Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          NFOW+tCKDx5b8hgmbRC/PEQVau5iLqI6mF98qGhU/hE=
Subject key identifier:   1E:1A:0D:49:29:91:01:70:5D:67:39:03:F7:EA:75:B9:EF:8C:5E:F6
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          97
Signing time:             Sun 19 Oct 2025 09:36:50 +0000
Manifest this update:     Sun 19 Oct 2025 09:36:49 +0000
Manifest next update:     Sun 26 Oct 2025 09:36:49 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: HgrplicSocrCBTTAJ+3HX/Zkg3LwFyGNCiwVR1moJGY=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Oct 19 09:36:49 2025 GMT
            Not After : Oct 26 09:36:49 2025 GMT
        Subject: CN=68f4b131-c2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:e8:38:65:0c:81:2d:93:5f:1b:8d:ab:9f:
                    2e:f1:6e:13:b1:15:0c:95:74:e6:62:e2:41:50:3a:
                    51:98:32:f8:42:dd:22:01:97:39:fc:d0:d7:a6:f9:
                    67:aa:b6:6c:e0:f5:54:ff:23:3f:5d:78:67:f3:da:
                    6e:5c:ec:cd:8b:5d:88:08:fe:f8:b1:04:b8:e3:ff:
                    36:f8:31:ab:9f:bb:b5:c1:cf:00:66:0a:f2:f1:d2:
                    52:f8:33:9a:ac:13:92:f4:94:95:09:51:19:41:a0:
                    b3:91:fe:76:44:41:c2:9a:47:5f:4b:ba:62:c9:ec:
                    f2:ac:09:07:4e:fe:e9:22:78:41:21:96:27:29:aa:
                    9a:bc:f5:83:3d:3d:57:e1:f4:d7:aa:d0:1b:7d:5c:
                    3e:2c:98:8a:ad:08:66:e9:ad:eb:95:3f:80:64:f3:
                    2f:a7:f3:a5:48:82:eb:47:75:e7:bc:66:95:73:a2:
                    7f:45:7d:9e:50:23:91:30:bf:57:e5:f8:58:35:e6:
                    54:10:2a:34:65:d6:a2:78:4d:96:12:6a:c4:85:cd:
                    a7:d3:35:d7:04:ab:f0:d2:86:4f:1c:97:f3:a8:18:
                    97:8d:af:76:e9:b0:0a:9c:db:a1:6e:98:92:ad:1f:
                    9d:f0:a7:4f:1c:ac:87:57:90:aa:50:c4:10:75:ef:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:0D:49:29:91:01:70:5D:67:39:03:F7:EA:75:B9:EF:8C:5E:F6
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:58:5d:9c:33:a0:0c:67:c1:32:10:73:6f:cd:1e:30:2d:79:
         32:8a:96:9c:23:aa:9b:3f:55:9b:43:62:f8:f9:80:f3:2d:3e:
         96:f7:ff:43:68:8f:16:c5:2b:89:29:54:14:1a:1c:f2:ff:b9:
         7e:81:5d:e0:81:04:d7:88:59:b1:39:f6:28:54:21:cc:bc:ea:
         9f:75:05:80:37:d5:d0:04:24:c8:47:e9:09:da:63:33:31:73:
         9f:76:38:fe:3f:bc:89:5b:0d:4f:f2:77:ce:89:ab:47:3c:14:
         ec:23:b7:fb:cb:e2:33:d5:f4:74:45:c3:69:ae:55:47:9f:3c:
         f9:0e:01:23:32:82:44:b2:ac:5e:96:04:35:0b:c1:04:6b:21:
         59:d2:6d:70:01:0a:3f:f7:e9:b8:e0:90:97:3e:69:64:96:7b:
         11:48:74:d4:40:6c:d4:2a:5f:fb:b2:ab:f4:57:a9:6e:4f:35:
         2a:e2:91:ba:23:b4:c3:fb:a0:78:f5:41:e0:e8:42:8a:8e:12:
         0b:cf:aa:75:1a:31:3e:8c:23:75:d2:dc:41:43:51:fe:e0:2d:
         4e:24:df:52:73:3d:a1:67:ff:e6:5c:0d:99:a5:1c:96:db:75:
         d0:bb:8e:5a:88:0b:e8:5f:03:53:68:a2:17:35:f8:4e:99:5f:
         39:a9:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:33 2025 by rpki-client