Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File:                     _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier:          b9jqIH6XClX/oKjGVnZoKdinzpmURUS3uO2I5Ms0Byk=
Subject key identifier:   EC:A8:7D:C1:98:40:05:47:AF:C7:96:D5:5D:60:6C:D0:D1:12:1A:5F
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer:       /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial:       0B4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number:          0B48
Signing time:             Thu 18 Sep 2025 19:21:39 +0000
Manifest this update:     Thu 18 Sep 2025 19:21:39 +0000
Manifest next update:     Thu 25 Sep 2025 19:21:39 +0000
Files and hashes:         1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: t85O8J1spbQiL8Rdg81bp3zsQGERYIJolAXjPBQCRUQ=)
                          2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: O+1TVwNVO9fy4asd+g6mFvUYSSGMZxyCsanhKoUd1UE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
                          rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
        Validity
            Not Before: Sep 18 19:21:39 2025 GMT
            Not After : Sep 25 19:21:39 2025 GMT
        Subject: CN=68cc5bc3-d39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:e7:60:e0:94:80:ea:09:39:89:cf:21:8f:
                    e8:ce:2b:70:2f:ff:f6:21:a7:ca:54:c0:e1:91:0a:
                    ea:41:7f:90:52:28:03:1c:4f:8e:a2:38:2c:e7:7d:
                    c1:32:72:f8:72:8f:69:36:12:cf:58:95:07:b7:01:
                    41:61:b0:ad:ae:0e:2b:79:5f:03:1e:ab:5f:e9:d1:
                    cf:55:d5:fd:b4:93:50:9a:33:75:a5:da:06:d5:48:
                    3e:e9:5b:80:60:34:ed:f5:ab:58:81:3b:b6:1e:f2:
                    d9:a5:d0:44:f5:18:4a:5c:c0:3b:f3:3f:3b:5f:55:
                    6a:f0:10:3a:e4:ff:5f:71:87:3b:5a:39:3f:84:00:
                    80:01:0a:b1:aa:c0:65:3b:b0:b3:b8:99:4f:53:02:
                    4a:c4:68:92:00:0b:b0:c6:c1:94:e0:2d:3a:50:6d:
                    86:c3:8c:d0:05:9a:fe:b0:be:89:01:eb:71:9c:21:
                    37:47:74:b6:e5:f5:e2:ce:97:7f:45:48:d2:ec:b1:
                    96:3f:aa:eb:f3:9a:0b:ce:6b:dd:fa:ba:d8:be:2c:
                    05:ad:65:13:86:43:ce:fe:8f:68:de:04:31:fe:3f:
                    c4:ab:68:d0:0b:b7:77:d9:31:e9:5b:40:cd:94:9b:
                    20:50:75:8c:46:10:5b:84:71:e8:b4:eb:68:f4:77:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:7D:C1:98:40:05:47:AF:C7:96:D5:5D:60:6C:D0:D1:12:1A:5F
            X509v3 Authority Key Identifier:
                keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:f0:86:fc:0e:01:1a:09:b0:cb:2e:27:ab:96:97:19:77:
         5b:55:09:93:7a:6a:5e:46:ce:13:27:05:8c:1b:38:18:15:06:
         f7:22:b7:9d:86:f1:ca:dd:ae:01:bc:67:44:88:ee:31:a6:bd:
         25:7d:80:35:dc:3f:d4:e4:c5:c0:52:bc:da:2c:25:ba:89:50:
         91:1f:09:0b:34:d7:5c:7f:6a:74:54:03:a4:4e:25:e1:1b:14:
         b0:c2:6b:fa:ed:3f:d8:c6:73:69:91:69:df:a6:f7:81:04:89:
         f3:27:c1:dd:0a:38:a2:74:fe:6a:bf:83:99:f5:43:c2:12:6c:
         02:82:56:5b:ca:3a:4d:71:de:4b:a3:32:74:bc:27:d1:9a:36:
         ed:24:41:55:b5:14:3b:be:b6:3a:04:21:be:3c:1b:89:10:3f:
         f4:ed:86:bc:e7:d7:10:e6:6f:55:09:13:47:0c:68:8e:d4:28:
         91:cc:3d:47:6a:4d:a8:ec:e8:55:ad:49:fc:56:fa:4c:ba:78:
         a4:30:ba:26:85:00:d7:42:9c:31:8d:c9:40:a8:f2:04:1b:1f:
         09:18:bc:cf:9b:34:25:02:ac:d4:37:de:31:77:8f:0e:f6:2e:
         0b:58:63:cb:40:71:49:52:31:c4:0a:3f:da:b6:4b:98:f5:37:
         e9:ae:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:34:46 2025 by rpki-client