Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
File:                     wVykEPC8_6LEyIu2QkHBtuBZb-k.mft (raw, json)
Hash identifier:          H4/m7/jbYzuZ1IeW/+b0lG/KMD4Wd/D3Hr1GdRU0ScY=
Subject key identifier:   64:26:5E:AF:38:B3:C7:58:BD:15:87:B1:E9:B8:81:6B:0A:58:FE:78
Authority key identifier: C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
Certificate issuer:       /CN=A91906A1/serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
Certificate serial:       0692
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
Manifest number:          068D
Signing time:             Tue 04 Nov 2025 22:28:54 +0000
Manifest this update:     Tue 04 Nov 2025 22:28:54 +0000
Manifest next update:     Tue 11 Nov 2025 22:28:54 +0000
Files and hashes:         1: wVykEPC8_6LEyIu2QkHBtuBZb-k.crl (hash: UjVPDGVKfC6ermfkKMppWoHV/vQr8rkZ50mn4SDaGng=)
                          2: 7217203E913011EBB9AC2466C4F9AE02.roa (hash: 9X8KEG2hSV9r9XPS13ZYPYCE+3lUg9P7WgD5IkX+DUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl
                          rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91906A1, serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
        Validity
            Not Before: Nov  4 22:28:54 2025 GMT
            Not After : Nov 11 22:28:54 2025 GMT
        Subject: CN=690a7e26-f64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:9e:66:83:56:42:f0:11:77:90:69:e5:12:
                    ac:dd:8a:19:8a:08:2b:c6:fc:a3:f1:b0:af:ca:fb:
                    b0:3b:67:59:9b:5d:d6:a5:b0:fd:01:46:65:16:44:
                    58:f1:fa:20:78:5e:be:66:7f:08:fa:09:2e:33:58:
                    aa:5c:8b:5f:5c:2a:ed:ff:2c:0a:cb:b0:00:af:b8:
                    b2:09:e2:a6:6b:7d:6c:76:ed:19:df:56:da:13:cf:
                    74:83:c3:f9:e6:fc:38:80:9e:30:32:93:dd:9f:7c:
                    1c:93:06:10:8f:c7:21:e2:80:86:0f:11:aa:df:f2:
                    aa:4f:dd:7b:a9:4e:3b:8e:88:71:26:6c:a9:19:2b:
                    c8:96:52:93:9d:3c:f3:1a:63:7a:6a:5d:f4:92:af:
                    4a:e4:0d:37:b1:98:8a:d6:98:6f:de:d2:6c:27:32:
                    5e:5c:4e:56:83:66:3c:a4:43:d4:af:6f:25:d7:79:
                    fe:2b:be:f8:85:31:71:d7:92:85:71:35:24:6d:e9:
                    dd:45:ab:4c:00:39:ca:e2:4d:c0:0b:4e:f3:56:64:
                    49:82:25:0d:a3:c7:ca:ba:98:0c:47:17:bf:53:e8:
                    1b:f6:82:1b:d7:b9:de:0e:ea:0f:6d:75:fe:3b:7c:
                    f7:8f:e8:1e:fe:2d:fc:48:ea:65:81:41:d3:d1:21:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:5E:AF:38:B3:C7:58:BD:15:87:B1:E9:B8:81:6B:0A:58:FE:78
            X509v3 Authority Key Identifier:
                keyid:C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:76:77:31:05:8c:ff:fb:ac:00:a4:54:a6:e8:bc:b6:ba:
         8d:c2:98:43:f2:b9:2a:29:b8:e3:2d:20:e3:6b:8e:d8:0c:95:
         8c:24:47:3d:2e:61:1a:f2:a7:c0:7f:78:0b:93:b4:83:8c:76:
         1d:cf:95:b5:b9:bd:49:36:67:8f:d8:3d:1f:25:7c:9a:8a:a9:
         3a:11:6c:a8:6a:c6:f4:07:3e:4e:d3:6b:13:cd:4a:56:45:85:
         5a:ca:4c:86:d8:9e:4a:e2:e3:36:ad:5d:82:7b:9f:73:04:10:
         5a:50:21:8f:c5:fb:d0:bd:1c:6e:f8:f2:f1:2d:a1:4f:e0:13:
         24:36:da:8c:28:b5:ef:18:e6:eb:aa:1f:e8:c1:7a:40:3e:aa:
         09:a8:6d:e6:11:c3:32:ed:60:a2:26:0b:d7:61:55:bf:77:2f:
         f9:47:34:8c:2b:9b:23:da:f4:dd:0d:b2:71:6c:3f:86:1b:94:
         b9:2f:2c:f2:72:4f:c5:7a:78:10:a1:a3:62:2d:95:ee:1d:3c:
         07:f2:c9:bf:8e:25:5c:1d:44:50:5e:a1:9a:0a:af:cd:35:23:
         11:b1:0d:53:fe:36:a9:cb:8d:17:8d:49:8f:41:61:f9:c4:a6:
         5f:79:f4:fe:25:4b:8e:af:74:a9:f7:2c:4e:bc:77:f3:c8:49:
         44:a1:c9:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA2QTExMTAvBgNVBAUTKEMxNUNBNDEwRjBCQ0ZGQTJDNEM4OEJCNjQyNDFDMUI2
RTA1OTZGRTkwHhcNMjUxMTA0MjIyODU0WhcNMjUxMTExMjIyODU0WjAYMRYwFAYD
VQQDEw02OTBhN2UyNi1mNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvryeZoNWQvARd5Bp5RKs3YoZiggrxvyj8bCvyvuwO2dZm13WpbD9AUZlFkRY
8fogeF6+Zn8I+gkuM1iqXItfXCrt/ywKy7AAr7iyCeKma31sdu0Z31baE890g8P5
5vw4gJ4wMpPdn3wckwYQj8ch4oCGDxGq3/KqT917qU47johxJmypGSvIllKTnTzz
GmN6al30kq9K5A03sZiK1phv3tJsJzJeXE5Wg2Y8pEPUr28l13n+K774hTFx15KF
cTUkbendRatMADnK4k3AC07zVmRJgiUNo8fKupgMRxe/U+gb9oIb17neDuoPbXX+
O3z3j+ge/i38SOplgUHT0SEseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQmXq84
s8dYvRWHsem4gWsKWP54MB8GA1UdIwQYMBaAFMFcpBDwvP+ixMiLtkJBwbbgWW/p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDZBMS9EOTdFMTI2ODkw
NjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82TEV5SXUyUWtIQnR1Qlpi
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dWeWtFUEM4XzZMRXlJdTJRa0hCdHVCWmItay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDZBMS9EOTdFMTI2ODkwNjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82
TEV5SXUyUWtIQnR1QlpiLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX03Z3MQWM//usAKRUpui8trqNwphD8rkqKbjjLSDja47YDJWMJEc9
LmEa8qfAf3gLk7SDjHYdz5W1ub1JNmeP2D0fJXyaiqk6EWyoasb0Bz5O02sTzUpW
RYVaykyG2J5K4uM2rV2Ce59zBBBaUCGPxfvQvRxu+PLxLaFP4BMkNtqMKLXvGObr
qh/owXpAPqoJqG3mEcMy7WCiJgvXYVW/dy/5RzSMK5sj2vTdDbJxbD+GG5S5Lyzy
ck/FengQoaNiLZXuHTwH8sm/jiVcHURQXqGaCq/NNSMRsQ1T/japy40XjUmPQWH5
xKZfefT+JUuOr3Sp9yxOvHfzyElEocny
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:25 2025 by rpki-client