Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          OwqafuSXcjuEu4FOxqEzm0MB+YO3hkEX5+j+mfdVUxQ=
Subject key identifier:   2A:F9:CB:3F:F6:8D:ED:F4:B3:34:8D:3E:FB:1D:34:B1:9E:16:5D:B0
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       10B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          1057
Signing time:             Sun 02 Nov 2025 17:26:54 +0000
Manifest this update:     Sun 02 Nov 2025 17:26:53 +0000
Manifest next update:     Sun 09 Nov 2025 17:26:53 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: rIRGmxjrglPVKLDAS3dTQeBEW3m5vEjfoMgwKVP5CrA=)
                          2: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=)
                          3: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: zMozM34kF4fkjssWZFKOWwbNxC8ctpO0n/S6xmrGp2U=)
                          4: 9D164714168511EAB282BB44C4F9AE02.roa (hash: UC9oT442f5r3Ad6bt4fyBW43wCVQtsSkEeag4T2t06g=)
                          5: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: DMn88YNhtANf7oJNpEm/YcL69wX9rnoBHpOTc6fAMAs=)
                          6: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: q9NbetQ6RooEPqs7Z6/euz24xz0gLtevk3mcKB1IVZM=)
                          7: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: 0pajmOLzTfRxXN+jwLdgr/HPuMFyL3nbTNRtA04jmts=)
                          8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: zMOHMtYvfaZCDF6LwsEB8Dwbb4ZwRXv/YDIZ3yaOB+U=)
                          9: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=)
                          10: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=)
                          11: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: hOh5ZVZ+qFHQ5JWAOKeMOjW8ikSLX180HH4vgbhOg/c=)
                          12: 884A03F4447111EC83674068C4F9AE02.roa (hash: s7v3d/BTSW73Xtn7csGrhdpLigXtwYTrO1GpRuSnwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4274 (0x10b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Nov  2 17:26:53 2025 GMT
            Not After : Nov  9 17:26:53 2025 GMT
        Subject: CN=6907945e-0e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:5a:8b:55:40:84:45:77:a7:f5:fe:2b:6e:
                    e2:a1:a2:e5:9f:01:39:b8:60:28:56:7f:25:ca:45:
                    f2:90:ca:c9:41:d2:eb:1f:9e:48:e4:ff:a8:65:11:
                    9b:ea:92:a7:16:e2:3c:ba:54:0a:60:55:ef:37:19:
                    29:e4:f5:e4:a5:7e:61:36:aa:0e:7e:af:61:e6:30:
                    fc:2f:33:8d:b7:60:ea:99:a1:05:7e:25:21:18:91:
                    3d:b4:9b:b0:03:83:ad:7d:3e:9c:df:28:99:76:a4:
                    9a:4d:f8:b6:8e:75:71:db:f5:6d:ce:9f:b2:59:eb:
                    fb:06:b2:f1:b9:d3:8b:51:22:89:1f:31:d0:c7:c2:
                    c0:e5:e9:3b:d4:0e:34:e5:73:a0:24:89:9a:98:42:
                    9e:fa:2e:53:51:9a:e8:3c:a1:15:50:d3:87:5f:48:
                    90:9b:38:75:bd:72:84:49:0c:4a:e3:f4:4e:e4:b6:
                    c2:33:7d:fa:c4:45:c4:fd:a4:6a:44:80:90:4d:9d:
                    15:a8:29:cc:81:65:b7:fd:68:a0:63:f0:06:55:0c:
                    a5:00:8f:a2:8a:99:33:11:25:93:b6:8b:59:74:70:
                    f9:fc:9d:73:9e:be:52:f9:06:e1:47:d2:a8:c0:86:
                    36:75:e8:a4:e2:a3:2a:92:ea:a0:2a:e9:a3:1c:df:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:CB:3F:F6:8D:ED:F4:B3:34:8D:3E:FB:1D:34:B1:9E:16:5D:B0
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:09:2e:ad:40:3f:98:32:8f:36:22:05:4b:91:9b:97:0e:
         41:44:1c:f9:c7:ce:f9:ba:cf:76:89:8c:50:2d:49:e0:14:e2:
         20:cd:fa:73:9b:ec:ac:42:94:93:fa:d7:32:88:26:ad:44:6d:
         af:ef:0c:9c:a7:cf:af:de:91:9f:a9:03:6f:a7:0f:fe:6e:07:
         b0:58:6d:e3:f5:26:9f:49:96:f3:d1:05:62:36:f6:91:86:e0:
         0d:d3:ce:3f:85:1e:54:38:6e:21:7e:83:58:0f:b1:f0:73:47:
         47:f0:18:02:0e:90:fd:d2:3b:8c:79:63:8f:ad:25:09:4a:9b:
         53:20:1a:4c:18:1c:da:72:4a:73:ba:1d:c6:96:6e:df:05:33:
         cd:29:d8:97:18:80:ef:24:31:71:09:1c:ba:50:36:78:6c:23:
         61:e7:0e:01:11:46:09:fc:66:5e:56:ac:9a:99:f5:a5:d1:58:
         5d:94:b0:1f:66:98:2b:2b:5d:c2:1a:56:de:d8:7a:2a:a4:9d:
         25:b4:f5:d2:17:ad:8d:27:41:dc:09:5f:82:91:ca:34:c0:6b:
         40:39:c8:78:a4:cd:81:92:77:38:bb:41:bd:df:76:c9:06:bb:
         10:36:4c:ce:73:03:62:d6:90:64:cc:39:25:ee:1a:ab:fe:7b:
         be:63:0f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:11 2025 by rpki-client