Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          s9ru+kuhs2QbyPxvS7EaUEw5SBwOcVveNjIJsxv7uOE=
Subject key identifier:   7F:01:C6:9F:A9:E0:C9:FF:C6:30:C6:10:21:E6:77:FD:BD:95:02:48
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          33
Signing time:             Sun 19 Oct 2025 11:09:49 +0000
Manifest this update:     Sun 19 Oct 2025 11:09:48 +0000
Manifest next update:     Sun 26 Oct 2025 11:09:48 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: WUcIVVhGhUmUt81bjSmrRCPVl9Q9qbsW2f7B5APcll8=)
                          2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: MAMH/RfGTdfLAKhMj8K5M9K9RZlTteEx+MyB1nmAYi8=)
                          3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: rtz7OxIwFTXkSQ5WNIzBL1Yz4MuSuCsv4csZ+s+4QFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Oct 19 11:09:48 2025 GMT
            Not After : Oct 26 11:09:48 2025 GMT
        Subject: CN=68f4c6fc-945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:0d:87:fb:01:5c:79:71:dd:f6:9f:19:dd:
                    03:18:88:17:4f:f2:9f:c1:af:1d:20:9e:e7:38:42:
                    64:08:98:e1:f2:f0:c3:d4:46:20:3e:60:bb:f1:80:
                    da:36:c5:12:c4:e9:77:78:8d:ea:02:50:50:fa:64:
                    30:5d:84:c7:bd:00:10:96:ca:a3:ab:73:1e:18:6c:
                    0d:fc:52:3c:eb:8a:bb:91:75:0f:b4:f6:2c:84:07:
                    08:38:0b:c1:a6:82:78:10:94:90:e5:e5:e4:7a:d7:
                    b8:e5:5e:44:2a:11:0f:1e:7a:ef:a3:7e:26:07:8c:
                    70:e6:54:3f:fd:41:a3:05:29:71:bf:5b:24:d9:15:
                    2a:3d:3e:f6:67:2d:35:94:b4:c2:4c:e2:77:04:64:
                    80:34:79:cf:61:ab:11:77:2c:0b:b6:89:1f:a4:4f:
                    d6:3d:d6:25:aa:bf:9c:46:87:2b:01:2c:47:be:fd:
                    63:bf:8d:06:2e:10:b1:d9:e9:f2:48:4d:47:2e:03:
                    4a:15:43:68:23:ed:7a:a1:f9:7b:d7:8b:e1:51:79:
                    37:42:fc:19:74:df:34:a8:f0:2d:f5:c5:aa:27:a5:
                    30:78:56:78:b3:1b:3c:2a:6a:60:30:8d:74:b3:a0:
                    64:c0:d6:70:a8:75:05:3b:c4:e7:06:eb:68:8c:57:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:C6:9F:A9:E0:C9:FF:C6:30:C6:10:21:E6:77:FD:BD:95:02:48
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:25:f3:a5:3b:7e:35:57:b4:af:48:d1:31:5e:e8:ec:e0:
         ea:37:f6:33:46:d0:b4:4f:d0:af:9d:3b:38:d4:de:04:90:0a:
         8f:22:1d:d9:dd:da:20:67:6b:e8:47:25:b2:71:9c:ef:54:37:
         96:a7:dc:be:f8:e2:14:81:06:5a:68:a7:0a:52:80:c9:7f:89:
         24:e9:73:cc:72:69:d0:e1:ee:af:88:e9:47:d2:64:01:cd:13:
         b5:45:0d:30:7a:00:ad:17:5e:f0:b4:f6:ee:ef:6a:b4:af:1e:
         bd:33:4c:fa:27:68:71:59:ec:ec:6b:a1:fd:cd:a5:6d:f9:a9:
         88:e7:d9:a4:7b:e1:f4:54:cd:0c:ac:e1:0b:c5:cf:09:8f:b9:
         17:bd:42:1a:94:24:c4:f0:51:d3:54:29:75:07:6f:12:5a:0a:
         64:47:7e:2e:bb:fb:58:d0:d8:70:56:77:8c:dc:5e:56:e5:77:
         07:f8:c5:ad:bc:9b:72:82:a5:8a:9f:91:c8:b4:9b:2c:f5:65:
         ed:01:ae:86:d1:87:a3:37:a6:8b:c1:a6:74:0d:73:77:8b:63:
         cf:91:04:55:35:18:31:c0:bf:99:34:e9:34:5f:a9:98:b4:71:
         8b:3a:4c:df:2f:c4:8b:16:53:64:fb:b2:41:97:11:30:2b:55:
         9c:c6:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:31 2025 by rpki-client