:38:e4:cc:be:14:
                    33:7f:d6:58:32:d6:54:00:ac:96:85:68:17:c1:80:
                    ad:e4:05:52:80:88:6c:38:7d:3b:9f:dd:d5:49:3d:
                    80:bd:8f:a9:00:58:7b:41:62:ac:02:bb:c3:44:c3:
                    8d:83:70:3b:b9:7c:73:24:9b:b1:bc:53:63:e8:73:
                    cd:46:e2:46:69:b3:69:04:e9:91:b8:3c:7b:72:7a:
                    82:3d:e3:02:79:cb:89:22:d4:79:c0:aa:50:d0:6f:
                    6b:c6:bf:2e:ce:0b:9b:d9:79:06:a8:09:ea:00:b7:
                    f1:64:04:28:bb:e6:18:3e:2f:5f:08:3a:04:c2:eb:
                    47:b1:75:31:12:33:ef:8d:a4:d6:3d:84:bc:7e:83:
                    ab:b8:78:c1:6d:55:7a:10:17:8f:62:2f:82:3b:04:
                    f8:25:63:04:49:af:39:e8:d2:5a:19:3c:ef:f1:c3:
                    f9:fa:a7:ce:be:2a:99:24:8d:3e:75:6f:ff:49:8c:
                    7e:39:cb:47:d5:ae:a3:b7:2f:58:f0:32:36:28:4d:
                    24:2f:da:70:70:d8:85:48:0c:99:4a:ed:0b:89:16:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2A:4F:47:F4:D3:86:03:54:12:68:97:FC:E1:AC:49:F7:EB:3B:8E
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0f:1c:b2:08:87:71:88:54:59:d0:4c:b8:5d:00:2e:24:0e:
         73:83:1e:61:a5:15:4c:87:e7:84:77:e7:8c:de:74:12:c1:3e:
         4b:c0:4e:a0:2a:a8:e2:2a:07:6a:62:98:f3:93:56:6d:5a:bc:
         28:85:7b:a6:43:05:b0:e8:25:6a:fc:c1:8f:18:07:d6:72:fb:
         32:be:94:07:1c:ae:52:5e:ee:f8:d6:05:00:4c:3c:d2:3d:95:
         84:8b:87:79:14:af:1b:87:19:0d:28:0c:9c:e6:81:c1:d3:45:
         a9:cc:9c:7d:47:4e:f6:5e:09:ed:b1:25:13:81:16:f8:92:f8:
         eb:8f:06:7d:ed:af:58:bf:3e:41:69:61:a4:23:82:f6:b7:44:
         f2:20:fd:e2:d1:92:40:7a:04:b0:4c:7a:6a:26:94:eb:c9:d5:
         79:78:a4:69:40:2b:49:90:e6:ed:db:d0:22:8a:b7:c1:74:c5:
         af:3e:f7:c7:da:9d:4e:e5:e1:00:fa:f2:ad:ba:84:c0:4b:46:
         31:51:a9:4c:f1:9d:e8:29:e4:4e:c3:88:69:77:b1:97:da:99:
         ff:02:2d:b7:e0:59:5f:8a:67:c9:5c:8f:68:fd:df:7c:60:a6:
         91:5b:db:19:c8:30:89:5f:40:f2:54:2f:04:87:e6:8c:3b:c5:
         81:c0:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:45:44 2025 by rpki-client