Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
File:                     wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json)
Hash identifier:          F+6HCW55OFPuy6j4ls++mAms/xNDpnswxZqe/sTFGKE=
Subject key identifier:   67:1F:D4:73:FE:21:A3:B4:68:B4:77:63:05:07:78:50:46:FC:AB:C9
Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
Certificate issuer:       /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
Manifest number:          0135
Signing time:             Mon 03 Nov 2025 04:42:58 +0000
Manifest this update:     Mon 03 Nov 2025 04:42:57 +0000
Manifest next update:     Mon 10 Nov 2025 04:42:57 +0000
Files and hashes:         1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: PFM9zo+6x9E6nlqv35i2Otmtd5Hk+WQtCV5YRqPj9FM=)
                          2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
        Validity
            Not Before: Nov  3 04:42:57 2025 GMT
            Not After : Nov 10 04:42:57 2025 GMT
        Subject: CN=690832d2-c711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:1d:d4:76:5a:81:f7:d1:b4:c9:cc:79:70:
                    10:f3:bc:d4:9c:13:31:b2:fc:f6:71:4c:3d:ce:75:
                    3d:ed:39:c2:9d:cb:3f:e8:47:af:7c:3a:fa:48:83:
                    98:75:6a:32:bb:ab:35:c6:b3:1a:2f:65:b5:d2:4d:
                    e8:5d:97:d5:83:70:a1:6d:c3:ea:f7:36:15:d6:38:
                    75:18:35:aa:46:34:8b:b2:28:2c:1b:09:ba:98:65:
                    31:1f:fe:a8:00:6b:05:7c:4e:9e:c2:99:fb:7f:35:
                    8d:c5:a2:0e:11:a1:93:54:ed:27:70:a6:ec:37:bb:
                    59:80:d7:6c:0c:7b:b3:a7:3c:9b:c6:9f:ad:67:38:
                    b2:35:d7:98:ca:89:52:1a:0e:f1:9b:46:a4:cd:20:
                    7d:cb:b4:e2:36:4a:8c:7f:1f:d5:8a:d4:2f:98:d2:
                    92:0e:8c:e1:3d:91:9c:cb:df:64:05:4f:b3:fd:f2:
                    52:00:aa:15:c5:6e:c2:d2:cc:af:98:dc:fd:49:a3:
                    2a:77:db:fe:55:1a:dd:ad:fe:cc:41:d0:1f:36:e2:
                    b5:2b:41:a3:34:3a:ab:a5:0b:33:9b:a8:f1:a0:9d:
                    53:5a:2a:15:8b:1e:c2:36:ea:7f:01:88:8b:da:1e:
                    49:bf:65:17:fb:b1:7b:22:53:fc:87:2d:9a:86:3d:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:D4:73:FE:21:A3:B4:68:B4:77:63:05:07:78:50:46:FC:AB:C9
            X509v3 Authority Key Identifier:
                keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:88:0a:5c:ed:9b:5d:c9:34:5c:2d:93:16:6b:2d:17:cc:
         5b:d5:50:bf:60:ca:a2:9d:8f:4f:bd:aa:09:ee:73:9b:1e:7c:
         21:8d:53:34:72:1d:36:0e:a6:4c:92:6a:98:b7:a4:b0:f1:56:
         86:5d:5c:3b:de:8e:88:27:cd:c1:c8:d6:08:df:7c:01:a4:71:
         e7:c9:81:15:f6:08:02:81:5c:99:e3:f8:03:fd:87:ce:76:9e:
         3b:e3:59:79:af:7a:e7:d4:5e:77:62:48:db:10:3e:6a:1f:43:
         df:3b:2e:ed:b8:8c:b3:8d:42:1e:a4:e1:12:43:56:1c:78:bf:
         da:8d:1a:99:67:cc:a1:df:47:49:d6:54:c9:7c:cc:d2:79:d8:
         7b:5e:0e:62:c7:9b:b3:8d:8d:ca:7c:db:10:31:26:cc:9f:0a:
         7a:54:47:0b:59:b1:b8:93:74:e2:06:a8:b4:2a:08:a1:69:56:
         52:92:32:c0:9e:c5:d8:8b:ab:07:75:91:29:a7:34:05:af:c3:
         4d:42:ec:2a:92:58:90:51:6b:15:f9:5a:c7:61:d4:0a:b1:16:
         fa:77:17:62:d8:2b:2f:8d:0a:fc:da:63:99:59:a9:2a:21:be:
         6a:f2:c9:d1:ae:c4:fa:63:69:a5:44:e6:2e:4e:8f:63:3f:d3:
         c7:a0:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:30 2025 by rpki-client