Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          RRevxx+Dzks21i2Ih/OpFy7W+XEzik3PdezGQ/6i/+E=
Subject key identifier:   E7:3A:57:B5:FC:6B:23:D1:D7:8C:5D:FA:41:4D:0D:72:DE:A7:0C:4D
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          0226
Signing time:             Sun 19 Oct 2025 04:26:40 +0000
Manifest this update:     Sun 19 Oct 2025 04:26:39 +0000
Manifest next update:     Sun 26 Oct 2025 04:26:39 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: 3yBiibJK1ba+HeDMWQDVuvUX+6udJw/THv5dy5SmzUA=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: Oct 19 04:26:39 2025 GMT
            Not After : Oct 26 04:26:39 2025 GMT
        Subject: CN=68f4687f-ec54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:68:74:c5:70:dd:16:31:a0:4a:fe:f7:74:
                    3f:a2:83:6f:85:06:77:08:59:38:68:ed:fb:43:ab:
                    57:6e:07:45:d8:01:f5:26:1d:19:79:1c:28:46:6c:
                    f9:e3:9b:53:dd:2b:4d:9d:c6:4e:93:18:af:00:a4:
                    ab:64:6d:40:ff:3f:8b:15:37:4e:3c:c2:c5:81:b2:
                    e2:0b:2d:15:2d:38:eb:fa:41:82:58:07:6a:32:5a:
                    88:bf:c8:a4:a2:0a:ec:1a:de:9a:15:3d:47:ad:e4:
                    df:7e:18:02:b3:8e:85:2c:67:af:86:5f:c5:4a:e8:
                    71:2e:ee:d3:8a:f8:05:07:2e:02:83:ce:aa:e1:95:
                    87:bd:fb:6c:90:71:89:0c:70:e1:e5:6d:29:4c:0a:
                    38:b8:ec:3e:c7:ff:74:5e:c4:9f:c6:33:50:a2:bf:
                    7f:04:97:e0:4d:09:c4:9c:cc:02:2b:0b:6e:59:33:
                    11:81:1a:fd:71:34:29:a3:79:6a:61:59:fb:84:e5:
                    8e:90:8d:c7:76:46:88:8f:c3:3a:0e:57:23:1d:70:
                    fc:71:b5:1b:2f:2a:a3:43:b8:30:b2:09:c5:e1:b2:
                    03:c5:8b:92:9e:04:c7:f3:24:f1:9d:49:18:f9:bb:
                    35:9a:3f:61:1e:dc:4c:1d:bd:5c:10:61:c9:44:31:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3A:57:B5:FC:6B:23:D1:D7:8C:5D:FA:41:4D:0D:72:DE:A7:0C:4D
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:95:71:6c:d8:7f:2f:69:29:a8:79:ad:e9:f8:ef:5d:46:
         ec:09:af:94:52:e3:a1:e5:21:f3:32:46:bd:2c:93:ec:0d:f4:
         d5:e8:0e:bd:dd:bf:ee:70:ca:ba:6d:43:ec:6d:c4:62:3d:7d:
         3c:5f:08:47:74:04:ee:27:e7:11:23:9e:ef:9f:18:2d:98:fa:
         f2:a7:73:09:03:7e:95:78:77:cb:fe:76:17:32:f5:90:53:82:
         c8:b6:1e:d0:cf:4d:da:25:59:2a:94:7d:63:79:fb:6c:57:89:
         83:61:cc:11:df:fd:4f:c0:5a:aa:ff:ca:dd:fc:09:47:04:3c:
         79:29:d0:73:b3:ac:d4:eb:5b:86:21:cc:a9:80:06:f5:71:be:
         68:70:fe:ec:06:8b:6d:aa:67:95:12:31:8c:71:e6:02:6d:78:
         02:55:33:b7:ca:e7:dc:98:15:c5:e9:3a:81:50:9e:b1:dc:2f:
         38:fb:3f:19:32:75:87:8d:90:34:fd:34:8f:f5:2f:1f:aa:96:
         ae:ee:cb:dd:6a:e0:56:77:1c:27:6b:40:44:0f:d1:a4:d3:c5:
         db:1f:87:27:10:1f:28:0e:7f:5e:5f:2c:d5:06:f8:3f:24:cf:
         10:ef:89:a5:cb:ca:f7:36:0a:66:f2:8b:db:02:36:df:0b:55:
         e2:99:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:33 2025 by rpki-client