Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
File:                     Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json)
Hash identifier:          3rpVu1wAljct7yZapERlfIQVscNxxts7fX89bhSc6tI=
Subject key identifier:   DB:72:D3:0F:1D:EA:40:55:64:33:F0:C7:39:BF:4B:75:E9:C3:61:C6
Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73
Certificate issuer:       /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
Manifest number:          06CD
Signing time:             Sat 18 Oct 2025 23:29:43 +0000
Manifest this update:     Sat 18 Oct 2025 23:29:42 +0000
Manifest next update:     Sat 25 Oct 2025 23:29:42 +0000
Files and hashes:         1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: ovRHJDPLC1RMfUlSI2VXkMK4lPSec/ElieT23qLOZZs=)
                          2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73
        Validity
            Not Before: Oct 18 23:29:42 2025 GMT
            Not After : Oct 25 23:29:42 2025 GMT
        Subject: CN=68f422e6-7d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:ea:eb:49:92:ea:35:0a:87:36:34:fa:5d:
                    b1:de:02:94:62:22:37:75:9e:28:af:6c:17:0c:8e:
                    68:15:8b:c0:af:fe:43:bb:82:1a:f6:e3:cd:ae:93:
                    d9:34:b1:f0:22:eb:c0:ef:3f:b1:ce:a4:5e:8d:22:
                    9c:ff:2e:29:74:59:8a:6d:2b:00:0b:79:b4:ba:34:
                    5d:3d:48:39:68:39:e9:67:16:5a:7d:11:e9:e5:4f:
                    99:fd:6e:da:d0:8d:42:69:0e:b7:5f:49:b5:d0:a4:
                    12:41:98:3a:20:4a:9e:a1:1c:9a:58:2c:11:6e:88:
                    fc:3a:e8:46:db:5a:42:25:ce:46:cc:dc:35:a3:ba:
                    d2:63:24:b6:6f:43:52:54:ce:c3:5a:0f:cf:98:f4:
                    ce:56:98:00:dd:67:2c:a5:64:b8:c4:d7:21:03:aa:
                    d2:08:6d:8e:e7:cf:eb:0d:be:d3:90:d7:f4:50:9d:
                    67:fa:2d:e6:05:51:e7:87:21:91:7d:40:5a:32:3b:
                    2f:dd:c1:a3:bf:d3:ff:d9:84:08:6b:b5:92:21:48:
                    7c:cc:ec:37:77:bc:44:fe:ff:bf:2f:f5:fd:33:d2:
                    27:d0:76:f4:40:cf:f5:e3:b1:e7:7f:56:2c:60:8e:
                    4e:59:57:c4:19:b6:51:a6:e7:b8:69:9f:c5:4b:21:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:D3:0F:1D:EA:40:55:64:33:F0:C7:39:BF:4B:75:E9:C3:61:C6
            X509v3 Authority Key Identifier:
                keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:c4:26:c3:fa:30:6d:da:c8:81:0f:42:90:c8:9c:94:fa:
         47:11:8e:e0:42:56:ae:0d:2d:e4:94:10:d6:9c:26:66:a8:f9:
         b3:5c:f6:d9:50:ad:25:62:03:38:d6:84:95:ca:fe:2d:d4:77:
         78:61:40:85:e6:6c:a3:77:b2:9e:22:fa:be:94:ce:51:e7:58:
         31:2b:fe:12:b3:56:23:f5:3b:1f:87:ee:23:4d:6f:60:f9:e6:
         7f:1b:ed:8a:92:b3:f7:b7:7d:f6:76:6b:ea:ff:6a:9b:c0:f1:
         31:86:68:c2:0b:7b:01:82:a8:3d:4f:01:3e:1b:3f:45:1a:fa:
         ff:e2:25:12:c6:3f:0e:d8:a3:3f:aa:3b:69:ea:42:6b:c4:ab:
         c0:c6:29:da:9b:de:a8:b1:fd:2f:84:83:30:96:68:d4:aa:27:
         ae:1f:75:fd:fa:e6:af:2e:53:f7:49:59:4f:9f:23:31:64:df:
         5a:25:9d:e2:7c:36:31:40:04:8a:cd:80:2d:71:05:57:f7:e9:
         4d:af:bf:97:e1:0c:06:20:3c:25:97:5a:1a:29:fc:1b:7d:b1:
         12:4e:1d:25:0c:0b:ee:5e:76:84:a4:ba:5e:7d:3b:d3:38:6d:
         df:c9:53:99:7d:c7:1d:b4:6c:9e:69:1d:54:55:70:29:7c:52:
         ae:67:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:07 2025 by rpki-client