Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
File:                     WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json)
Hash identifier:          S0nYME2dVNPiGmw3pFgDNnw39k1g0VhzvYwv/8FTVkM=
Subject key identifier:   4D:8E:CC:7C:92:BF:C7:4D:8A:F5:35:9C:9E:7C:59:97:55:1F:82:85
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
Manifest number:          0854
Signing time:             Sat 18 Oct 2025 21:49:17 +0000
Manifest this update:     Sat 18 Oct 2025 21:49:17 +0000
Manifest next update:     Sat 25 Oct 2025 21:49:17 +0000
Files and hashes:         1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: lxJddop+c8fSd1FWUaoh1wNVbyA8rTlDQpZC/NifbWo=)
                          2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: XNkfgG5MOFGcvkcR8H3rhOunTGwkWC3c+4uy9gU7fxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: Oct 18 21:49:17 2025 GMT
            Not After : Oct 25 21:49:17 2025 GMT
        Subject: CN=68f40b5d-6e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:b9:4c:a3:3e:3f:7d:28:a0:99:a3:a2:a3:
                    43:72:a8:8d:84:db:75:56:36:a4:db:14:6e:f8:7a:
                    1f:a6:bd:27:38:5a:5b:67:2a:52:66:46:0e:b7:c3:
                    46:ad:2b:d5:0a:d2:de:68:89:b9:53:87:d9:12:92:
                    31:67:54:ad:3b:a3:7a:90:1b:ac:b6:5d:52:65:e4:
                    8b:0d:92:d5:60:db:b2:f4:85:79:fb:bb:00:a6:3c:
                    39:1f:b6:a7:6f:5f:35:22:c5:0a:39:11:cc:23:39:
                    25:fb:01:db:2b:36:1f:e1:ed:53:d1:22:b2:38:48:
                    b3:ce:08:62:bd:01:02:22:df:26:03:e6:c4:22:53:
                    5d:13:64:e1:10:1e:70:a2:b8:ca:8b:13:08:59:7d:
                    ab:27:87:70:66:6d:66:75:0a:aa:6e:55:bb:81:9e:
                    7e:0a:c8:86:b2:62:39:12:1e:10:39:fe:22:ed:4b:
                    86:fe:a6:10:cd:4f:84:cb:25:4b:44:56:4e:f0:20:
                    34:52:89:5f:b5:01:09:eb:94:67:bf:0b:49:25:19:
                    7d:bc:40:61:09:5c:99:9c:5c:45:32:3b:b3:a6:66:
                    8b:77:82:db:93:19:8c:0e:fd:15:ce:1a:fc:16:bb:
                    8b:5a:3e:e7:45:eb:1a:0e:05:96:bc:67:ba:20:17:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8E:CC:7C:92:BF:C7:4D:8A:F5:35:9C:9E:7C:59:97:55:1F:82:85
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:87:53:7b:b6:b7:c9:7e:78:32:2a:0d:11:93:f7:b3:bf:c0:
         48:2b:99:00:f0:df:44:b8:2a:44:1c:dd:d1:ef:1a:fd:8d:96:
         05:8d:e6:42:89:19:d6:80:73:30:30:a6:5b:17:46:29:67:d9:
         05:79:8e:86:af:89:b8:6a:94:42:e5:ad:51:6a:c2:f8:da:3e:
         19:f1:d5:72:1b:c0:7d:eb:f4:fc:02:2c:b7:30:72:79:69:bb:
         50:26:63:5e:91:b5:f1:0d:89:4a:56:d7:72:66:3e:32:37:d9:
         82:21:0b:63:d6:ee:77:e4:80:df:90:11:f7:0b:15:4c:c4:8e:
         a5:51:2d:d3:49:4a:91:73:0b:a0:f0:84:b4:d6:18:be:2d:58:
         cb:47:91:d1:ba:08:42:c0:cf:f8:ab:84:72:c4:5d:c0:ed:62:
         4a:c6:6a:94:a6:c2:5a:3d:52:f5:db:70:df:e1:c1:6f:b6:c2:
         f3:19:84:6c:12:de:ed:26:16:0d:58:83:cf:36:8b:77:5a:43:
         6e:0a:dc:cb:f4:23:d3:96:39:a9:b3:ce:2d:05:66:bd:7a:51:
         96:8c:cd:ae:89:00:d3:93:17:dd:e4:7a:88:43:3d:fb:37:ba:
         1d:4b:d5:b7:5e:ac:ce:26:9a:7f:b6:d0:80:dc:f0:02:ea:1f:
         85:b3:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:12 2025 by rpki-client