Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File:                     WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier:          WM17klhfeo9lTqSfujjuFMXIdsR1s/ubeqqC+RPe89I=
Subject key identifier:   B5:3B:25:FA:DE:05:01:C9:A0:9C:82:49:C7:88:38:1F:DE:5B:D8:FC
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       0A02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number:          09E8
Signing time:             Wed 22 Oct 2025 20:37:37 +0000
Manifest this update:     Wed 22 Oct 2025 20:37:36 +0000
Manifest next update:     Wed 29 Oct 2025 20:37:36 +0000
Files and hashes:         1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: XhbU0WlYbylaufrBTBCpCN8Eq/ycCb2jZIsPJrPfA7E=)
                          2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: OxqkPAcwe8U/URYzB78s+OkY3R6dzxppCgDSq39fiQ0=)
                          3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: EhKz+qpZCdGGz4K9XW4D89cMEqKMRNKMYWUEYrhee9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 20:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562 (0xa02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Oct 22 20:37:36 2025 GMT
            Not After : Oct 29 20:37:36 2025 GMT
        Subject: CN=68f94090-4377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:07:eb:46:05:69:7f:b6:dc:3b:b4:bb:75:
                    5f:cd:5c:a9:09:64:69:fd:9f:f9:8c:c5:6c:8a:41:
                    d5:f3:84:00:b0:0b:86:cb:70:38:9d:26:b1:29:f3:
                    9e:49:cb:24:32:92:1a:1e:42:ee:b3:e1:52:ce:4e:
                    b9:f9:c4:c5:58:4f:a5:d1:bd:ec:53:77:ac:38:97:
                    db:0c:9c:3d:9f:78:58:88:5b:48:52:08:25:e7:1c:
                    2d:c1:b4:4b:fd:1b:15:3b:c1:89:2c:c2:a7:4d:58:
                    05:a7:97:46:62:15:11:f6:f4:5c:a5:56:77:eb:7b:
                    12:ba:9d:08:0d:37:dc:78:e9:5f:ff:e4:8b:db:40:
                    bf:7b:64:91:ef:8f:77:a5:32:a3:e5:71:91:f0:3c:
                    14:71:c3:d6:f2:e5:6c:7f:80:f2:db:d6:eb:b8:e6:
                    4b:35:2b:1a:6c:eb:2e:d8:3a:b6:a0:e2:ba:71:fb:
                    00:e1:85:a8:94:77:9c:38:2e:56:11:97:dc:16:0a:
                    f4:26:18:a0:51:3e:41:76:53:e5:99:cb:99:ec:b7:
                    c1:2c:52:b9:c8:c5:04:e4:3a:8c:c6:92:7c:c3:51:
                    93:25:26:8f:e7:3e:28:0c:9b:fd:0f:ac:7a:88:d1:
                    bb:a7:f5:df:3e:03:b9:4d:29:f3:86:f1:8c:e5:24:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3B:25:FA:DE:05:01:C9:A0:9C:82:49:C7:88:38:1F:DE:5B:D8:FC
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:7d:45:5c:8e:82:5b:f9:11:f8:73:cc:9d:5c:82:4c:d6:
         ce:28:79:3f:1a:72:2b:6b:ff:e7:1f:12:e1:1c:bc:ba:60:48:
         3e:8e:fe:1b:61:79:8f:ae:28:d8:88:4f:78:af:46:c5:1b:e9:
         61:46:62:88:6a:7f:27:91:46:1e:f9:64:fa:51:53:8f:65:97:
         c2:32:59:a7:68:cb:5b:0a:9f:df:4e:a0:b7:e0:98:c4:bc:f1:
         30:db:8a:14:2c:49:46:5c:93:43:15:ad:0d:c6:d0:22:a6:d2:
         69:1f:16:91:96:ed:8c:20:36:3d:92:6a:c4:8b:43:2e:13:c5:
         f7:85:7d:77:11:20:b6:38:5f:47:aa:bf:fe:a6:9c:2f:b0:06:
         59:4c:94:17:1b:7e:21:fb:d2:fd:7a:34:19:e3:e6:fc:2b:b8:
         7d:99:4b:18:8c:c0:52:52:48:3d:b8:34:91:d1:3f:4a:46:a5:
         ac:de:8f:6d:81:ae:90:56:51:5b:c4:ef:66:d0:ae:87:c2:2e:
         60:29:cc:a5:ed:92:b3:68:ca:04:5f:25:36:15:19:ee:f0:53:
         d1:7f:da:f9:5d:d1:f2:67:96:b6:fa:03:bb:c4:a0:4e:be:bc:
         bb:aa:ed:dd:06:2d:08:85:a0:89:8b:25:4b:d3:09:d9:d4:35:
         37:e3:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:07:50 2025 by rpki-client