Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File:                     wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier:          TeladzRZJKbY2Gx5d98DK9AUQhF4HeGSQV4OlXD6J7I=
Subject key identifier:   56:18:B7:A2:46:07:50:41:6B:F6:FD:32:19:6D:B8:AF:97:82:39:D6
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer:       /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial:       34E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number:          34D8
Signing time:             Sat 18 Oct 2025 15:13:06 +0000
Manifest this update:     Sat 18 Oct 2025 15:13:05 +0000
Manifest next update:     Sat 25 Oct 2025 15:13:05 +0000
Files and hashes:         1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: N2Rq93J22OlrmG+nPq8p161VogKIoD6wTS+ZxUuo0qc=)
                          2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: sb92Yiu1DkaA/Jlw4YPyCeHs7T2hutc7NkpwUwObZxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
        Validity
            Not Before: Oct 18 15:13:05 2025 GMT
            Not After : Oct 25 15:13:05 2025 GMT
        Subject: CN=68f3ae82-1c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:9f:35:fd:98:cd:5b:80:fb:e0:a3:2b:f5:
                    10:d3:8e:f8:22:d1:57:38:c8:8c:2d:e3:e6:75:22:
                    03:96:bf:4c:b5:42:82:ce:2c:66:1c:59:4d:29:4e:
                    2a:3f:e0:88:6e:95:c9:ed:e7:57:39:3d:cf:98:af:
                    2f:20:73:bf:96:aa:b0:f7:3d:80:5d:e2:e5:92:68:
                    bf:1a:b9:7f:22:fd:2e:06:01:90:8b:cf:95:b4:cb:
                    8a:e9:2f:29:b2:b2:45:ce:3b:8b:3c:cd:b6:ef:2c:
                    83:6a:30:c2:57:95:c0:fc:aa:cf:9e:47:21:50:d3:
                    f8:2f:0b:14:7c:81:4c:97:e7:af:f0:1c:ce:e0:2b:
                    3e:09:af:19:77:55:0d:39:46:6e:00:b7:9e:0a:2f:
                    2c:d3:c4:f1:d3:62:60:6d:25:7e:bc:b1:54:7c:6c:
                    68:eb:4c:39:75:86:37:f1:9c:96:4d:cb:1a:a4:4a:
                    fe:b8:2a:54:22:eb:be:bc:06:aa:72:17:44:e1:95:
                    bd:97:8f:45:fb:93:b9:3f:71:50:4b:b4:c6:f1:f4:
                    1b:cf:11:2d:e2:c2:4b:3e:a0:4b:d6:68:d4:f8:40:
                    7d:0c:72:c2:bd:51:1f:e9:4a:1d:35:e9:0f:b5:5e:
                    e9:8e:92:28:2b:ab:2e:6d:d6:dd:d7:bf:d8:e7:9d:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:B7:A2:46:07:50:41:6B:F6:FD:32:19:6D:B8:AF:97:82:39:D6
            X509v3 Authority Key Identifier:
                keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:97:54:b1:37:5d:60:93:fe:7f:25:fd:98:0c:ad:bf:04:60:
         c1:32:b3:0a:59:9e:d9:ff:7f:e6:ed:df:83:5f:52:d2:d9:74:
         10:6b:f1:34:a8:6d:03:c6:bc:bd:13:07:c4:ba:ff:68:2c:b7:
         79:be:c6:f2:d2:1e:1b:c7:c6:b4:3f:3e:d5:45:eb:9a:90:51:
         fb:b2:0b:85:9d:cb:2d:64:0b:f4:d6:71:d0:7a:90:43:21:6b:
         9d:9f:ca:f8:d2:bf:26:6e:25:2e:d4:1f:49:aa:3d:34:f2:6c:
         8e:4f:40:08:a2:4c:b6:9e:65:b4:b0:e8:6e:db:5f:a8:5e:8d:
         cd:fd:70:4a:6e:0c:3b:27:5f:30:87:5c:d5:93:29:5e:7d:55:
         72:44:1f:2e:50:9b:f3:c2:fc:02:33:07:e9:20:82:40:da:32:
         20:1d:a1:3d:7c:4d:b3:7f:1c:f1:bb:2e:b5:9b:41:9e:54:74:
         7f:ff:b8:27:79:1c:a8:ec:fe:5a:b9:91:f8:90:af:94:c8:eb:
         6b:be:1e:76:35:56:4b:f2:51:74:9a:bc:d7:44:4b:dc:ad:f7:
         a2:5d:3c:16:f8:05:f1:43:f6:1d:57:f0:a9:e6:99:b9:93:53:
         00:b1:4f:66:03:e2:ae:22:37:44:0c:f8:81:48:fd:b3:3c:95:
         7b:39:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:59 2025 by rpki-client