Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
File:                     WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json)
Hash identifier:          0Uc8B+olv3KXst5bwL9ZGG5kR9fMcgNGVaa5nkFzmL4=
Subject key identifier:   AF:1B:C8:6D:C8:A5:A2:BF:71:E1:52:1B:2E:26:D4:B6:21:45:FD:82
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
Manifest number:          0110
Signing time:             Sat 23 Aug 2025 05:03:57 +0000
Manifest this update:     Sat 23 Aug 2025 05:03:57 +0000
Manifest next update:     Sat 30 Aug 2025 05:03:57 +0000
Files and hashes:         1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: 23XsN/lk+WpZedsqieudub/zcHEu3emY7np1h01O0dY=)
                          2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: 9yKuVeku78GalBmu1IDdWmb+Ncr/r5STqW93UMJtxuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: Aug 23 05:03:57 2025 GMT
            Not After : Aug 30 05:03:57 2025 GMT
        Subject: CN=68a94bbd-3e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:22:78:1a:a2:04:22:b0:93:2a:4c:41:91:
                    ed:37:04:85:36:d9:45:33:eb:f7:c8:68:72:59:cb:
                    92:84:bc:b0:b1:cd:f4:c4:98:89:9f:ff:29:df:b2:
                    56:82:b3:61:85:20:7e:08:d7:c2:3c:38:a8:d2:35:
                    7b:b7:17:a5:6e:4d:29:48:0b:78:68:6d:53:89:87:
                    cb:06:fe:bc:61:d8:7f:bf:01:c7:ff:3c:37:aa:a2:
                    38:20:b1:a0:02:05:32:e4:af:14:d8:9a:9f:a2:a6:
                    d3:96:ad:e3:68:f1:99:c4:5e:6c:55:86:93:7d:c7:
                    12:21:55:c0:c2:7c:d4:41:c1:41:5f:72:34:c9:b5:
                    e0:37:7c:cb:f3:f3:46:4a:46:0b:3b:61:99:24:66:
                    a2:01:0c:8a:ff:e8:fc:19:95:bc:bf:07:76:ea:04:
                    62:36:36:38:23:d4:36:00:89:9d:2f:af:b4:fc:ff:
                    52:5e:9d:b4:ad:0c:f7:74:d9:55:f3:a2:1c:f8:fb:
                    bf:2e:23:eb:8c:ef:c4:56:cb:ff:64:76:a2:28:aa:
                    a3:64:0d:34:f6:4d:7f:58:54:d3:5f:d1:bd:79:68:
                    12:5b:bb:a3:d5:79:65:00:da:be:6e:b8:8e:b5:bb:
                    fb:91:43:d9:79:df:20:44:3a:23:40:91:e1:bc:d9:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:C8:6D:C8:A5:A2:BF:71:E1:52:1B:2E:26:D4:B6:21:45:FD:82
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:82:9e:87:b8:43:57:45:f3:b2:ba:da:76:01:be:1b:d7:
         0c:2a:e7:37:5c:27:d7:db:57:25:24:57:9b:73:9f:5b:b5:e3:
         b0:a4:47:e7:7e:b3:79:b8:8a:ed:38:8c:ce:c7:02:cf:fb:7d:
         88:dc:b2:ee:71:f4:ab:7a:c1:5f:b1:8d:e0:31:f2:6d:91:91:
         69:6d:a8:5a:3c:a8:7e:3c:59:0f:8e:f3:df:4c:69:89:9f:9d:
         84:72:1f:c9:c1:72:83:7b:ae:e2:1c:a9:9f:09:30:d6:a8:df:
         6d:30:51:c4:40:ec:35:08:f3:50:37:03:dc:3f:fe:36:27:09:
         da:55:c8:81:9a:35:db:93:20:8a:f5:1a:ec:1c:c6:ca:cb:66:
         ba:f5:51:98:ab:5f:c2:f8:ac:1f:eb:3b:4a:a7:91:0c:12:63:
         04:82:86:40:29:12:23:b5:87:2b:7e:d6:92:9b:25:32:fa:14:
         a3:48:c8:98:04:d4:62:7f:a3:14:30:fe:e8:ac:60:5a:15:9c:
         15:59:8f:19:5f:69:d0:5a:84:23:5f:da:f4:18:68:d2:82:2c:
         d9:4b:a3:ea:ba:ab:f9:f7:29:70:12:c1:cb:70:bb:c4:ed:14:
         08:a6:f0:0a:43:5a:be:ab:d9:0d:bc:ca:14:38:4c:40:8d:ef:
         f1:92:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:27 2025 by rpki-client