Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier:          l8tYokHohfRXY4wEv91grlPa2bPRkM+4RUclDC89DHg=
Subject key identifier:   7D:88:98:73:6D:A4:AF:E2:BC:20:12:1F:D2:9B:43:4A:69:70:B3:30
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer:       /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial:       34C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number:          34C9
Signing time:             Sat 18 Oct 2025 15:13:15 +0000
Manifest this update:     Sat 18 Oct 2025 15:13:14 +0000
Manifest next update:     Sat 25 Oct 2025 15:13:14 +0000
Files and hashes:         1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: qwJAxS2QTQQ/GDWRI0A6R3nGQvdtVGRQ1EJW3Dspzrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
                          rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13513 (0x34c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
        Validity
            Not Before: Oct 18 15:13:14 2025 GMT
            Not After : Oct 25 15:13:14 2025 GMT
        Subject: CN=68f3ae8a-41bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:ef:20:9b:33:39:1c:3b:fe:81:63:66:86:
                    31:13:f4:a1:61:ba:af:6f:2f:3a:c7:53:90:8b:db:
                    1a:db:34:e6:c3:e1:e0:25:1a:7b:4c:2b:9e:b2:f2:
                    aa:50:59:3f:bf:2e:88:70:b6:8d:37:7d:a6:a6:2c:
                    1d:46:cb:0b:55:25:f9:f1:bf:0f:1e:ea:dd:d9:68:
                    4e:85:53:b3:b9:f2:4f:52:45:3e:30:83:36:3c:e4:
                    0f:f4:59:a4:59:f3:16:de:ee:52:f7:f5:57:71:3c:
                    dc:6e:d5:d2:b7:36:ed:ca:1e:e0:58:04:d3:54:2f:
                    e4:54:99:6d:e8:c4:ae:a4:4e:82:75:c1:8a:3e:13:
                    fe:67:95:0a:81:04:3f:4e:24:eb:b4:2a:43:1b:e2:
                    c6:be:ab:6c:d5:5d:fc:7d:34:2a:f0:7a:c9:30:99:
                    2b:2a:50:7a:72:38:d0:9e:0b:07:54:e6:7f:15:99:
                    b5:63:93:aa:6f:07:31:c0:fb:11:54:fe:d5:fc:36:
                    fa:e8:77:17:9c:25:60:a0:f0:e6:cf:17:03:d4:21:
                    f4:52:12:35:81:25:e9:10:a7:e8:f8:4f:82:e9:7e:
                    d6:1f:b0:b9:65:99:fa:da:96:9d:c5:db:6c:cb:14:
                    92:07:4e:d0:d5:a1:61:f1:b4:7a:11:bd:31:ec:5f:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:98:73:6D:A4:AF:E2:BC:20:12:1F:D2:9B:43:4A:69:70:B3:30
            X509v3 Authority Key Identifier:
                keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9e:fb:06:be:38:97:ea:a8:c8:7b:45:05:49:d8:c0:7d:17:
         eb:4e:26:f7:a5:81:1f:c6:fd:1b:53:b5:ba:00:48:f8:98:1d:
         18:fe:a2:7f:15:b7:8c:c9:c2:f9:cf:37:1b:47:81:33:8a:65:
         bd:0b:78:26:f2:c4:28:e9:82:ef:40:ca:6e:59:d1:2f:a3:4b:
         9d:c5:11:9a:b8:dc:92:bb:d9:61:97:26:7b:78:df:48:66:33:
         55:60:c2:38:e8:e1:e8:5d:b2:02:1b:3e:43:37:1e:de:96:59:
         24:58:e2:40:0c:78:50:7e:20:6d:b2:f4:64:e5:42:47:e4:ca:
         3e:d1:97:7b:b9:16:da:54:33:22:0b:ee:c3:f2:44:38:1d:44:
         b1:f5:83:84:18:3d:c8:9f:ad:b5:57:9f:d6:49:66:71:92:db:
         2d:0e:c2:33:f9:64:56:8e:33:3b:72:c2:6b:28:61:14:34:74:
         42:5d:b4:3a:64:2d:57:d8:a7:db:25:41:eb:2c:12:38:96:2a:
         e1:d6:01:fe:fa:7a:77:24:74:e9:0d:cd:9b:58:91:b8:2b:8b:
         bc:9d:cf:6d:88:7d:7f:4d:35:ee:2b:78:a9:29:4b:15:6c:5e:
         55:46:74:c7:8c:3d:4a:92:a7:a1:a2:82:b6:6c:c0:52:e5:8a:
         06:cc:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:25 2025 by rpki-client