Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File:                     WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier:          6cYreW1j7UjCy6SBDkkticTq3LPhzJEIU2VZwUdC7sQ=
Subject key identifier:   A2:13:FF:C1:70:14:F0:57:CD:4F:5A:39:76:D8:29:6A:0F:C3:5D:97
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer:       /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial:       0F1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number:          0F12
Signing time:             Sun 02 Nov 2025 17:37:30 +0000
Manifest this update:     Sun 02 Nov 2025 17:37:30 +0000
Manifest next update:     Sun 09 Nov 2025 17:37:30 +0000
Files and hashes:         1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: GmBuv/ewLVhDRZlUVou9zW2vGzphF3avnkVFPjxKg8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
                          rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3866 (0xf1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
        Validity
            Not Before: Nov  2 17:37:30 2025 GMT
            Not After : Nov  9 17:37:30 2025 GMT
        Subject: CN=690796da-b881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:85:a8:3d:75:a1:45:f0:2a:f2:90:2c:e3:
                    cf:ce:b2:3a:f5:89:23:b3:c5:a6:04:25:70:9d:27:
                    34:f8:7c:39:44:65:00:27:4b:66:6f:db:40:d6:c3:
                    3d:f6:0b:73:89:3d:aa:b7:9c:d1:95:6b:ae:49:3c:
                    d6:e5:02:44:4b:88:c5:44:a6:ba:f8:40:38:58:b5:
                    f3:e3:a3:08:d2:fc:bf:56:e1:ba:18:a3:61:ea:64:
                    5e:44:4f:5f:64:d9:54:e7:76:bd:bb:a9:b9:33:82:
                    89:d1:14:43:0a:6b:9d:51:31:42:95:cf:fd:5d:3f:
                    ea:6c:46:f5:7f:72:55:64:30:c0:21:01:80:c7:58:
                    33:5b:f1:5f:8d:65:8c:10:60:ab:00:bf:8b:de:0e:
                    8f:28:4b:ea:44:46:52:90:55:9b:8e:ef:f4:ec:c9:
                    a2:26:b1:87:57:46:19:f1:1e:50:e7:14:04:2b:50:
                    32:3f:67:9c:81:a9:17:70:1d:09:34:ac:1d:14:0d:
                    65:eb:02:a9:c7:10:49:de:06:30:42:17:b0:d9:c0:
                    ba:61:f8:81:d7:10:81:0c:77:17:39:58:d4:df:80:
                    11:ab:cc:8d:a6:b0:69:84:82:b7:ba:ea:00:a8:fb:
                    a6:d7:40:b0:87:1a:d4:2a:b5:5c:69:8f:3a:8b:26:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:FF:C1:70:14:F0:57:CD:4F:5A:39:76:D8:29:6A:0F:C3:5D:97
            X509v3 Authority Key Identifier:
                keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:a8:14:69:67:94:a5:42:85:9d:88:09:c0:d0:54:fa:0e:
         fb:43:d7:26:9b:cf:f8:50:68:28:0d:b1:7c:2d:72:0a:da:1c:
         fe:a1:f0:42:3e:50:63:41:00:fb:a5:00:a0:53:e6:9f:d0:85:
         5c:10:7a:75:d7:d5:ee:2f:62:4a:1f:7d:1c:cf:00:88:75:a3:
         29:d3:1f:b9:df:28:b4:81:a8:a6:6e:c2:65:3b:bd:1a:35:69:
         43:a4:93:10:9c:1e:56:c0:1e:61:3f:fb:d9:2f:08:1c:9a:f0:
         cb:65:5e:92:dd:5f:e1:e7:d1:4b:73:8f:2b:c4:ad:f1:5f:12:
         c8:b3:24:f7:f9:11:cc:ca:15:c0:84:4c:22:a6:60:61:05:01:
         4b:3c:79:67:06:5f:70:5b:02:41:de:23:a0:40:9d:20:d8:d1:
         aa:3a:e3:94:5e:3c:fe:b4:34:51:f1:85:1d:a1:ec:09:00:59:
         1e:43:0c:6b:18:6e:9b:14:3d:75:64:8b:d4:df:c0:81:1e:61:
         da:61:c8:21:70:61:a3:93:40:7e:4a:0f:12:19:f9:7d:22:d8:
         14:cd:f7:b4:b6:c3:9e:a0:ab:50:15:57:5f:02:58:a8:dd:1d:
         1e:04:e7:90:02:5f:fc:3a:77:09:80:80:6b:55:38:bd:7e:1c:
         0a:cf:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:09 2025 by rpki-client