Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          eLcb3uchdeVX1WHWOgtt1pPnJp9jYoYz3og/a2/Q5V8=
Subject key identifier:   43:81:06:6C:1C:C9:55:4A:7C:E2:F9:20:DC:2E:93:BD:D5:B3:7D:07
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          0368
Signing time:             Sun 19 Oct 2025 02:56:41 +0000
Manifest this update:     Sun 19 Oct 2025 02:56:40 +0000
Manifest next update:     Sun 26 Oct 2025 02:56:40 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: HFNocIl/oexWvA0W7Vcy+UJg56oQVHIZhj45+RKkKPg=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Oct 19 02:56:40 2025 GMT
            Not After : Oct 26 02:56:40 2025 GMT
        Subject: CN=68f45369-df8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:88:89:49:2d:25:d0:dc:1d:84:c0:8b:7c:
                    2b:35:04:8c:68:8d:37:78:c5:8a:f3:ef:a0:d8:54:
                    f2:21:bf:36:a4:e0:15:b8:0e:ce:e0:61:71:b5:e5:
                    53:82:88:99:00:f6:d6:c9:3d:6b:8c:f1:88:0f:55:
                    4f:8d:5a:0e:5e:78:99:3d:f2:78:b4:8b:eb:61:89:
                    9c:e9:85:80:1e:02:4f:4b:8d:3b:d0:95:3c:ef:d7:
                    b1:4f:7c:2c:90:47:f7:a5:f5:69:ce:6b:a9:f4:be:
                    db:90:9c:1f:3a:0c:cf:49:c8:a6:da:c7:ec:fa:71:
                    eb:db:a3:be:40:13:65:18:8e:d1:32:ab:18:4d:04:
                    b2:e8:0d:87:96:75:9a:04:ad:17:1a:cb:e0:50:6c:
                    bc:e9:27:ed:9b:38:d1:15:78:6a:3e:a0:d7:31:0d:
                    b1:dd:83:ad:74:64:b6:a4:a5:ed:30:cd:78:13:3a:
                    31:c9:9a:66:46:00:f8:b1:79:04:0b:07:9b:d8:d0:
                    da:8b:92:7b:9f:63:7e:47:c5:d5:de:d6:b6:ea:e2:
                    32:73:71:91:0d:d1:cb:91:cd:36:a6:97:81:a7:79:
                    d1:32:29:aa:7b:d3:78:60:3c:4f:4c:e4:ca:b8:2a:
                    1e:68:70:14:7d:3b:a0:75:82:6f:9e:f4:49:21:cf:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:06:6C:1C:C9:55:4A:7C:E2:F9:20:DC:2E:93:BD:D5:B3:7D:07
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:df:a3:9a:db:95:df:c4:81:b3:c2:04:ad:58:e6:20:5c:
         4b:1f:62:fc:83:b3:c8:e5:b4:aa:a5:e3:4b:d8:aa:f4:d1:7f:
         e4:1e:47:ac:f3:89:29:6a:1a:38:2f:04:5f:b9:e0:8c:ba:97:
         4f:b6:6f:a2:79:97:4c:11:d8:fe:94:15:33:cb:ad:55:a1:21:
         6e:3d:63:bc:48:07:35:06:ec:51:35:c2:b8:e9:52:7f:78:72:
         64:30:f6:3e:43:cd:9b:9b:96:13:ec:9a:f6:1a:bb:49:81:a3:
         62:e1:76:7b:e9:1f:15:39:37:05:ee:3d:7c:e3:e9:c7:61:c5:
         5a:b9:52:78:27:c0:28:dc:ba:7e:8d:80:8e:71:bc:24:d6:09:
         65:f9:f0:8b:13:2a:34:d8:61:f6:6a:1a:35:58:ca:0c:61:40:
         81:24:5a:6b:42:6e:e3:a0:04:a4:a6:d0:84:ee:08:d7:c1:bf:
         22:fe:45:eb:df:46:91:48:81:59:bb:aa:a4:5b:b2:4d:b3:76:
         72:c0:5f:b5:3f:b4:dd:5f:de:76:90:d8:7d:d9:f1:35:39:8a:
         70:94:66:72:f9:cd:e4:cb:bd:08:4f:0b:59:01:98:b9:0f:14:
         42:c8:73:06:ad:1a:2b:93:de:93:58:5a:ef:38:d1:e4:4a:eb:
         30:98:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:07 2025 by rpki-client