Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File:                     WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier:          RDY7j+1PGQqymhitZMEdUfntGI6jU5tbPgt1YjJcD4Q=
Subject key identifier:   39:B0:13:C4:FD:DB:1C:20:31:D4:8A:6A:8F:4D:FA:A6:3A:FE:C3:0E
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer:       /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial:       21A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number:          218B
Signing time:             Sat 18 Oct 2025 16:10:23 +0000
Manifest this update:     Sat 18 Oct 2025 16:10:22 +0000
Manifest next update:     Sat 25 Oct 2025 16:10:22 +0000
Files and hashes:         1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: OBd5NpV4fc8RHMP7hfsXpnMTHBQ41kGOc8JF3p9dsZ8=)
                          2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=)
                          3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8614 (0x21a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
        Validity
            Not Before: Oct 18 16:10:22 2025 GMT
            Not After : Oct 25 16:10:22 2025 GMT
        Subject: CN=68f3bbef-d3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8f:5d:d4:4d:c3:25:af:45:e7:58:55:8f:a3:
                    fc:bc:01:8e:75:12:2e:30:85:3b:6a:51:59:30:e8:
                    79:15:83:e7:2b:d4:42:dd:10:6a:95:59:2a:c0:f9:
                    0c:80:6c:aa:b0:00:9d:b2:d7:84:d7:ee:a9:13:5f:
                    b3:f7:00:b9:10:fb:f8:ef:fa:a8:bd:0e:b1:b2:49:
                    5b:39:5f:52:f7:25:67:ef:2b:49:c4:7d:fd:ef:86:
                    f4:70:70:3a:41:39:31:eb:fb:47:af:e3:9a:a0:c6:
                    01:bc:fd:3a:f4:f3:61:e7:2d:67:ae:ee:7d:09:55:
                    71:f8:45:bf:8a:4f:6f:76:e9:fd:2c:2d:cb:e5:c2:
                    b1:a6:ad:a4:2d:56:33:51:06:b1:93:62:46:1a:6c:
                    c4:18:b8:24:26:1c:49:6e:2c:72:fc:ec:51:ef:14:
                    02:0f:b6:77:b7:53:3f:5c:30:c7:ca:fe:fd:88:79:
                    54:a8:a1:54:87:1c:40:fa:97:28:93:b3:48:1f:b7:
                    c3:b8:0e:6b:87:5e:d0:08:d6:b4:9b:03:a6:3c:36:
                    e7:2a:6e:9f:9a:93:86:40:da:a3:15:3b:23:3a:d7:
                    12:ab:dd:4b:85:3f:af:c3:d7:4d:31:24:e8:f1:b9:
                    2a:70:89:88:03:46:29:24:2e:7b:a6:e9:99:35:06:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:13:C4:FD:DB:1C:20:31:D4:8A:6A:8F:4D:FA:A6:3A:FE:C3:0E
            X509v3 Authority Key Identifier:
                keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:28:aa:81:0c:b6:e0:78:6f:97:5d:87:23:9f:4b:59:be:21:
         6c:35:c6:01:b4:fc:0e:30:07:16:b0:05:63:c0:6b:19:72:f7:
         0f:4d:1d:ca:a2:7d:ed:d8:a6:d1:23:7f:59:94:7d:dc:37:24:
         c2:d8:bb:2b:00:30:9a:e7:d2:02:6a:96:f1:ba:61:1e:79:96:
         06:34:9f:c4:e9:8d:3c:04:ff:88:92:c6:5f:05:11:43:39:54:
         bc:0e:0c:1f:c3:c7:37:8e:ad:88:3a:b1:41:04:90:ca:5c:9c:
         be:2d:4f:9e:f6:54:d5:e9:b2:59:2d:6c:37:7b:da:05:67:d0:
         26:6e:ec:be:46:39:ef:f7:55:64:1b:5f:8b:73:1f:f6:62:c6:
         62:35:41:71:34:cd:70:cb:f4:e4:2e:5a:d2:5f:d2:06:c3:40:
         c2:de:47:88:37:c4:d7:59:f4:c3:76:6a:0c:76:0f:5f:51:19:
         05:0b:33:3f:de:28:65:07:51:dd:f3:d4:f0:0d:e9:c2:5c:34:
         bc:f8:e0:2f:ed:47:4c:3d:75:48:18:a3:3c:a8:98:9b:2c:5c:
         a9:45:59:2d:18:7f:b5:dc:cd:84:f3:36:a9:f2:a4:e6:f9:75:
         4c:d5:82:93:0d:49:c3:8a:a4:9b:24:c1:21:a6:bc:e6:27:88:
         c8:b6:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:27 2025 by rpki-client