Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
File:                     WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json)
Hash identifier:          IQmnLB85lOqBZ7F43e3dy6fTxUEKi/pmu8X9cGsZSXY=
Subject key identifier:   6E:B8:97:D6:7A:7E:7D:5C:64:97:55:BA:A9:3C:19:84:40:46:FD:44
Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6
Certificate issuer:       /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
Certificate serial:       0987
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
Manifest number:          0980
Signing time:             Sat 18 Oct 2025 21:08:57 +0000
Manifest this update:     Sat 18 Oct 2025 21:08:56 +0000
Manifest next update:     Sat 25 Oct 2025 21:08:56 +0000
Files and hashes:         1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: aMgdq6YfRyuHHA3/EUoXHQLJmZEhcAOEpV1Fwo2QJcI=)
                          2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: /SULS2LlTq1Mk/GpibPOoterpHPYahPoFF8fj6LRRMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl
                          rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7CB, serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6
        Validity
            Not Before: Oct 18 21:08:56 2025 GMT
            Not After : Oct 25 21:08:56 2025 GMT
        Subject: CN=68f401e9-1cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:2a:fe:61:db:02:01:6e:69:03:0a:35:d6:f8:
                    98:fc:00:36:a6:e1:f0:55:35:05:85:ab:68:57:5d:
                    c3:e1:8d:e7:6a:69:ff:8d:db:4b:b7:4a:af:a0:15:
                    49:be:b4:b1:47:64:84:df:15:e3:66:04:22:66:20:
                    d1:04:aa:60:0c:29:6a:6e:ac:ae:99:fd:ca:cd:fd:
                    51:f2:21:32:4f:9d:aa:aa:72:87:7d:91:41:7a:6a:
                    84:84:d5:e1:45:fb:ea:d7:a5:ce:87:d2:33:38:a0:
                    0f:2f:6c:68:9a:e7:37:55:fb:32:69:b2:78:c9:a7:
                    dd:13:ee:5d:f1:eb:cf:5b:e9:09:ed:44:f2:e9:9f:
                    fb:fa:f9:7b:4e:57:5d:61:57:e9:00:06:b1:69:0c:
                    f0:c5:99:49:38:69:40:cc:a1:69:35:75:f9:b1:df:
                    95:a7:b6:0b:da:c6:cd:fc:8c:08:ac:d2:f9:45:ab:
                    2c:d2:2b:f7:e5:14:8e:0d:d1:17:25:bc:54:38:f5:
                    87:15:c3:a4:30:a1:f8:e7:7a:37:ac:87:e6:72:ac:
                    f1:80:ea:63:95:d9:82:0c:58:9a:6b:9a:41:9e:89:
                    c2:24:89:fa:e3:1d:de:c9:24:17:8b:b3:ef:c9:63:
                    73:d3:d7:75:b3:db:f6:9b:aa:0b:0e:e3:40:8b:3c:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:97:D6:7A:7E:7D:5C:64:97:55:BA:A9:3C:19:84:40:46:FD:44
            X509v3 Authority Key Identifier:
                keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:70:7f:ed:67:be:d9:9f:54:4d:45:8c:4d:16:8d:bd:76:
         78:8b:4b:c9:96:e5:0b:77:67:30:cb:fb:fd:c2:6b:ef:e7:16:
         9f:74:fb:09:11:71:71:59:a1:55:8f:50:24:97:62:32:d4:9b:
         c2:b3:e7:df:07:57:1b:9d:b0:6e:b1:8c:eb:11:aa:20:48:f5:
         94:03:44:6f:59:28:91:f0:7f:30:d2:6c:70:76:c1:8e:9d:5d:
         0d:23:b7:1e:8a:2a:d5:91:94:53:fd:66:91:78:07:8e:f9:a4:
         44:57:52:40:4c:e3:72:34:ef:60:22:1f:59:c0:53:94:db:75:
         dd:e1:6e:0a:ce:bb:eb:c0:15:aa:5a:5f:e1:8b:3f:5b:12:c5:
         c2:81:14:5d:da:d8:59:6f:b2:1c:38:f3:1b:6b:2d:82:35:f7:
         5b:9b:52:5c:1e:21:15:73:a8:99:7a:b8:c5:98:37:8c:82:17:
         c6:fe:84:40:75:04:2a:39:52:80:81:56:48:a7:9d:d6:f7:ec:
         98:57:38:c5:8d:fd:ef:ed:47:f3:c2:be:ca:96:c7:e9:d9:dc:
         22:cc:6e:62:d7:49:df:6e:c3:7e:c2:e9:4c:2f:40:59:2a:1a:
         94:b4:4c:2e:68:5e:59:c5:9a:46:54:cc:41:04:0e:31:0c:38:
         19:f2:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:42 2025 by rpki-client