Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          Vq0aGDLQ4y/7u1sTZ5osVTMckBv4MNGvoGImQVIBIUs=
Subject key identifier:   5F:B7:9C:9D:A7:58:77:7E:2B:AB:35:19:0B:33:AC:C2:42:4F:ED:27
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          A8
Signing time:             Sun 19 Oct 2025 09:23:53 +0000
Manifest this update:     Sun 19 Oct 2025 09:23:53 +0000
Manifest next update:     Sun 26 Oct 2025 09:23:53 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: LF0nB84M3PFNSGBDvMains5FRITeTSmJlBzMqrXGbMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: Oct 19 09:23:53 2025 GMT
            Not After : Oct 26 09:23:53 2025 GMT
        Subject: CN=68f4ae29-f792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:a7:31:a8:eb:77:98:34:f5:ef:1e:a7:2d:
                    77:ec:21:64:c1:95:bf:c8:d8:a5:68:34:81:56:d8:
                    33:48:c1:d7:d2:e1:71:65:e0:ff:38:ae:aa:ee:0b:
                    86:56:1d:60:e6:61:52:52:81:65:92:77:2f:92:b2:
                    6c:7a:84:ae:9a:3f:82:de:27:66:b7:f7:8e:66:31:
                    1f:41:82:5c:83:00:b9:ff:09:66:76:d0:97:ad:be:
                    2c:9a:f4:03:90:07:15:7f:de:78:b2:5e:3f:b4:8b:
                    1f:14:67:ab:b3:95:c7:c9:6d:f4:a1:90:47:35:ea:
                    e7:15:75:38:f8:6e:79:10:ee:9c:20:ab:bd:09:e9:
                    e8:63:a2:d5:8f:9d:79:90:ad:c5:e3:b4:a2:a3:4f:
                    9e:18:7d:27:32:d5:f3:41:45:5f:31:26:e9:90:ec:
                    74:c4:9b:18:cf:9a:ea:48:41:8a:a3:15:eb:22:62:
                    88:43:ed:bf:bb:44:ab:c7:18:f3:bc:45:cf:aa:6f:
                    12:e3:79:2c:7b:20:be:d8:98:db:18:8c:8b:db:ab:
                    48:68:2d:81:4e:32:6d:fb:81:5c:75:a6:69:4b:ef:
                    85:98:03:63:44:62:d8:88:3d:dc:55:f1:d4:83:42:
                    f8:2e:2e:9a:33:9a:8d:4b:a1:53:e7:7d:5a:a8:71:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B7:9C:9D:A7:58:77:7E:2B:AB:35:19:0B:33:AC:C2:42:4F:ED:27
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:dd:b8:d6:5b:1d:bf:87:f4:32:5f:88:fb:8b:54:18:43:
         8f:c0:70:24:5e:5c:7f:9b:41:0d:e8:61:73:ce:07:75:63:79:
         be:52:ee:00:50:3c:b2:b8:6a:a8:b0:e7:e1:65:db:37:c6:97:
         32:98:a6:a6:91:00:cd:be:b2:9d:4f:77:ed:de:5f:33:c6:4c:
         91:45:b4:62:f9:cb:cd:49:ce:27:b3:0e:3c:61:7d:b2:07:18:
         c4:70:02:c9:6b:1c:8c:1b:0f:ea:31:a9:f1:68:68:cd:3d:6f:
         7b:b5:de:e7:b2:cd:0f:2e:52:b8:1a:3f:c6:c6:54:6c:74:0b:
         68:cd:9e:b0:a1:a8:ec:17:ca:9b:d6:d0:04:5f:07:1f:57:35:
         e1:e5:6b:e3:82:4b:63:0b:a1:d5:d1:5b:75:2a:f8:d7:98:c3:
         a0:55:30:e2:c6:b4:f3:d2:e4:42:ef:0c:0d:bd:07:f7:88:16:
         ef:35:f9:47:98:b4:7c:cf:c2:b1:31:d3:ca:18:74:a8:d7:ff:
         e8:84:ac:fe:bc:84:2d:e3:78:f7:5a:79:e7:73:89:b3:8d:53:
         79:56:5f:f3:df:7e:94:60:e2:34:77:dc:b9:9a:74:92:e5:f0:
         5e:5b:3c:42:52:4d:32:a9:93:21:9f:d2:48:17:13:a0:cd:90:
         e2:a5:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:01 2025 by rpki-client