Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          iRszveM73VUvcAk8Z1YGrAWKUnLbWE/uN3k5WtecVw0=
Subject key identifier:   71:8A:F7:17:6A:7D:D8:29:22:6B:3C:09:6D:98:65:35:E4:D1:1D:BF
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       05E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          05DE
Signing time:             Sun 19 Oct 2025 00:38:15 +0000
Manifest this update:     Sun 19 Oct 2025 00:38:15 +0000
Manifest next update:     Sun 26 Oct 2025 00:38:15 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: u35RpX+YNXH01nOIdwbUXiBR1VWWEsDnSZe3nyTb9Ms=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Oct 19 00:38:15 2025 GMT
            Not After : Oct 26 00:38:15 2025 GMT
        Subject: CN=68f432f7-e0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cb:d3:fd:cd:c0:03:d7:dd:a0:a4:ce:fa:14:
                    45:21:7a:40:69:81:df:40:91:99:a6:7a:06:f7:e8:
                    37:2e:90:d7:54:71:b5:6b:ae:50:f8:af:6f:ce:3f:
                    66:f9:3b:0a:87:3d:5e:2f:40:c6:7e:bb:2b:57:56:
                    75:54:49:02:ac:87:f2:f7:b3:8f:48:a7:f1:89:50:
                    a5:32:ee:f3:cc:eb:05:29:04:63:ab:d8:88:79:da:
                    ed:70:56:b3:ba:d9:57:e0:f9:d5:9b:f0:2c:75:df:
                    75:83:d1:04:13:e3:a5:5f:28:d1:df:4f:38:cb:52:
                    29:26:ee:e4:74:b4:7d:51:7a:63:13:97:30:ae:45:
                    6f:1c:89:31:0d:26:9d:82:c5:ac:bb:fc:d8:89:cb:
                    fd:58:4a:82:2e:53:89:16:42:2f:73:92:9a:46:b8:
                    b6:6d:49:66:6d:c3:56:b4:e7:53:21:09:d7:89:7f:
                    de:1a:76:a6:3d:96:c1:38:dd:8d:f9:d3:33:04:57:
                    9e:ee:7f:83:16:22:95:ec:34:f4:f1:dd:b5:ee:68:
                    5b:77:f9:5f:29:b7:e1:24:26:28:e0:d9:42:03:bb:
                    29:2b:ec:db:da:92:07:f4:08:b5:05:36:e7:7d:05:
                    f6:c8:50:15:88:72:47:af:bd:9c:21:db:1b:ed:26:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8A:F7:17:6A:7D:D8:29:22:6B:3C:09:6D:98:65:35:E4:D1:1D:BF
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:50:e8:2c:80:ad:63:c4:02:2b:ee:4c:8f:22:54:38:f4:
         b2:96:85:ce:0a:6c:6a:4e:66:28:ee:ec:75:14:21:ca:65:84:
         c7:82:54:ff:59:46:69:d3:33:f3:9c:e0:58:9d:37:b6:f4:9f:
         51:d2:df:63:f9:a2:2e:4d:c7:5a:53:ee:7a:e9:97:19:85:e1:
         13:8b:77:ef:ed:41:70:64:29:a8:4f:a0:58:79:3c:21:75:4f:
         33:ef:a2:9a:76:fd:5e:95:4a:8d:5c:77:04:48:d0:d4:f3:61:
         34:8e:50:c2:02:13:90:81:df:c3:6d:41:c3:c1:d9:02:06:36:
         62:31:19:01:1f:89:19:ec:2c:ed:b1:5d:7f:e2:52:78:d7:39:
         2f:e0:9a:69:27:39:9d:48:57:91:05:0f:53:70:ca:2a:ff:ad:
         55:97:d8:58:e4:25:0a:a0:a8:97:63:bf:5d:f6:cd:18:42:17:
         dc:c7:e5:4f:9d:05:a0:2b:18:a9:a8:d4:1c:57:7e:5b:6f:45:
         4f:69:ad:99:49:ce:de:2b:4e:2b:01:6a:2c:b3:9f:e9:53:39:
         29:67:1c:45:6b:82:91:d0:07:10:46:6c:14:5a:9a:e2:eb:86:
         27:d6:c7:bc:46:1a:57:6e:ec:97:8f:02:c0:50:b0:f9:da:35:
         1f:26:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:30 2025 by rpki-client