Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
File:                     wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json)
Hash identifier:          H8OOBQ2n8fR13ucNTTg3v5y1ZpnwjVtCoYaJaiWmQDA=
Subject key identifier:   9D:AC:53:A6:9D:83:AF:BE:D0:25:80:CE:CD:1F:42:31:04:33:D2:26
Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01
Certificate issuer:       /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
Certificate serial:       19AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
Manifest number:          1998
Signing time:             Mon 20 Oct 2025 16:42:47 +0000
Manifest this update:     Mon 20 Oct 2025 16:42:46 +0000
Manifest next update:     Mon 27 Oct 2025 16:42:46 +0000
Files and hashes:         1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: Gwfu0bxNN/KqKqhB2cAX1mq1B0h7j1X/w9DdDvgcau4=)
                          2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: HJKSo2JvF2WwHfZYBFWF2p1igz7CdPY+ZiqJnnIgpg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl
                          rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6570 (0x19aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
        Validity
            Not Before: Oct 20 16:42:46 2025 GMT
            Not After : Oct 27 16:42:46 2025 GMT
        Subject: CN=68f66686-b275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:dc:a9:22:bb:93:42:53:1c:99:19:b5:d7:
                    c6:d7:36:d4:9b:8f:72:eb:dd:a5:b3:b8:e3:f8:99:
                    52:42:73:f1:c6:b4:37:d5:31:4a:86:d1:11:fa:13:
                    2d:11:86:95:de:66:b3:80:e1:c2:04:d1:c1:53:4b:
                    3e:1c:bc:e2:c2:6e:1e:c4:cb:77:d3:6e:3d:5e:5c:
                    a3:01:01:76:56:7d:03:92:91:9c:35:a9:aa:a7:0a:
                    de:64:32:7a:3c:9b:ca:46:04:4c:32:0f:a2:37:52:
                    ca:dc:3b:29:46:13:1e:48:60:8a:77:76:13:89:45:
                    1e:58:7d:7c:23:5d:7c:03:69:7c:0a:73:e1:5f:07:
                    05:30:16:2f:76:c5:29:88:29:c3:5d:d4:39:3c:5e:
                    e8:0f:ec:78:68:4c:0d:49:48:65:cb:68:d1:72:95:
                    3b:ed:4c:9a:5d:75:e6:da:16:e3:fc:8f:6a:e3:24:
                    45:3d:35:16:f3:07:b7:c2:2f:85:66:69:d4:23:97:
                    a5:9d:79:f8:2a:9e:ee:b0:a8:b8:8e:67:6e:8f:90:
                    b8:80:d4:e5:0c:06:46:78:eb:a9:8e:ef:f7:d5:5d:
                    7c:36:01:dc:df:e1:ba:1c:84:fb:ee:95:d8:da:38:
                    e7:2d:67:8e:f6:d5:58:0c:69:f3:a1:c6:9a:ba:06:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:53:A6:9D:83:AF:BE:D0:25:80:CE:CD:1F:42:31:04:33:D2:26
            X509v3 Authority Key Identifier:
                keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:01:ad:b5:16:68:c4:62:20:73:0a:75:63:be:9d:a0:89:
         c5:c1:75:8e:89:d0:d3:95:fa:ec:49:a7:60:46:64:4f:9c:e0:
         fc:68:bf:2a:db:94:d3:8f:07:a8:da:06:de:c4:17:b8:c3:f0:
         04:52:61:b8:5d:d4:0b:22:9a:e6:ea:7f:36:bf:0f:01:00:db:
         9a:f9:89:60:4c:62:b4:d4:2f:d9:ca:27:b5:12:6f:e2:0c:0b:
         c6:64:2f:9f:f5:43:2b:7a:49:75:17:96:36:3a:ee:39:0d:a7:
         ad:e0:9f:7e:de:b4:67:9b:25:5f:9f:6a:fe:19:51:ce:54:1d:
         2a:d8:9a:47:63:c3:3b:07:ed:36:5c:e5:e4:e2:a6:39:01:17:
         99:8a:d8:3c:88:6f:76:46:42:2a:e8:0f:51:8b:51:40:9c:46:
         40:38:81:11:fa:4f:36:0b:6f:be:7a:4b:23:28:93:2c:a7:e4:
         dd:ea:10:91:43:28:cb:9a:26:25:3f:c3:28:a6:60:a5:65:d7:
         29:7c:d4:8d:42:2d:8f:41:1a:32:a0:0e:f2:1a:0a:3b:ad:52:
         03:a7:24:7a:6e:3c:52:a1:45:c4:70:ad:0b:fd:2c:68:22:d8:
         16:b2:1d:cb:1d:aa:a5:c4:50:f6:27:ee:43:74:6c:0e:5e:af:
         a9:4e:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:13 2025 by rpki-client