Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
File:                     W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json)
Hash identifier:          2fBGN4GzBqLkNAIGug+nGWWg3tsBUPtCDMbTCrzEwQk=
Subject key identifier:   F5:67:D1:E5:77:BA:54:71:91:31:09:EC:A4:EB:C6:96:84:D6:37:FB
Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23
Certificate issuer:       /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
Certificate serial:       0C1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
Manifest number:          0C16
Signing time:             Tue 04 Nov 2025 18:52:13 +0000
Manifest this update:     Tue 04 Nov 2025 18:52:13 +0000
Manifest next update:     Tue 11 Nov 2025 18:52:13 +0000
Files and hashes:         1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: RRLkjpEGDfeO4C9Cl3Gj3Glv/+QixrkJiQQsdzphKu0=)
                          2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: LKiowhMkXMq5qf1lyBz6FA1D1I55qwfvYCjP01R78bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl
                          rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BF70, serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
        Validity
            Not Before: Nov  4 18:52:13 2025 GMT
            Not After : Nov 11 18:52:13 2025 GMT
        Subject: CN=690a4b5d-bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:e9:5f:f2:45:5c:2b:9a:b3:0d:e0:1b:70:
                    ac:94:29:4e:53:4d:7c:ed:68:ad:b3:57:f0:0e:d0:
                    39:da:06:73:7e:d5:6b:50:e7:dd:fe:cf:65:a9:6a:
                    85:76:f5:37:de:ee:e8:ec:96:ff:7f:75:7c:0f:ce:
                    72:af:78:1c:fc:5b:47:86:8b:e4:45:48:28:ac:14:
                    d2:a6:dd:8e:2f:d9:f3:82:85:89:0f:1a:55:5b:fc:
                    06:89:a9:84:e4:9b:6d:d5:30:38:8d:1e:be:bd:66:
                    f4:65:ae:96:04:94:e9:f1:a4:00:f8:d5:ed:cf:a7:
                    3f:57:fe:33:ee:4b:5f:33:2d:61:30:4d:35:fe:53:
                    36:95:31:bc:79:0c:fe:0b:08:e5:6b:8e:b0:d8:31:
                    52:b2:19:d3:d8:d7:d7:4d:22:e5:6f:25:59:a6:34:
                    5c:f8:64:b8:50:60:38:6d:14:60:55:72:a3:c7:ea:
                    23:90:a4:12:81:9c:8e:44:b1:de:1b:92:22:65:93:
                    0a:a1:2b:cb:e5:b8:84:dc:ce:aa:b3:ef:64:7c:c6:
                    3f:57:a9:93:bf:ba:75:3b:81:37:45:c8:87:dc:7e:
                    66:ba:43:f9:ff:e6:c0:69:d4:7b:a5:98:14:77:41:
                    4b:f0:aa:15:e0:68:f0:39:26:80:81:c7:07:6a:d6:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:D1:E5:77:BA:54:71:91:31:09:EC:A4:EB:C6:96:84:D6:37:FB
            X509v3 Authority Key Identifier:
                keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:61:eb:5f:3e:b9:bb:09:f6:49:88:8c:ac:29:95:8a:4b:7d:
         c2:a6:cb:16:cd:da:3e:22:9c:f6:f9:bb:86:b0:6c:f2:b0:33:
         65:a6:16:8f:95:4d:d0:7e:2e:4a:1a:7d:f6:a8:83:07:2b:7f:
         92:47:0d:e0:b4:ce:d0:8b:97:91:b6:5a:78:cf:fa:c9:9e:c5:
         e5:66:b3:6a:32:79:1e:3f:6a:89:3d:1d:9f:43:13:f0:11:0c:
         6a:d2:f0:78:2b:87:b1:df:a0:7f:aa:fa:f1:13:8f:eb:1f:56:
         c4:40:78:28:d1:b0:0e:d5:7d:11:04:15:17:bd:65:94:a8:56:
         25:b4:b2:a5:94:a2:5a:d7:43:ab:ed:79:72:28:e8:8d:3d:00:
         57:bf:a1:bb:d8:19:65:c0:73:66:87:5a:85:5d:39:ac:7c:2a:
         1b:73:9e:10:10:29:cd:fb:39:d3:f8:2b:60:e3:30:c5:64:a8:
         a2:a8:44:26:d0:c8:c4:2f:94:14:5b:a9:a6:07:f9:f9:9b:36:
         7b:86:20:33:49:68:c1:ea:49:b8:6e:2c:fc:5b:74:eb:b4:50:
         5e:fc:8a:06:7b:70:48:b8:e2:63:fc:d7:5f:51:77:6a:1c:1d:
         91:81:7e:15:56:d8:23:bf:cf:b4:85:4d:62:c7:28:a2:6b:c6:
         ff:b1:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:48 2025 by rpki-client