Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File:                     W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier:          8WRPAHq6csSs+dBsDRXYePzTwzbWZABL6CEEhDQq0js=
Subject key identifier:   C2:A5:81:D4:99:20:E8:02:18:F0:A0:B4:83:3D:C1:81:16:C0:47:71
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer:       /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number:          013D
Signing time:             Sun 19 Oct 2025 07:11:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:40 +0000
Manifest next update:     Sun 26 Oct 2025 07:11:40 +0000
Files and hashes:         1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: q/P+iUs5gMYXVdXFtUw+zsgGlSqZGMB70QPpvIpE9Tg=)
                          2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=)
                          3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=)
                          4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
                          rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
        Validity
            Not Before: Oct 19 07:11:40 2025 GMT
            Not After : Oct 26 07:11:40 2025 GMT
        Subject: CN=68f48f2c-9d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:8f:6f:79:47:ca:c8:79:de:64:22:b0:24:
                    be:63:75:c2:9e:f1:31:1a:19:f2:bd:1d:29:2f:ff:
                    2e:9f:ba:ba:92:af:e4:c0:da:ee:60:f9:ca:54:9b:
                    75:14:88:bb:b9:05:8b:f9:b3:b5:92:8b:f2:5f:7c:
                    7c:0c:b6:d4:70:b7:0c:3c:c9:c6:da:18:7b:ea:42:
                    d8:70:eb:82:03:d2:89:fb:85:cb:6c:ec:36:7e:c3:
                    e6:46:f2:41:d6:6e:23:ae:df:06:67:af:18:8d:d9:
                    9a:48:62:33:9d:7a:3c:ce:f4:62:1b:cf:b5:b1:c3:
                    8d:99:83:e7:1c:5c:10:12:09:57:ad:59:b0:7c:3d:
                    c8:8f:87:ae:9b:b1:51:1b:42:c6:08:23:3e:8a:6f:
                    2d:7d:75:3b:a2:b1:16:37:d9:3d:dc:8c:33:6e:16:
                    f2:6b:bb:a1:c3:1c:21:2f:00:9e:5f:71:83:19:8d:
                    6c:7b:f2:3e:35:d6:7e:72:79:9e:9f:16:48:29:08:
                    3b:ae:aa:d5:f1:20:05:07:09:f4:59:c7:a7:f1:cd:
                    13:93:d2:4a:31:a6:d1:87:75:63:07:08:31:e0:56:
                    84:05:54:1e:ec:9d:d6:56:ad:9d:5c:ff:54:bb:13:
                    e2:36:f6:f8:78:ef:96:29:3e:63:a4:a5:f7:e4:7a:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:81:D4:99:20:E8:02:18:F0:A0:B4:83:3D:C1:81:16:C0:47:71
            X509v3 Authority Key Identifier:
                keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:76:13:cf:87:b2:fe:33:e2:19:05:09:0b:0e:55:74:1e:
         c8:63:61:0f:d2:b9:1b:03:3f:c3:fd:1b:be:ac:72:e7:35:58:
         9e:e7:a8:78:eb:52:0e:78:0f:18:ef:b5:0e:be:4a:e5:29:ea:
         04:6d:9f:12:f6:49:65:3f:f1:fe:6e:68:4a:d9:fc:30:da:ce:
         7c:61:c8:86:fe:91:56:66:a3:bc:24:c7:29:e9:4b:14:6b:05:
         f9:f1:e9:a3:06:2e:40:0c:3d:3a:24:88:24:45:80:7f:7b:4f:
         d6:df:06:8a:9b:be:7f:60:75:7e:f3:c7:2b:b3:2f:21:8f:45:
         32:e2:cb:80:25:48:ff:59:2e:04:a0:f1:ef:b3:37:5c:7e:75:
         40:09:c1:ba:23:d9:9e:61:2a:df:f7:00:a0:b7:05:c4:2d:8a:
         ee:74:88:ab:53:2b:a6:e6:59:60:89:71:f7:a3:d1:a9:18:34:
         45:bf:b5:0e:d0:a8:f6:ed:60:34:5d:3a:0f:75:dd:65:b7:c7:
         e4:63:55:65:45:b2:47:03:02:26:d7:23:47:32:cb:62:da:ac:
         35:db:8c:4a:82:d7:83:1b:25:b8:63:45:5c:84:8c:7c:d4:4c:
         94:b7:24:03:d6:60:35:eb:52:20:64:bc:fa:19:9a:15:34:37:
         c9:6f:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:31 2025 by rpki-client