Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
File:                     wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json)
Hash identifier:          6aiAonjqJZ9ytWbiQp6UwlRTMj9US2AZSt+byqSnc3A=
Subject key identifier:   8A:4D:69:A0:CD:7F:A9:5C:E9:B3:49:4F:89:BF:E1:01:A4:B7:A4:03
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
Manifest number:          01CA
Signing time:             Mon 03 Nov 2025 02:53:22 +0000
Manifest this update:     Mon 03 Nov 2025 02:53:22 +0000
Manifest next update:     Mon 10 Nov 2025 02:53:22 +0000
Files and hashes:         1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: 21ztOBxZe4EqHH3a2oy2vFJAr1ZZaf+dYxRqpGuEtCE=)
                          2: 5490308C994111F0B9129240C4F9AE02.roa (hash: 7VZTIxZSQj/Rmne9/hQcwng+7WARdPxgfJp0d/1fXL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Nov  3 02:53:22 2025 GMT
            Not After : Nov 10 02:53:22 2025 GMT
        Subject: CN=69081922-ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:67:d7:4f:24:3f:4d:69:e6:65:6c:6a:d8:
                    dc:4c:0c:e6:12:3e:98:67:33:0c:f1:cf:b2:be:e7:
                    35:21:f1:97:f4:e5:17:86:49:b3:12:b6:30:74:ac:
                    58:f0:39:2e:ee:62:1b:1e:cd:e9:7c:35:9f:62:37:
                    c9:23:09:77:94:fa:87:42:b0:f4:25:1b:12:dd:f5:
                    5f:aa:7f:90:15:cd:5f:6d:00:70:15:40:f9:5e:28:
                    df:47:67:f9:73:68:0c:49:bf:da:eb:74:a6:aa:31:
                    c4:cb:f9:cc:80:a1:ff:f6:7a:9c:6a:34:5b:e9:9b:
                    5e:a7:bc:5d:82:3c:71:5e:83:9e:98:7a:b3:96:c8:
                    13:be:14:b7:33:57:67:a3:f1:66:06:87:2f:3f:00:
                    21:15:8b:e8:14:ec:35:96:97:3c:d0:3a:b4:3b:17:
                    50:e7:25:41:97:10:00:8f:8a:da:c6:38:a8:78:73:
                    6f:91:97:8f:a5:2c:d2:4b:a8:eb:3a:b6:46:44:83:
                    fb:1d:91:4e:ba:ee:41:ab:64:fd:8b:1c:88:23:06:
                    f3:df:b8:6a:07:18:f2:bd:e6:9a:28:fb:1e:89:66:
                    56:f0:64:96:15:e3:b0:b3:a7:2f:bd:f7:80:b8:80:
                    80:92:96:a5:4a:79:89:47:c2:4f:aa:75:b7:28:f7:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:69:A0:CD:7F:A9:5C:E9:B3:49:4F:89:BF:E1:01:A4:B7:A4:03
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:92:77:d0:7a:f2:99:62:74:68:6a:6d:04:6a:7c:56:d1:06:
         37:43:c6:40:41:61:2b:76:df:2c:73:89:6a:3c:f3:84:fc:f5:
         36:87:28:94:48:90:02:f4:60:1e:d1:e3:47:75:63:44:4a:86:
         15:e7:f4:4d:89:88:e3:ea:bd:39:bf:9b:e5:a9:a3:32:5f:a3:
         1c:2d:3e:7c:73:67:6a:64:23:f3:08:63:a4:4f:98:31:2d:7b:
         a8:41:93:a1:ad:12:cb:cd:04:4b:c4:bb:e7:bb:e2:2f:48:38:
         59:56:b4:90:ae:27:27:54:d3:d3:a7:11:82:87:0c:73:f0:7e:
         7c:ae:26:80:0e:5c:fe:3a:fb:c5:a6:2c:8d:6f:c7:fa:76:bc:
         08:6c:6e:3d:71:e0:6d:b3:a7:3f:53:79:06:ae:ee:d7:8c:21:
         9b:e7:1a:88:fb:74:d2:d2:63:a5:31:82:62:f5:9d:5d:4a:87:
         bc:ac:32:e9:81:d7:aa:6e:07:e7:f5:62:72:58:95:48:50:08:
         ff:81:16:c0:6d:16:e1:0d:62:35:f3:7b:f7:4c:80:38:2f:fa:
         43:8e:16:9a:c2:59:9f:58:06:53:23:51:91:f4:a2:14:48:67:
         f7:23:1f:09:0b:36:ab:3f:13:c8:94:59:61:9a:fb:c0:a7:4d:
         a3:15:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:20 2025 by rpki-client