Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
File:                     WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json)
Hash identifier:          8P646fngLmErf2ZFCcE8cE+qFbuTSW4S7FMy4PrGouQ=
Subject key identifier:   65:89:81:F3:58:BE:F5:9A:A5:26:3A:E6:73:B0:E7:DF:E0:86:6C:C7
Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39
Certificate issuer:       /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
Manifest number:          01BB
Signing time:             Sun 19 Oct 2025 05:33:02 +0000
Manifest this update:     Sun 19 Oct 2025 05:33:01 +0000
Manifest next update:     Sun 26 Oct 2025 05:33:01 +0000
Files and hashes:         1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: gMyto1o1Giie9tFGCRmC819SkWqJlUxjAm6vfX3ClEs=)
                          2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl
                          rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039
        Validity
            Not Before: Oct 19 05:33:01 2025 GMT
            Not After : Oct 26 05:33:01 2025 GMT
        Subject: CN=68f4780e-b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:cc:0b:09:5c:f8:5e:ee:fd:1d:db:18:3e:
                    ca:09:e3:7b:61:e1:6a:68:85:be:4b:d4:bb:05:fd:
                    74:48:03:d7:44:85:6b:c8:cb:79:98:31:f6:b6:76:
                    77:df:64:bf:e0:b7:ff:84:da:b0:f4:6a:f7:31:9e:
                    79:f2:f5:cb:70:2f:6d:00:0d:f8:fc:8f:51:3e:39:
                    11:be:e1:58:18:8c:5f:93:6c:38:ca:58:d4:fc:38:
                    93:d0:bf:37:0e:7a:e8:d9:05:f6:81:01:b4:94:80:
                    6a:21:d3:9b:c2:02:59:e4:1c:6d:38:9b:4d:9a:d4:
                    30:4b:84:83:d8:c1:0a:b7:24:d7:e9:7d:c8:9d:5c:
                    73:a6:8e:be:3b:26:d7:fb:b7:8d:6e:9b:53:fc:5d:
                    8b:d2:d2:40:6f:82:89:f9:1b:bc:fc:de:b0:f3:83:
                    45:23:30:33:d9:88:f8:64:66:8a:35:c9:bb:5b:55:
                    fb:9c:c7:95:3c:b2:f6:01:dd:50:36:07:fe:ba:f1:
                    8f:bc:c0:91:ee:6c:a0:7c:21:8e:bd:b1:12:30:30:
                    b2:c1:5b:52:26:fb:cb:f9:ea:82:56:81:19:35:d3:
                    98:80:ac:4e:ff:20:40:76:de:81:ab:ca:1d:f8:77:
                    07:58:e2:b0:03:a1:fd:34:be:10:99:3e:7d:bc:3e:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:81:F3:58:BE:F5:9A:A5:26:3A:E6:73:B0:E7:DF:E0:86:6C:C7
            X509v3 Authority Key Identifier:
                keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ba:da:19:e2:78:15:18:ea:c3:6d:fe:87:21:10:45:b4:c5:
         c2:94:53:fe:c9:19:a8:32:0c:2f:33:67:f1:1f:d6:03:44:09:
         7d:44:dd:04:79:6b:2c:ae:e9:20:1f:81:62:32:56:97:d2:31:
         53:97:0b:c9:27:5b:7f:8c:34:91:a7:d4:02:b3:cc:64:7f:42:
         c4:5c:48:60:a5:39:9c:02:a7:40:3c:27:8e:75:66:72:6c:5a:
         24:ca:84:9d:34:c2:b0:9b:44:f1:10:95:a4:f6:04:39:5a:37:
         7b:37:e7:0b:88:02:f6:07:be:53:42:ec:6e:35:f2:8b:b3:62:
         2f:8a:bc:66:0b:54:80:7f:54:53:b7:9c:df:52:2b:b7:d5:1c:
         1a:b9:90:c2:3f:82:7b:54:a6:54:fd:9c:53:77:08:fb:8e:a6:
         7b:6a:44:74:5b:6b:61:e4:45:96:49:ea:5b:58:e1:c9:e5:d3:
         a3:02:10:45:2d:55:22:e4:c2:ca:e5:5a:9c:08:3c:88:da:9c:
         e1:5b:0f:78:e4:3d:ef:fb:74:99:bb:c1:13:f2:f5:65:26:76:
         df:da:54:77:5c:d8:2e:7b:3a:ba:a1:45:5b:fa:97:45:19:df:
         d4:32:86:69:29:21:6f:7e:e4:b4:e9:b9:45:33:d8:ce:ae:d3:
         c0:88:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:12 2025 by rpki-client