Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File:                     RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier:          EtJwW6a3oWN+1c+i6e627ZSMFMdAAQnSBx6kAI5Rop8=
Subject key identifier:   43:49:7B:C9:98:E3:EE:E5:E5:5C:44:CF:87:EB:A8:A8:FF:8D:D8:D7
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer:       /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number:          030B
Signing time:             Sun 19 Oct 2025 03:16:00 +0000
Manifest this update:     Sun 19 Oct 2025 03:16:00 +0000
Manifest next update:     Sun 26 Oct 2025 03:15:59 +0000
Files and hashes:         1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: 1YJhGk3GMiuFG6KcLvqYC9loV3CkoUvIARti34k9pxE=)
                          2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl
                          rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
        Validity
            Not Before: Oct 19 03:16:00 2025 GMT
            Not After : Oct 26 03:15:59 2025 GMT
        Subject: CN=68f457f0-90c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:cd:bd:37:60:77:c2:a5:0d:c6:32:64:03:
                    b4:0e:d5:58:24:9b:73:27:4b:e7:08:0b:3c:a2:f0:
                    6d:f7:eb:af:03:78:db:19:66:ea:a1:48:77:fe:7d:
                    08:e9:70:e4:e9:7e:db:b6:13:90:80:1a:65:4d:61:
                    9e:6c:43:c1:ea:6a:b2:96:f4:bd:9f:19:9c:a0:33:
                    37:69:fa:64:81:74:b3:44:8a:7e:06:c9:73:60:f7:
                    e2:8c:d3:17:7d:3c:3f:f2:09:ba:26:60:2c:6e:9f:
                    a9:9c:77:5e:9a:c0:8f:1e:0c:73:23:9e:fb:b6:e5:
                    2e:dd:7c:8c:6e:fc:91:a2:ea:33:e8:e9:08:96:3a:
                    84:d9:5b:5f:30:af:12:59:81:c7:af:ac:d1:b5:be:
                    97:9a:96:84:13:86:42:c1:59:fe:19:f6:b6:67:d4:
                    66:29:1b:00:6b:67:d5:e3:55:34:3f:c9:a0:86:fd:
                    e1:a4:00:d9:fc:8d:57:01:57:90:5b:7f:aa:7d:1d:
                    5f:d9:55:ad:8d:59:5a:59:90:d3:70:6b:3a:ef:db:
                    a2:47:e5:1a:11:6c:1f:9c:61:8e:d3:4f:29:1b:1e:
                    e1:62:29:7e:b3:02:39:69:d2:bc:8d:e7:9b:24:6e:
                    af:7f:25:8d:9d:96:55:6b:3a:24:dd:a3:eb:86:3e:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:7B:C9:98:E3:EE:E5:E5:5C:44:CF:87:EB:A8:A8:FF:8D:D8:D7
            X509v3 Authority Key Identifier:
                keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:83:85:dc:88:c4:53:62:7d:0c:28:58:25:25:3f:d3:84:cb:
         2f:eb:ca:97:7a:fe:26:98:ff:70:9e:be:ac:9d:d8:62:09:31:
         17:0e:00:91:ac:cb:78:0e:a7:9d:ba:b5:3f:5d:7e:d3:36:cc:
         e4:9d:71:22:70:e7:d8:8a:70:d4:94:30:18:79:fd:80:bb:f1:
         2e:ab:a0:6d:a9:a2:23:20:b4:90:e1:ae:48:1b:42:43:24:4b:
         2d:61:2b:1f:04:e1:60:95:df:41:b2:fd:c5:fe:80:c5:6b:6e:
         a1:59:da:da:e5:2e:1f:95:c9:32:94:86:64:75:db:5d:af:a7:
         df:6f:01:0a:da:a0:f4:66:c6:42:c7:90:e6:88:bb:0c:e3:fb:
         f6:30:bd:85:6e:5c:3a:08:fc:21:f5:31:60:e4:78:7d:0f:06:
         fd:30:b8:3f:d4:0d:78:22:d2:8f:b4:71:f7:cf:d3:33:45:c7:
         a4:93:f0:57:7f:b6:cd:f9:af:e3:bf:eb:02:38:27:c9:16:00:
         2b:a2:6a:c4:a3:64:dc:69:e0:7a:4d:55:22:82:e8:65:8d:ed:
         5c:1b:56:43:8f:01:75:27:03:0d:b2:ea:d7:b4:02:1b:95:a4:
         c9:db:c4:d1:1b:9d:78:f4:f3:15:58:92:ea:56:6d:f0:88:4e:
         eb:c2:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:22 2025 by rpki-client