Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File:                     WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier:          R3nZHKJzT1CpI4hXHWmtVqFibvpzfgIHB8RWjveqDLk=
Subject key identifier:   25:E6:16:A7:2F:27:99:A2:EF:59:83:CE:B7:A2:92:74:81:F9:11:5D
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer:       /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number:          020C
Signing time:             Sun 19 Oct 2025 04:42:50 +0000
Manifest this update:     Sun 19 Oct 2025 04:42:49 +0000
Manifest next update:     Sun 26 Oct 2025 04:42:49 +0000
Files and hashes:         1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: lu5Dv55qxsK90Sdy6QstANB3GlURRBT8Re6Rmqt/Ikk=)
                          2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw=)
                          3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
                          rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
        Validity
            Not Before: Oct 19 04:42:49 2025 GMT
            Not After : Oct 26 04:42:49 2025 GMT
        Subject: CN=68f46c49-2994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:db:4c:33:3e:3e:ff:e8:ac:d6:fe:44:68:
                    b5:df:5b:4f:7c:0c:f3:be:6c:0b:2e:b5:5d:8f:31:
                    bb:37:a4:a4:52:4e:f2:ba:36:9a:1d:f1:cc:3c:11:
                    9a:b1:2c:48:b9:d9:31:ed:a4:2c:7e:c5:e9:a7:d0:
                    74:11:6e:3f:e4:ea:06:92:6d:7a:f1:fb:12:4f:9a:
                    cc:35:7d:c4:76:bd:c5:5c:1b:e2:c4:1d:b0:1d:d4:
                    79:66:51:ee:6f:99:77:93:b1:57:4f:11:42:f3:31:
                    7d:bf:5a:46:d2:0e:65:6b:d9:dd:4d:70:f9:90:40:
                    28:59:0b:e7:7b:48:11:5c:f9:3e:4e:96:e9:3f:da:
                    76:02:2c:a1:2b:f4:63:66:7c:bb:5c:0c:3c:97:64:
                    84:fb:94:82:85:b9:8b:51:8e:68:0a:9f:fb:53:b1:
                    3a:94:78:af:aa:dc:68:79:6b:a9:8a:8e:38:3d:d6:
                    58:c9:45:26:c6:76:5b:7f:88:ed:a6:78:c2:f1:2c:
                    f7:29:3b:ee:79:71:0c:e4:d9:12:3c:b2:a2:ef:db:
                    f4:6f:6f:b1:0e:ec:61:87:a6:3a:e9:c5:6f:89:49:
                    f0:dd:42:b6:67:03:79:1a:70:58:a8:52:7c:be:51:
                    61:9d:44:fb:1a:26:d6:db:ae:1b:58:f4:d3:9e:17:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E6:16:A7:2F:27:99:A2:EF:59:83:CE:B7:A2:92:74:81:F9:11:5D
            X509v3 Authority Key Identifier:
                keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:2a:17:89:d3:fa:68:5a:d9:e3:d4:e8:18:2d:16:92:ed:
         e5:a6:50:37:c3:72:78:1b:8c:6a:41:59:78:f5:a2:41:1e:5b:
         dd:ed:bb:4f:8e:74:db:49:f9:75:b0:21:49:95:cf:6b:50:65:
         92:84:4e:9b:15:a0:70:af:73:b4:90:1e:ef:48:a2:fd:0c:c6:
         10:4f:6a:0b:75:1e:bb:a7:b5:91:a0:9d:53:c5:b9:ec:fe:04:
         a5:a6:fc:0c:51:08:5b:2c:d3:59:61:70:e8:90:a2:db:88:4d:
         16:80:26:7a:be:f0:1a:95:af:aa:ae:0c:58:01:ce:d4:c7:ba:
         29:bd:5f:08:d4:f8:4d:29:f4:d6:85:fb:05:f9:83:8d:07:80:
         95:a9:71:7b:73:ef:9d:29:26:11:c7:45:9a:f0:dd:3d:4b:bd:
         fb:53:d2:f0:68:eb:32:a3:a0:91:32:d1:67:66:b6:68:fe:c2:
         21:23:80:f1:82:22:c5:6c:aa:3c:2c:01:9a:f2:d3:35:92:fc:
         ff:eb:13:88:7a:30:e7:48:4e:12:fe:2d:f1:71:4d:61:1e:b0:
         53:ca:12:21:69:23:99:3a:6e:48:63:29:d5:2f:82:36:a4:16:
         82:48:2c:bc:19:74:5f:e8:45:39:61:0e:c5:1c:b6:97:f8:a9:
         b2:86:87:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1
NzZBMTI4M0UwHhcNMjUxMDE5MDQ0MjQ5WhcNMjUxMDI2MDQ0MjQ5WjAYMRYwFAYD
VQQDEw02OGY0NmM0OS0yOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGDbTDM+Pv/orNb+RGi131tPfAzzvmwLLrVdjzG7N6SkUk7yujaaHfHMPBGa
sSxIudkx7aQsfsXpp9B0EW4/5OoGkm168fsST5rMNX3Edr3FXBvixB2wHdR5ZlHu
b5l3k7FXTxFC8zF9v1pG0g5la9ndTXD5kEAoWQvne0gRXPk+TpbpP9p2AiyhK/Rj
Zny7XAw8l2SE+5SChbmLUY5oCp/7U7E6lHivqtxoeWupio44PdZYyUUmxnZbf4jt
pnjC8Sz3KTvueXEM5NkSPLKi79v0b2+xDuxhh6Y66cVviUnw3UK2ZwN5GnBYqFJ8
vlFhnUT7GibW264bWPTTnhdZVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXmFqcv
J5mi71mDzreiknSB+RFdMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2
NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE
ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCj2yoXidP6aFrZ49ToGC0Wku3lplA3w3J4G4xqQVl49aJBHlvd7btP
jnTbSfl1sCFJlc9rUGWShE6bFaBwr3O0kB7vSKL9DMYQT2oLdR67p7WRoJ1Txbns
/gSlpvwMUQhbLNNZYXDokKLbiE0WgCZ6vvAala+qrgxYAc7Ux7opvV8I1PhNKfTW
hfsF+YONB4CVqXF7c++dKSYRx0Wa8N09S737U9LwaOsyo6CRMtFnZrZo/sIhI4Dx
giLFbKo8LAGa8tM1kvz/6xOIejDnSE4S/i3xcU1hHrBTyhIhaSOZOm5IYynVL4I2
pBaCSCy8GXRf6EU5YQ7FHLaX+KmyhocE
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:11 2025 by rpki-client