Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
File:                     wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json)
Hash identifier:          dA5n5fauvqHZEDKy9EijqbJATpmri+eoO+worcvm5R8=
Subject key identifier:   E2:3C:6E:63:6C:69:6F:10:F4:7F:28:20:F3:79:79:C5:1F:E6:4B:15
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Certificate issuer:       /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial:       0604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
Manifest number:          05F0
Signing time:             Sun 02 Nov 2025 22:58:14 +0000
Manifest this update:     Sun 02 Nov 2025 22:58:13 +0000
Manifest next update:     Sun 09 Nov 2025 22:58:13 +0000
Files and hashes:         1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: QIzQBWKGWr9r/vVc96a5VR7DPVPF12uS2pNJIupPTJk=)
                          2: 1E75BFFA062311F084ABB51CC4F9AE02.roa (hash: K4YGCSLFayJYz0LYC876U0yxoD0NhBi/vRr7YCGJEZY=)
                          3: B95648BA062211F09E5D020EC4F9AE02.roa (hash: tQCXioRQJidNJqp0A7ZKqy48ZP3UvrqPeNbQhZXkPH0=)
                          4: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: 5cUeQX8aWmX9t5XpnUuO5ZCx3d0YwFQhU0FaZHJ8gp8=)
                          5: 96033290E15611EC9E14513DC4F9AE02.roa (hash: xormKkS6IMDdpKdH1Ny6qHrshE543pX8LQBYxdK1HpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
                          rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
        Validity
            Not Before: Nov  2 22:58:13 2025 GMT
            Not After : Nov  9 22:58:13 2025 GMT
        Subject: CN=6907e205-fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:ac:49:2f:91:66:36:6f:d1:c5:e9:ea:75:
                    b3:6c:83:ab:90:86:61:1c:26:06:13:78:54:ba:ce:
                    71:ad:82:d0:3f:63:33:9f:e0:85:bd:9b:ce:4f:a8:
                    ed:1e:79:3d:8b:51:62:1e:27:5f:16:1a:44:e2:64:
                    d0:21:6a:cf:a2:84:ac:1a:c0:32:33:83:26:fb:b8:
                    4a:2f:e1:e9:08:50:a9:68:15:15:0a:06:36:c5:72:
                    72:aa:78:24:96:32:82:d6:27:f6:51:4c:ca:1f:65:
                    13:b3:30:f6:78:ea:03:96:6a:90:ef:be:23:a8:80:
                    8a:89:62:3b:d6:f5:12:4a:75:14:ba:8a:69:f2:db:
                    a4:21:ae:b5:b3:ef:93:b8:c4:1e:7e:ad:42:21:ce:
                    ef:cd:23:f5:41:ac:0b:fc:ca:bc:3e:85:3a:0a:40:
                    dc:6b:eb:c5:91:4e:46:23:53:60:3f:67:11:8b:6a:
                    2e:77:ad:3e:ff:39:cc:f8:f6:39:8b:9c:d0:10:a7:
                    04:1b:ff:60:41:1b:53:9d:5b:dc:92:4e:6a:c3:62:
                    b5:24:3e:73:af:fd:66:b4:a1:d7:a1:14:ac:74:dd:
                    de:b9:9a:36:03:1b:db:f0:64:7a:4b:0d:09:47:27:
                    fa:b1:e9:12:0a:fc:59:a7:80:bf:c5:2c:93:33:04:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:6E:63:6C:69:6F:10:F4:7F:28:20:F3:79:79:C5:1F:E6:4B:15
            X509v3 Authority Key Identifier:
                keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:9f:88:11:c6:23:99:fa:99:38:c4:1f:15:02:0f:82:74:
         7d:c9:9c:ee:8d:ac:26:bf:38:83:b2:00:44:4a:8b:39:8c:39:
         0d:e4:67:ef:25:34:c2:3a:dd:25:0b:3b:2f:85:d2:67:f9:f8:
         b3:04:fc:bf:4e:b2:3b:32:27:eb:88:01:3f:e6:fa:c7:a8:dd:
         26:05:7d:41:8b:59:45:22:6b:f0:03:ac:ed:c7:9b:96:cc:ea:
         6d:74:3b:2c:63:e9:d4:c7:fc:54:99:f4:83:e3:46:39:05:c5:
         a1:5a:68:37:33:88:98:8a:b6:a3:aa:20:52:c0:72:9b:b9:3b:
         d0:77:2c:d6:41:ea:98:48:ab:b7:66:47:1c:1e:72:9a:84:e8:
         d7:e6:f3:08:cc:3b:d8:0d:22:d3:56:10:50:06:60:8f:74:fc:
         ec:60:98:c4:a8:be:d0:18:a2:b8:e7:a7:09:17:11:53:83:1d:
         27:53:d4:38:99:74:bb:d7:90:46:00:34:54:28:50:96:5f:3c:
         c6:45:c4:ee:ac:6e:88:7f:e6:83:78:0d:74:41:b4:72:a3:67:
         b5:f1:bc:3d:85:22:cc:27:73:66:3a:96:85:4c:0a:04:07:8d:
         96:fe:94:9d:02:3a:0c:5e:c3:e4:79:db:fe:0e:c2:82:83:8e:
         3e:02:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:28 2025 by rpki-client