Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
File:                     v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json)
Hash identifier:          3ANs8CilHnnIslrn+Yr5J1ZSMydyjshzsSV5l/w+akk=
Subject key identifier:   38:F7:45:17:AA:50:6A:F5:D7:73:CF:46:8D:96:F1:D3:F2:32:C1:50
Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Certificate issuer:       /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Certificate serial:       1350
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
Manifest number:          133D
Signing time:             Sat 18 Oct 2025 17:30:41 +0000
Manifest this update:     Sat 18 Oct 2025 17:30:40 +0000
Manifest next update:     Sat 25 Oct 2025 17:30:40 +0000
Files and hashes:         1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: pbcsp1eSMoy6Nljij15L8n+FGFxwvpKYdbg7tMd8d6c=)
                          2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=)
                          3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
                          rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4944 (0x1350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
        Validity
            Not Before: Oct 18 17:30:40 2025 GMT
            Not After : Oct 25 17:30:40 2025 GMT
        Subject: CN=68f3cec1-0548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:c8:3f:41:83:89:b5:cb:79:4d:2f:97:94:
                    45:76:e6:4e:e7:3e:52:9d:5d:d0:52:10:49:07:09:
                    db:b9:33:3f:3a:37:07:cb:d6:b1:0b:a0:cd:24:e1:
                    51:94:79:13:2d:c2:b2:6f:3a:09:bd:bb:d6:c2:23:
                    43:41:7a:1f:19:e8:ec:a7:03:7b:45:8f:b7:99:26:
                    64:ed:47:f8:6c:da:2d:43:6f:19:2f:e7:cb:ee:55:
                    cc:40:bc:b1:dd:dc:5d:ed:b7:94:74:a5:07:c5:df:
                    7a:5b:3c:1b:82:22:1d:6f:d7:12:a3:1f:43:3d:73:
                    3d:a4:a6:fb:79:c4:44:84:e0:4f:2b:c5:91:e1:52:
                    e0:76:f0:8d:76:6c:a5:35:36:76:4a:0c:ca:ed:9c:
                    23:78:a6:bf:8c:7e:c7:28:5b:dc:38:f9:b3:86:09:
                    82:db:ed:e4:1e:ad:85:7b:70:e9:96:be:33:8f:85:
                    d3:d1:7c:06:d5:27:49:0e:4a:9c:c7:32:46:bf:45:
                    a6:9e:01:7f:35:5d:8a:84:77:34:66:b2:17:63:b0:
                    1a:2f:f6:b6:f7:b2:6e:74:55:4b:19:32:56:69:c9:
                    5a:28:65:f5:91:70:93:5d:e9:74:ea:94:95:aa:5c:
                    50:85:37:aa:85:fb:34:e2:f1:9c:9c:f8:39:1a:5d:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:45:17:AA:50:6A:F5:D7:73:CF:46:8D:96:F1:D3:F2:32:C1:50
            X509v3 Authority Key Identifier:
                keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:92:72:3a:f5:0d:a9:c6:34:da:ab:3e:d3:f7:9e:31:87:5a:
         a2:96:ba:22:5d:9b:ff:7a:30:6c:15:4a:56:7e:1d:82:7c:38:
         9f:b6:c4:6e:df:fb:2d:3c:3d:7e:1a:48:19:f3:cf:13:7e:72:
         78:7d:c8:27:6a:73:e6:87:b2:fb:cc:66:66:db:28:ea:fc:f2:
         f6:f6:39:86:31:ca:e1:2f:b0:43:3d:ab:83:a9:5a:e8:2f:a6:
         45:21:ba:b7:6e:07:0e:1f:b6:1d:26:7c:e6:3e:3c:c1:6d:ef:
         00:36:c2:bf:a9:ec:9c:9a:3b:2a:ac:ae:c2:1f:ab:51:9b:d7:
         0d:d5:0b:fb:de:34:ef:a3:4a:ca:52:23:10:db:58:b4:29:7c:
         a7:fb:34:b4:a2:fd:52:a7:1a:a6:02:c9:49:1a:c5:09:ef:63:
         f3:13:da:57:0d:db:75:0e:cb:03:5a:0a:82:52:ee:ea:e8:90:
         43:7d:d4:69:e0:95:39:bc:93:12:80:b2:73:5c:28:90:52:a2:
         2d:3b:40:05:10:e2:f4:76:61:a5:c3:0f:8d:f7:68:3b:67:b3:
         ec:20:81:6f:ea:99:8f:c9:00:31:3d:f5:89:33:d7:f6:e1:d3:
         ba:ef:5f:d9:cb:73:75:84:10:65:6a:eb:85:5a:0c:70:e6:cb:
         5e:2b:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:08 2025 by rpki-client