Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          rnQVPm4smg6UH5/HfI8hpQmjP7yBzEjsgaYDdps1iz0=
Subject key identifier:   B0:56:34:71:E7:92:BD:98:EB:0A:58:BF:EA:0E:70:A4:15:32:44:D0
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          013C
Signing time:             Sat 25 Oct 2025 08:03:06 +0000
Manifest this update:     Sat 25 Oct 2025 08:03:05 +0000
Manifest next update:     Sat 01 Nov 2025 08:03:05 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: Cs6pg2LP1u0J7cB11AkaqQGdnXy/Oe6aOHiAdYyFdCY=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 08:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Oct 25 08:03:05 2025 GMT
            Not After : Nov  1 08:03:05 2025 GMT
        Subject: CN=68fc843a-8a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:d9:a9:4f:ef:01:63:b4:84:65:3d:45:03:
                    f5:b5:d5:c0:f7:63:6d:89:45:bc:cf:09:0e:80:15:
                    13:2f:76:82:6c:f1:14:36:bf:df:1f:42:62:e8:71:
                    82:38:d0:ad:33:e8:15:ec:b9:6c:b9:3b:5e:5f:d1:
                    f5:70:05:1b:64:0c:6f:87:57:c8:10:63:0e:23:d6:
                    d4:2d:26:1a:e5:e6:d3:3c:bf:a2:97:3f:59:f8:83:
                    a6:99:11:72:5b:c6:d8:9e:2c:4a:d4:dd:07:8a:d6:
                    b8:ba:ce:ec:e5:12:29:6e:c5:bc:45:46:50:77:0c:
                    5b:f7:76:a6:22:c1:3c:61:53:3f:ef:33:f0:dd:d2:
                    53:f8:fd:c5:dc:60:54:3b:2e:c4:10:2c:c1:36:76:
                    06:a4:1e:d2:f3:7e:36:db:9c:b7:ec:a1:e0:73:8b:
                    c9:0e:7e:a5:40:08:11:14:5f:0d:ec:ce:be:81:0c:
                    ca:50:a0:4a:45:78:21:3a:84:3a:50:fc:79:1e:da:
                    19:96:b5:c9:50:d0:a7:e3:35:dd:6d:70:09:5c:42:
                    9f:b2:00:4a:bc:0e:c0:f8:8b:dc:0d:fa:b2:f2:ce:
                    08:30:2a:53:e4:13:fa:83:45:3f:bd:5e:d3:85:a6:
                    63:d2:e3:ee:cc:d2:22:d8:31:b9:db:ae:b5:28:09:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:34:71:E7:92:BD:98:EB:0A:58:BF:EA:0E:70:A4:15:32:44:D0
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:ee:22:92:9f:91:a0:70:cd:94:9b:77:1a:0c:71:f1:3d:ea:
         64:57:55:6e:80:80:44:ea:37:8b:3e:c1:06:8f:1c:43:72:26:
         8f:0f:0a:5c:5f:37:a2:f5:e4:03:b8:2f:9a:a2:4a:7e:77:e9:
         d7:bc:3c:81:30:bc:23:de:40:40:ab:15:8c:b4:8a:dd:34:95:
         8c:9d:fd:ce:22:bd:5f:7e:2b:33:1b:82:09:cb:94:1c:b8:17:
         2b:57:f9:4b:99:f3:45:a8:0e:94:8b:47:47:bd:a4:b1:b5:cf:
         b6:8d:ca:44:37:80:52:dc:7c:c7:7f:ca:5a:23:02:04:a8:f7:
         99:01:8c:97:04:bf:a0:cb:a5:fa:9b:48:28:d3:2e:e3:59:97:
         b7:00:50:9e:e0:38:16:9f:67:a1:29:14:cc:65:0c:b7:f2:25:
         6b:81:b1:0e:a5:fa:4c:e5:40:33:a9:a0:c1:3a:50:45:8a:eb:
         32:2c:76:93:b4:49:37:1c:07:88:62:9b:dc:8f:52:4d:56:c6:
         14:6f:74:6a:ae:cd:a2:9f:47:33:0e:8d:45:58:b6:52:93:cb:
         a3:d9:58:46:5c:75:c7:06:4b:2b:45:55:47:63:44:d4:c9:f8:
         02:91:f8:dc:76:94:40:4a:09:ca:6b:67:6a:1b:3f:6a:ba:df:
         d8:73:25:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjcyOTIxMTAvBgNVBAUTKEMyRkM2NDQ4NTY0RUM2NTI2QjkxQjJGRTIzQjRGRDU4
MzQyRDIwRjQwHhcNMjUxMDI1MDgwMzA1WhcNMjUxMTAxMDgwMzA1WjAYMRYwFAYD
VQQDEw02OGZjODQzYS04YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/XZqU/vAWO0hGU9RQP1tdXA92NtiUW8zwkOgBUTL3aCbPEUNr/fH0Ji6HGC
ONCtM+gV7LlsuTteX9H1cAUbZAxvh1fIEGMOI9bULSYa5ebTPL+ilz9Z+IOmmRFy
W8bYnixK1N0Hita4us7s5RIpbsW8RUZQdwxb93amIsE8YVM/7zPw3dJT+P3F3GBU
Oy7EECzBNnYGpB7S834225y37KHgc4vJDn6lQAgRFF8N7M6+gQzKUKBKRXghOoQ6
UPx5HtoZlrXJUNCn4zXdbXAJXEKfsgBKvA7A+IvcDfqy8s4IMCpT5BP6g0U/vV7T
haZj0uPuzNIi2DG52661KAlfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBWNHHn
kr2Y6wpYv+oOcKQVMkTQMB8GA1UdIwQYMBaAFML8ZEhWTsZSa5Gy/iO0/Vg0LSD0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI5Mi8wM0I4OEFEQUQx
NEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hsSnJrYkwtSTdUOVdEUXRJ
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzI5Mi8wM0I4OEFEQUQxNEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hs
SnJrYkwtSTdUOVdEUXRJUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDV7iKSn5GgcM2Um3caDHHxPepkV1VugIBE6jeLPsEGjxxDciaPDwpc
Xzei9eQDuC+aokp+d+nXvDyBMLwj3kBAqxWMtIrdNJWMnf3OIr1ffiszG4IJy5Qc
uBcrV/lLmfNFqA6Ui0dHvaSxtc+2jcpEN4BS3HzHf8paIwIEqPeZAYyXBL+gy6X6
m0go0y7jWZe3AFCe4DgWn2ehKRTMZQy38iVrgbEOpfpM5UAzqaDBOlBFiusyLHaT
tEk3HAeIYpvcj1JNVsYUb3Rqrs2in0czDo1FWLZSk8uj2VhGXHXHBksrRVVHY0TU
yfgCkfjcdpRASgnKa2dqGz9qut/YcyVf
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:36:35 2025 by rpki-client