Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          jrxtBsPtF0x8hw7kvflPshQL8KE+E3AjZj1bjKc/w5w=
Subject key identifier:   90:65:30:1C:58:80:23:66:B3:09:F6:27:96:ED:19:CF:D6:8B:70:26
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       137D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1267
Signing time:             Sat 18 Oct 2025 17:42:28 +0000
Manifest this update:     Sat 18 Oct 2025 17:42:28 +0000
Manifest next update:     Sat 25 Oct 2025 17:42:28 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: Xh3aoLKrD9dcQsfMIEH0Hd7W1OI/pLtEF654Tl1n8iY=)
                          2: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          3: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: Jm69XnxkSt8CaD8B4M7m2OfdxuyjH53yi3Y2n3LjPoQ=)
                          11: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: UbbJeh1gWwixc1KBx/TcENcb/xObt11wZD4U7s3lZJw=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws=)
                          13: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          14: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          15: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4989 (0x137d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Oct 18 17:42:28 2025 GMT
            Not After : Oct 25 17:42:28 2025 GMT
        Subject: CN=68f3d184-cf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:2e:30:20:6b:6d:42:e2:94:52:99:62:2f:
                    62:f3:9a:65:7e:2a:90:bc:1d:b6:02:61:d8:81:03:
                    4e:02:05:60:33:af:b0:f9:ee:12:6c:56:ac:4c:2b:
                    54:43:c7:5c:c4:2c:8d:e5:2b:65:be:76:5e:15:54:
                    56:75:f1:b9:a4:28:51:13:6b:45:cd:93:98:0b:04:
                    19:48:3c:1d:0c:43:fc:7d:7b:f8:a6:b6:8a:8d:53:
                    a6:e8:13:69:fa:c4:48:99:d1:03:42:06:39:14:95:
                    4e:22:7c:93:87:c4:4f:87:87:c5:5a:f7:c2:39:85:
                    50:c0:dd:f4:a1:4b:66:56:e4:86:48:91:32:9b:3d:
                    19:b9:ae:c9:88:86:c3:ca:d0:e9:4d:e2:d9:ac:14:
                    e0:88:84:72:87:15:e6:76:da:52:ee:db:52:62:53:
                    70:04:51:d4:02:a2:98:8b:22:20:88:ba:26:75:a1:
                    c0:72:80:d7:3d:35:a7:65:6e:30:bc:29:1e:3a:be:
                    3d:a5:95:c6:eb:09:24:1a:47:fe:3f:40:3e:18:d5:
                    fe:6c:8e:63:b5:06:ce:3d:b7:84:59:14:98:42:1c:
                    f2:22:6b:e2:0c:5f:ef:78:f7:94:cf:59:82:f3:aa:
                    c3:ae:fc:6b:f4:52:90:06:8c:74:ca:ce:a8:48:e6:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:30:1C:58:80:23:66:B3:09:F6:27:96:ED:19:CF:D6:8B:70:26
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5c:e0:dc:19:65:9b:24:04:a0:c4:d4:b1:d9:7d:26:ef:f6:
         5b:fd:e2:90:1e:c9:f8:70:35:e0:2f:ef:c6:f5:60:64:3b:fe:
         0e:2e:3e:f6:aa:38:3b:7e:ec:ed:cd:9c:ee:72:03:4f:61:75:
         ff:39:7d:d3:82:fc:6f:5b:fe:2a:4e:13:f3:0e:22:05:fe:54:
         1d:2d:07:3d:99:cb:70:96:7e:9d:b4:80:6c:53:0a:3f:ad:73:
         3c:4c:ec:ae:68:10:b1:c7:80:42:f7:22:9b:72:5d:53:96:f6:
         51:ed:3e:06:d2:2a:f5:eb:2e:e3:f6:f8:ff:a8:44:de:d6:c8:
         c0:24:a2:dc:49:91:e6:51:51:84:a5:d6:ad:d1:0e:42:5a:15:
         34:e2:d8:2d:76:00:cd:f2:2e:ad:d2:10:51:1c:32:61:bf:c7:
         5d:99:3e:7e:68:0a:9c:4f:f4:c2:86:ec:d4:de:d1:4a:e9:03:
         b0:ef:19:0e:cb:62:32:51:04:89:cc:58:6b:4a:b5:eb:fc:ad:
         f3:02:e0:d5:be:31:f9:27:a0:60:6e:6b:06:6c:b9:42:dd:b3:
         bd:17:13:ec:a4:79:f5:ae:f4:49:1c:86:13:e1:dd:4f:59:3d:
         9a:03:8a:be:c6:ec:6f:8a:6c:f3:e5:d9:12:0d:3a:ad:cd:07:
         fb:fd:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:16 2025 by rpki-client