Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File:                     wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier:          vfC5J6/1pp8DrnwsniwuK+0uiXSgaq9/s3eFvn0EMbU=
Subject key identifier:   7C:B9:D8:A8:27:94:AF:F8:6F:78:24:EF:F3:12:43:7F:0D:F1:C3:09
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer:       /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number:          0107
Signing time:             Mon 03 Nov 2025 05:06:34 +0000
Manifest this update:     Mon 03 Nov 2025 05:06:33 +0000
Manifest next update:     Mon 10 Nov 2025 05:06:33 +0000
Files and hashes:         1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 07UPt41zmjY4Njc3D1GlWxYdaMW8zQv8h1UYdhb4hb8=)
                          2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=)
                          3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
                          rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
        Validity
            Not Before: Nov  3 05:06:33 2025 GMT
            Not After : Nov 10 05:06:33 2025 GMT
        Subject: CN=6908385a-0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:81:21:46:dd:34:b0:cf:ef:09:fa:65:2b:
                    e5:ee:e5:2b:68:ce:78:57:e6:e6:05:11:10:c3:4f:
                    5b:e7:22:ec:8b:ca:58:3c:be:c8:75:ef:d7:e4:a0:
                    22:c1:e2:ad:a0:6e:26:db:62:df:54:02:7a:3f:c9:
                    69:27:2e:79:01:e2:14:63:e8:de:59:03:8e:50:20:
                    56:64:39:5b:39:31:9f:24:3c:e4:c7:d1:48:e0:f5:
                    36:81:19:a0:95:96:3a:65:56:03:bd:2a:b9:56:af:
                    16:e4:be:51:13:4f:06:05:ae:d0:07:4a:88:f8:b5:
                    5b:aa:b9:50:b2:22:84:ad:2b:0f:f8:a9:b1:e7:b5:
                    4e:11:ab:d8:b9:cd:f6:7d:e9:58:36:eb:61:b3:55:
                    03:e3:da:84:ae:1e:99:7f:a7:7a:da:b7:c7:79:08:
                    13:00:dd:09:97:81:4d:88:b6:60:4a:ed:77:23:a4:
                    df:64:1b:00:97:bb:c5:aa:ba:7c:b3:13:30:bd:2f:
                    fa:4b:7f:c3:22:1a:88:db:eb:3f:d1:34:de:48:d3:
                    4d:62:9b:9b:1d:75:ae:af:ae:5f:d4:16:dd:ef:6d:
                    0f:07:fe:fe:2d:2b:ae:b2:1c:52:71:11:81:fe:ad:
                    4e:72:15:2c:d5:b4:9b:a9:20:4c:ef:68:30:2f:47:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:D8:A8:27:94:AF:F8:6F:78:24:EF:F3:12:43:7F:0D:F1:C3:09
            X509v3 Authority Key Identifier:
                keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:52:a6:42:5d:9a:01:e6:16:18:1d:ce:49:2b:c7:2f:0c:7a:
         36:dc:b4:32:6b:90:7d:15:7d:e9:2d:2a:2f:2d:fe:58:d8:d4:
         95:9b:58:c8:42:89:bb:4b:e3:5b:29:74:a8:0f:2b:96:f7:ea:
         75:e7:b0:ef:f5:ed:e6:48:41:6d:eb:db:0c:3a:2e:cd:e0:71:
         14:a2:ad:e4:fb:1f:23:27:8a:db:5a:cd:fb:94:cd:2b:fd:a5:
         f3:80:b4:29:57:dd:6a:8d:c1:a1:81:f7:94:7d:93:5c:02:de:
         07:f9:35:b4:a0:0e:30:f4:47:7b:1f:7d:1e:26:8e:01:6b:ce:
         8b:92:2f:42:3d:49:74:d0:7b:a9:bd:fd:cf:20:85:99:fc:51:
         6e:58:c8:bf:d3:44:8b:db:2e:26:ee:a5:3d:24:cc:8c:1e:a6:
         c6:3a:40:6d:1f:2e:a5:5d:46:65:26:ff:e1:6d:3b:2e:82:fc:
         5b:9a:01:8f:6f:b7:bb:30:90:d9:d1:2a:2b:ae:fb:fc:09:fd:
         7b:95:6f:b4:4e:51:9e:fb:68:da:a1:f1:80:0f:66:89:29:a7:
         00:92:47:e8:77:1e:c1:fc:9a:ba:01:b6:c8:7a:0d:cc:81:74:
         f1:66:f1:66:68:f0:99:65:de:bd:43:85:50:e9:c6:97:cd:f6:
         5b:47:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:06 2025 by rpki-client