Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File:                     wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier:          G6rzq3ZQ3Hq85LQ4+fn0F3p1VjC1G1xRzXY4uh5O3XQ=
Subject key identifier:   5D:81:2A:D6:1C:88:91:34:86:03:EB:34:06:45:AE:E8:AA:B5:1B:22
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number:          50
Signing time:             Sun 19 Oct 2025 10:40:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:40:44 +0000
Manifest next update:     Sun 26 Oct 2025 10:40:44 +0000
Files and hashes:         1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: weurr3q2P7T3aERFDyfIZlgXJBsEU86gyatvDxLIciE=)
                          2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: Oct 19 10:40:44 2025 GMT
            Not After : Oct 26 10:40:44 2025 GMT
        Subject: CN=68f4c02c-5f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:c6:de:bf:82:47:7d:d1:1d:32:17:4f:04:
                    69:b3:00:c9:4a:a8:76:c3:a0:c9:84:6c:34:ab:bf:
                    ff:c5:10:11:88:ef:19:c6:e5:dc:85:e6:8a:36:4f:
                    41:d4:bb:eb:a8:b6:9c:ea:ab:7c:41:7b:5f:10:e1:
                    f7:1c:87:0b:1f:f8:14:67:26:f7:37:57:a5:77:f3:
                    67:7a:1b:dd:40:e4:31:ae:de:48:02:73:bf:65:0b:
                    29:09:75:22:f4:6d:d1:a2:86:af:bb:03:04:8e:48:
                    75:49:22:49:b7:10:67:9e:e4:37:8d:1a:17:d9:38:
                    d2:54:ba:f6:ab:7e:c2:a8:6d:f2:93:59:8c:fb:c5:
                    34:20:a2:44:70:e7:ff:cd:d7:48:c0:47:73:06:d4:
                    fc:f9:4c:51:75:1e:5c:cd:ae:b6:c7:58:9d:54:fb:
                    5c:f8:ac:6d:04:7e:59:07:d6:63:08:1b:0c:4a:0b:
                    12:bf:7c:0c:b3:65:19:97:25:c2:44:b3:d2:7b:4d:
                    a1:ba:ff:a0:4c:62:5a:ee:bb:20:a5:90:73:8b:48:
                    e4:5d:0d:55:f8:82:02:65:05:23:cb:41:38:20:74:
                    f1:1a:d7:8a:d1:10:87:dc:63:6b:6b:be:07:6a:db:
                    b7:7c:8f:88:1e:04:d3:8b:dc:42:ca:a3:ee:47:38:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:2A:D6:1C:88:91:34:86:03:EB:34:06:45:AE:E8:AA:B5:1B:22
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:05:21:7c:7d:24:b9:e2:6c:44:88:2f:c6:19:50:ce:94:0f:
         ad:95:4a:68:aa:c0:b4:bf:0a:0c:28:03:46:25:ff:35:eb:19:
         4e:4b:48:c0:9d:d6:15:0a:af:0e:94:45:59:04:67:f5:32:66:
         09:28:92:33:40:52:f0:55:86:24:7d:40:30:ec:01:02:8b:c8:
         7b:13:fb:e6:b9:d3:bc:cf:9b:f4:fd:5e:91:22:ae:1d:4e:28:
         7f:4d:1f:77:d6:64:60:fb:55:4c:12:f5:3e:83:e7:f4:ed:a6:
         b8:63:4c:9b:51:55:51:84:76:c8:99:28:aa:f9:7e:8f:71:39:
         23:fd:43:02:f3:ea:cd:86:95:bf:89:3b:5f:e9:fe:9f:83:2e:
         4f:42:62:83:c4:dc:a2:51:42:ea:4a:89:f0:1a:7e:d7:a1:c3:
         6d:38:c2:e0:f2:39:7e:10:1c:51:90:92:e8:04:a2:f6:d7:9f:
         5f:ab:d3:fb:6d:e3:34:b2:e8:0e:d5:ba:bc:42:ad:bb:00:49:
         60:32:3b:d4:7a:e4:4c:87:6d:aa:c4:f6:03:28:cd:31:9a:e6:
         88:c5:c0:0d:06:27:37:97:8c:3f:12:c5:77:23:eb:93:0d:98:
         aa:43:7b:46:3b:95:8e:e8:48:5b:2d:8d:d2:2b:6f:f1:07:ef:
         25:c1:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:12 2025 by rpki-client