Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          vLf1m3XC7VssfGIunhvY7ltPvUDLEDrub/HZL2fsm4g=
Subject key identifier:   47:8A:FC:4C:85:68:AA:17:E9:16:3A:03:C0:33:48:56:13:B2:52:54
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          01BF
Signing time:             Thu 23 Oct 2025 04:56:36 +0000
Manifest this update:     Thu 23 Oct 2025 04:56:35 +0000
Manifest next update:     Thu 30 Oct 2025 04:56:35 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: t8DuwL9L7VHZJ1zDTzg8VLsQJZKR9MWhPPncqXYG94c=)
                          2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=)
                          3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: kcHTFnzLikXn0NjPuVY7G48i03xbByG7UkZ4K1tljPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 04:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Oct 23 04:56:35 2025 GMT
            Not After : Oct 30 04:56:35 2025 GMT
        Subject: CN=68f9b584-3857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:f1:a1:0d:11:3e:5b:ed:de:cc:70:ab:c5:
                    77:2f:c1:cf:27:15:bc:c9:25:fd:1c:f2:e4:62:e9:
                    db:8e:96:71:07:43:a9:24:61:14:99:db:92:a6:3e:
                    95:67:a0:d8:0e:b1:63:1c:11:9d:0f:61:8a:58:0f:
                    22:7e:11:4a:1d:83:dc:94:23:32:d4:5d:77:1b:d6:
                    00:6e:ca:1b:6e:f8:5e:bf:c5:90:fc:d4:16:13:fe:
                    ac:bb:6f:e9:ed:bd:ee:d1:0a:23:aa:b6:96:fb:13:
                    41:af:ed:f3:36:04:26:b0:a0:0a:96:37:1f:8d:56:
                    f4:b4:3d:dc:95:68:c2:94:1a:ca:59:be:f1:57:7e:
                    6d:a4:56:82:28:c4:c3:dd:86:b9:63:d9:6b:04:8b:
                    a5:2f:fb:b0:1c:f6:85:a5:cc:bd:0f:8d:7a:7d:2a:
                    a7:5b:9d:05:db:98:c1:8d:11:ca:e6:85:ef:e1:29:
                    5c:b2:0f:2c:87:ba:8f:e5:ea:5a:41:d6:a0:9c:1e:
                    aa:64:6a:bc:db:6c:f1:fa:94:de:6c:e8:52:eb:1e:
                    87:5f:9c:21:97:69:26:76:52:22:12:5b:36:c0:fb:
                    e9:ca:82:fc:46:cb:9b:30:a0:34:94:16:2d:90:08:
                    d4:4f:49:c2:18:81:98:db:d4:aa:99:b9:bd:d3:cb:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:FC:4C:85:68:AA:17:E9:16:3A:03:C0:33:48:56:13:B2:52:54
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d0:e4:d8:68:e8:a5:c9:eb:9d:a1:c8:e4:1d:6e:ec:51:b7:
         90:4e:17:4a:31:98:50:51:b7:69:d0:0b:33:25:e2:84:f2:4b:
         69:13:69:f9:13:91:31:9f:ea:08:a6:da:e5:97:a6:99:b8:56:
         40:ee:ed:48:3f:cb:e4:24:6c:0d:7b:a9:68:c7:c9:6a:13:48:
         ed:8d:ac:e2:5a:8a:cf:0a:1b:be:69:74:59:0a:26:5c:16:62:
         61:c0:35:1d:5a:01:e1:57:28:ea:87:ff:33:8b:1f:35:2c:39:
         48:3a:53:df:71:59:6a:2a:ae:b8:86:e8:9a:16:2f:41:b5:2b:
         89:d5:4a:a1:97:7b:88:f6:de:e6:9e:95:80:12:5f:0c:81:ac:
         20:ca:fd:c1:d2:17:d3:76:72:f0:38:37:d1:c1:9a:97:a9:27:
         2c:e0:2c:ef:d2:e3:6c:f3:78:e5:eb:f7:49:f6:82:21:89:7f:
         31:44:27:ae:51:6b:c9:9a:68:cf:c4:34:86:f2:67:c7:4c:c9:
         ed:ea:5e:c9:43:78:1b:70:03:41:6a:b7:75:ec:20:4b:73:be:
         23:62:9c:a5:77:22:a3:e1:87:5a:b4:3f:d9:dd:ac:e6:42:c0:
         21:e2:db:02:ac:f8:1f:61:ec:c0:a1:92:74:87:33:11:f2:aa:
         fb:e5:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:47:07 2025 by rpki-client