Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          ljRfCdh4miarzAnLGA1jN22w0iNu7/J47AbpmwxUvBM=
Subject key identifier:   58:42:5C:54:66:78:95:E6:10:89:A6:3F:25:73:FD:A2:3C:A8:12:63
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       17D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          17A0
Signing time:             Sat 18 Oct 2025 16:59:36 +0000
Manifest this update:     Sat 18 Oct 2025 16:59:35 +0000
Manifest next update:     Sat 25 Oct 2025 16:59:35 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: pWGHyCOvkDvufyPEtRciD8BUgpGT8JmhrAfwOczd2Ds=)
                          2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM=)
                          3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6101 (0x17d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Oct 18 16:59:35 2025 GMT
            Not After : Oct 25 16:59:35 2025 GMT
        Subject: CN=68f3c778-c670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:c8:71:55:96:f0:7e:39:18:f7:84:c2:cd:
                    31:4f:41:8d:eb:99:3d:35:f5:94:77:3c:01:b6:2d:
                    d7:f1:33:92:4c:5e:ce:ca:08:29:37:1e:5c:a9:fc:
                    a1:a4:18:4a:fb:29:bf:72:8f:8b:e0:68:0b:a2:29:
                    b9:63:05:06:f4:ff:c6:ff:21:0b:c2:ce:bf:b6:6d:
                    b3:8f:8f:28:97:0e:ff:cb:0b:ca:1d:fd:d9:78:c1:
                    17:7f:7b:25:84:e5:62:25:b6:80:e0:c9:8a:6f:21:
                    2b:c9:5a:5b:7d:e3:b8:7c:59:de:45:27:26:f3:41:
                    8d:d3:38:1e:b7:af:ab:48:76:4c:13:f1:9e:ea:7e:
                    e5:ae:6f:d0:22:01:b9:ac:b3:61:c4:24:2e:99:45:
                    29:af:21:f9:c7:c4:b1:e8:38:bd:e6:dc:2a:a1:ae:
                    c3:91:96:1f:4b:c0:95:ac:3a:6a:26:a2:80:79:29:
                    95:b2:de:70:60:8b:4f:6f:97:bf:89:74:2b:e0:75:
                    ce:62:d7:1a:93:bd:11:ec:0a:38:e9:f7:c1:31:ba:
                    b9:55:af:59:4a:5e:2c:aa:fd:33:b7:f4:bc:e2:e4:
                    b9:3c:c0:6c:b9:d3:9e:5e:cb:1f:61:90:63:6a:9e:
                    91:59:d9:c8:3b:9c:ca:66:cc:3c:c3:6c:62:10:2f:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:5C:54:66:78:95:E6:10:89:A6:3F:25:73:FD:A2:3C:A8:12:63
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:56:de:f0:e6:6c:92:11:c7:b8:f8:5a:ed:96:48:89:44:63:
         55:94:09:42:2c:fc:62:dd:f0:e6:0c:27:8b:88:72:0b:6f:7c:
         17:13:38:c2:ec:e8:6e:be:1d:6e:c0:ee:a0:11:4e:14:b3:0f:
         7d:7b:6a:b4:c8:56:a4:b0:6f:3e:a4:a8:ed:09:65:79:2a:bf:
         b4:de:61:a9:47:61:d0:6f:76:00:ef:41:b0:64:68:27:e1:93:
         f4:db:2b:78:b2:38:5b:c4:1c:f1:f0:f3:4b:d5:a1:85:ca:f9:
         5c:8a:f5:d8:98:ae:11:b6:b1:90:2f:25:bd:a1:49:bb:83:ec:
         0f:c3:58:ae:69:5d:8a:a6:89:7c:4c:3f:c2:59:b8:20:7c:27:
         1a:4d:9f:e4:e3:b5:64:ca:9a:6b:02:58:e0:24:9b:0c:95:b8:
         57:1b:36:2f:bc:87:31:dc:f4:86:43:5a:08:ca:e2:6f:d9:d6:
         3d:52:87:17:1a:3a:c5:e9:b4:58:79:08:74:86:a9:2c:39:67:
         13:31:2b:f3:68:bf:27:31:1b:eb:9b:14:e6:d1:2e:f6:5f:6f:
         03:8e:ed:ad:4e:c0:bf:48:66:75:40:85:ae:a3:c0:77:a8:72:
         fa:df:16:1e:7a:93:7f:79:8f:24:59:8f:53:c1:5b:fb:ea:96:
         6f:1b:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:30 2025 by rpki-client