Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
File:                     WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json)
Hash identifier:          UWjHzbT5bwQjL5V+L32pKc6ep+h8CCxfxIqMVOjN5Uo=
Subject key identifier:   19:DA:1C:10:B5:3B:15:D1:22:E4:3B:8D:4A:C6:D4:F8:9C:D2:F4:E9
Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93
Certificate issuer:       /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
Certificate serial:       0735
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
Manifest number:          072D
Signing time:             Sat 18 Oct 2025 23:09:43 +0000
Manifest this update:     Sat 18 Oct 2025 23:09:42 +0000
Manifest next update:     Sat 25 Oct 2025 23:09:42 +0000
Files and hashes:         1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: Dv3cmm55Uk/l0pHI0LiV5jYCm2k96aAZxArmWkJttoI=)
                          2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl
                          rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93
        Validity
            Not Before: Oct 18 23:09:42 2025 GMT
            Not After : Oct 25 23:09:42 2025 GMT
        Subject: CN=68f41e37-a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:fe:ed:e1:ee:2b:8f:6d:52:50:27:a4:0d:
                    d9:6c:24:e6:f4:2a:ec:58:62:fa:20:fc:f7:86:d0:
                    f5:0b:22:ca:d5:78:94:79:36:9d:7e:95:b2:a4:d1:
                    15:bf:77:59:fc:95:bd:da:aa:36:ae:36:4f:3b:1d:
                    84:8c:94:a5:16:3f:2a:08:9e:13:91:c6:35:4b:69:
                    de:31:82:ad:c9:5c:c0:fa:03:6b:7d:1a:16:80:da:
                    38:91:62:1a:76:d0:be:b5:9e:d9:9d:a5:8d:5e:27:
                    16:ae:b0:e5:5c:44:45:5b:2e:03:50:6c:e8:02:f8:
                    7d:6c:87:33:9e:37:35:43:fd:1a:e3:89:f1:b8:45:
                    80:db:8f:11:52:88:63:50:3b:0d:db:57:11:67:05:
                    0d:a6:f9:0a:fc:7a:eb:bf:f3:9e:da:26:88:68:a6:
                    1c:07:d3:ed:eb:5d:e3:66:d9:c2:c3:6a:8c:fc:c8:
                    70:e6:8f:cc:a0:0f:55:78:ab:59:13:5a:5f:99:55:
                    63:05:64:48:0d:37:18:ac:d5:7d:9b:97:78:49:a4:
                    45:94:82:ad:f4:b6:f5:05:83:2a:f2:15:de:75:23:
                    43:eb:66:b7:93:bb:05:75:27:75:79:90:70:3e:30:
                    e6:b7:5c:16:fe:5b:65:72:bf:ff:07:26:b4:27:0d:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:1C:10:B5:3B:15:D1:22:E4:3B:8D:4A:C6:D4:F8:9C:D2:F4:E9
            X509v3 Authority Key Identifier:
                keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:93:27:2f:58:58:fc:c1:d0:21:65:f7:77:23:12:ff:0f:dc:
         ac:75:00:e5:08:54:01:c2:30:38:f5:46:01:e2:7c:d6:e4:20:
         23:df:08:ae:b8:76:9b:77:68:34:a6:f3:c9:34:84:5e:3e:0d:
         2c:59:75:44:ef:06:15:30:9a:1a:89:51:c7:a1:c2:f7:5b:81:
         6a:c3:75:98:16:4b:0e:e6:1a:3d:de:d6:d6:81:24:f1:65:28:
         ab:4d:c6:2c:75:da:db:b9:db:dd:90:6c:c0:51:cd:51:a4:b9:
         c0:79:61:45:5a:bb:19:d5:a9:b0:af:92:3e:9f:aa:c5:54:17:
         cf:b2:e8:38:22:22:ce:d9:34:20:79:44:fb:be:29:92:be:bf:
         65:ba:3a:2b:d7:b0:66:9b:32:a5:d1:3a:83:88:bb:a8:61:aa:
         59:2d:e6:d5:af:a0:c0:fe:d9:77:4b:b9:e9:c1:b9:24:57:d4:
         b5:45:49:dc:cc:32:26:1a:be:90:ae:e0:c8:3a:6c:c6:c2:9a:
         3a:bb:1e:4d:40:8c:c6:59:ee:00:cf:9a:32:84:5b:13:f0:76:
         d4:83:00:1e:13:e7:01:dc:96:a3:ca:0b:9c:22:be:b8:c3:35:
         43:12:79:04:e2:df:87:e4:ec:2e:01:3a:e6:5d:55:89:42:31:
         10:c0:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:59:00 2025 by rpki-client