Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File:                     WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier:          JBA1lN3J0KayK+i3KMLKDGCt9A4mvB1SB9ZkGG9vh/I=
Subject key identifier:   7C:40:DB:20:7F:22:D4:47:C9:D1:47:AD:FC:2A:5D:71:A3:B5:99:D3
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer:       /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number:          01D3
Signing time:             Wed 17 Sep 2025 03:17:08 +0000
Manifest this update:     Wed 17 Sep 2025 03:17:07 +0000
Manifest next update:     Wed 24 Sep 2025 03:17:07 +0000
Files and hashes:         1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: HUiuXtJcHcnCnvbAeoGwgx3tXJUwTQPXoC6Fw5tIiEA=)
                          2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
                          rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 03:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
        Validity
            Not Before: Sep 17 03:17:07 2025 GMT
            Not After : Sep 24 03:17:07 2025 GMT
        Subject: CN=68ca2833-744e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:b5:a1:f1:f1:65:86:04:aa:f3:31:a5:b9:
                    84:0e:ad:9f:f4:ae:11:09:ac:55:18:00:ad:20:a3:
                    e0:da:90:3c:4e:23:cf:6a:2c:7c:51:e9:ba:1b:d9:
                    ea:2c:17:4c:3a:4c:a1:78:af:8f:95:7a:80:b7:24:
                    92:62:81:3a:36:32:41:38:a6:6f:dd:9e:e2:5a:27:
                    52:cc:a4:4a:c4:d1:76:bd:36:ac:70:8c:3a:f8:5b:
                    f7:a7:3d:99:ac:10:8e:f9:21:ac:f6:20:bc:8f:57:
                    21:1d:39:ed:b9:20:6b:a0:9c:53:46:df:3e:89:0a:
                    5a:3f:08:8a:9a:0b:ab:1a:db:30:b7:2c:31:8e:23:
                    e9:b6:82:7d:21:8b:58:b1:80:3d:67:4e:43:20:0c:
                    9c:a5:07:14:be:92:81:c7:7a:57:07:f1:b1:df:73:
                    b3:62:cb:fe:43:c8:01:fd:11:60:97:8e:0a:92:c0:
                    e5:14:6e:5a:f3:5f:50:4d:91:7b:51:3f:c1:76:31:
                    94:c7:f2:0c:a0:12:cc:aa:f4:1a:02:c7:a7:5c:ae:
                    d1:3d:83:f3:89:ff:37:00:68:73:8d:5f:26:50:79:
                    40:8a:ef:a0:d7:4b:7f:5e:5c:fc:a6:a3:d0:a4:7a:
                    68:7f:c0:1e:9e:83:cb:15:d0:24:1e:14:78:8f:cc:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:DB:20:7F:22:D4:47:C9:D1:47:AD:FC:2A:5D:71:A3:B5:99:D3
            X509v3 Authority Key Identifier:
                keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:52:57:39:18:51:2a:eb:0e:ba:ac:ff:05:c3:66:b1:14:
         4b:5a:96:9a:b4:fb:0f:73:06:51:74:7f:92:70:ba:7c:7f:d8:
         c5:41:ce:23:9e:e4:ea:ef:83:cb:d0:e9:5f:7a:e4:f1:b4:7d:
         cd:38:8b:8f:03:36:29:fe:df:ca:c0:91:11:cf:b4:d2:69:4d:
         b1:6f:11:a0:66:86:7f:83:84:9c:5f:40:a5:d0:5f:7e:eb:69:
         30:e6:1d:a6:d8:b6:53:5b:9f:24:ff:b3:d7:aa:4b:38:e9:2e:
         9b:9a:d3:ba:c1:d6:08:5d:d0:2d:ad:ab:8f:7f:da:62:10:ca:
         ad:b1:e0:33:34:de:ea:cf:6b:70:01:76:1b:02:e3:44:bb:db:
         d6:ab:dc:00:9e:0e:ad:b3:be:fd:ac:9a:4d:1a:19:ba:1f:79:
         12:45:32:5e:9e:f2:14:96:11:2a:29:c6:fb:f5:4e:c9:87:de:
         c0:53:d0:45:6f:06:54:92:8f:a9:bf:00:c5:a0:b2:91:72:c1:
         df:06:5b:60:37:51:b5:5c:c9:9c:c6:77:92:3c:00:35:4c:b8:
         7b:34:fb:1b:35:d8:eb:bd:6b:c0:f1:e9:74:29:60:4b:ac:39:
         ef:36:9e:42:69:7f:dc:a6:e9:29:ea:30:71:b6:04:7b:db:9c:
         78:c6:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:20:02 2025 by rpki-client