Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File:                     WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier:          BmqFuHh19yhmM7Me1sfo0EAa4ABfOAldZbf/cmvGVT4=
Subject key identifier:   7A:20:93:76:8F:0D:41:5A:64:6C:9F:DA:5E:59:BE:5A:0C:D2:22:84
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number:          0BE1
Signing time:             Sat 18 Oct 2025 19:48:18 +0000
Manifest this update:     Sat 18 Oct 2025 19:48:18 +0000
Manifest next update:     Sat 25 Oct 2025 19:48:18 +0000
Files and hashes:         1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: KKeNTINvxi66iSj0yPz3in8W3XjqdgObQW6TdBi1taA=)
                          2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=)
                          3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=)
                          4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=)
                          5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3096 (0xc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Oct 18 19:48:18 2025 GMT
            Not After : Oct 25 19:48:18 2025 GMT
        Subject: CN=68f3ef02-26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:e5:c0:dc:45:c4:e2:87:86:d5:93:96:7e:
                    24:1c:a0:35:f1:8a:c1:3c:c1:8c:ba:fa:d2:44:1e:
                    82:ff:18:97:aa:6e:18:31:0c:2a:ce:06:93:9c:53:
                    a8:f7:03:ad:cb:99:b8:dc:79:e2:3a:2e:00:c7:d9:
                    6d:17:cf:93:06:32:af:2e:3a:bb:da:92:92:2f:dd:
                    4f:b1:96:29:c7:1c:ef:bf:fa:f0:a7:50:3b:e6:49:
                    0c:d5:3e:b6:37:e9:9b:0d:2e:16:16:d0:8b:9d:a8:
                    f2:33:bf:c7:c1:6a:cd:d3:70:e5:f4:bf:cc:2c:21:
                    2f:62:5b:8d:7f:cc:23:e7:d5:61:59:68:56:3a:92:
                    8c:f6:52:e5:12:f4:2e:9d:76:9f:0d:dc:fa:0c:17:
                    15:4f:93:5f:1e:12:75:a0:f2:76:4e:7e:d5:e7:8d:
                    0a:9c:96:a7:03:e1:ac:f2:9b:21:18:7b:70:78:a5:
                    4b:5c:9d:1e:26:f5:32:6d:f0:9e:6a:22:62:5c:06:
                    55:c4:21:b2:e6:bd:b8:03:dd:fa:0e:09:b0:9b:ad:
                    cd:13:37:da:05:31:73:25:c6:82:12:5d:69:ff:32:
                    c2:ed:9d:7a:76:0a:c4:1e:f2:69:a8:75:c6:88:a4:
                    63:ac:00:bb:58:be:90:67:16:01:61:2a:73:2b:15:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:20:93:76:8F:0D:41:5A:64:6C:9F:DA:5E:59:BE:5A:0C:D2:22:84
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:2b:9d:53:06:ca:2f:5b:08:24:c0:ac:5a:d5:ba:9b:d1:74:
         c1:7b:70:0f:11:2d:2c:cb:f2:ab:fb:d2:e0:f5:f3:f7:82:33:
         df:db:9b:8b:85:1f:59:85:02:23:95:9c:79:ec:0e:7d:eb:11:
         02:82:ef:96:87:ea:18:c7:78:f1:88:7a:ca:70:2e:f3:f7:b7:
         54:b5:71:ec:0e:b9:62:5b:da:1e:06:ec:5c:ca:6f:7d:f4:65:
         ce:85:5e:8c:4b:63:48:08:2d:da:77:ce:bb:36:6e:05:a5:8f:
         7b:76:4a:be:67:9b:35:e6:a2:e1:d1:4c:d0:26:d4:44:16:a6:
         86:b9:b7:65:18:ef:5c:a5:db:5b:ff:62:ac:68:d6:4d:07:58:
         70:97:1e:56:f1:1a:2c:65:33:40:3c:51:57:a6:ef:ca:38:23:
         26:d4:4b:3a:24:ff:c5:28:19:e4:a1:99:80:80:63:e9:dc:b6:
         2d:f6:bb:e7:18:c2:cf:0f:1b:ae:7a:e9:d8:05:6b:83:04:69:
         76:98:55:14:2f:32:6b:ec:dc:b5:3e:97:f2:78:6e:4f:36:6c:
         b3:ec:b4:a0:f1:a4:9d:1c:d0:a5:9f:55:3d:80:9c:09:da:0f:
         52:f6:f3:2f:73:16:63:d2:39:1c:54:cd:c7:17:c1:fc:70:f2:
         c4:9a:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:43 2025 by rpki-client