Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File:                     WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier:          mz0GHgYS9rR0HQrXJrKkRAqxmYtm2gOQ6R7JF3dyyjo=
Subject key identifier:   A0:59:8D:FD:29:06:2E:A8:4C:1C:6A:F6:6B:07:DE:5C:F9:99:7D:22
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       0635
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number:          061C
Signing time:             Tue 04 Nov 2025 22:56:40 +0000
Manifest this update:     Tue 04 Nov 2025 22:56:40 +0000
Manifest next update:     Tue 11 Nov 2025 22:56:40 +0000
Files and hashes:         1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: yUK6WJ2uf8IVY2gMo7vhFLopBOSv5OmnBT+jUrv7Y3Q=)
                          2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=)
                          3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=)
                          4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=)
                          5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: Nov  4 22:56:40 2025 GMT
            Not After : Nov 11 22:56:40 2025 GMT
        Subject: CN=690a84a8-f081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:06:8b:3b:a7:52:e2:11:2b:1d:b3:cb:7f:
                    92:8c:7c:0b:3d:70:97:72:4d:f2:a7:11:0a:f9:4f:
                    b5:ce:59:ea:29:08:b1:72:a7:56:f3:71:4f:a3:1d:
                    cb:b7:92:bb:34:f8:88:06:75:7f:8e:2e:dc:95:64:
                    61:05:6a:74:88:89:c2:3f:69:dd:b9:73:ec:d4:a4:
                    87:64:02:85:e8:f9:73:21:7c:13:1f:0d:98:94:d7:
                    ae:9b:f2:4d:f1:e4:13:e8:0d:95:48:54:f5:3f:f7:
                    b9:4f:30:90:07:cb:43:2f:bc:8a:3c:3f:ec:52:f0:
                    9d:0d:b4:ac:c8:bb:7a:33:f3:c3:a8:3c:88:d9:8d:
                    1d:1f:8b:d9:d7:e6:f4:9f:07:d5:b0:4f:24:05:7d:
                    1d:bc:9c:75:5e:3d:67:04:64:aa:f1:57:1e:cc:bf:
                    63:72:e6:1a:da:b1:84:98:6e:bf:e8:79:ed:bc:cf:
                    47:c2:e2:bd:bf:2b:ed:34:c3:69:79:09:6b:3b:3c:
                    91:f1:ac:73:28:74:21:0c:03:37:2f:7c:f0:b2:30:
                    c2:fd:b4:36:ab:83:76:ff:5e:65:59:fa:2e:32:36:
                    2d:be:28:07:89:b4:a8:3a:ad:3d:9d:fd:fe:73:5a:
                    15:a5:9b:8b:65:7e:d8:28:97:eb:9a:c4:4a:41:9a:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:59:8D:FD:29:06:2E:A8:4C:1C:6A:F6:6B:07:DE:5C:F9:99:7D:22
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:a8:85:34:01:23:87:f7:de:fc:8f:00:88:ab:4f:ca:fd:
         4a:a9:04:9b:32:cc:9a:b9:50:b3:ed:1a:3d:30:75:cc:c3:a5:
         f2:1e:3d:73:5f:fa:a8:75:b4:5a:8f:e2:80:fb:c7:08:c6:ed:
         fc:3c:b9:4f:34:a6:38:a5:12:5b:1c:14:1f:76:2f:19:48:67:
         22:84:69:f4:98:74:c2:c3:9e:2c:55:58:f6:de:26:fd:f0:e1:
         14:68:f8:33:1e:40:82:1c:44:91:1c:0b:05:cc:73:56:ed:ab:
         2d:d0:98:c1:96:4d:6c:7f:c2:49:9c:07:23:f1:57:26:2d:9e:
         1a:8b:1b:10:a5:54:7f:95:3d:04:a3:81:9c:74:e9:da:a1:cb:
         b2:3e:a6:df:d1:8a:b7:ca:54:16:71:ad:86:48:71:1e:69:80:
         bf:b4:75:19:f2:67:0f:89:c7:36:a8:58:7c:bb:b6:25:3e:94:
         d2:b8:11:fd:88:28:e5:3b:64:93:5b:43:0f:0d:45:9a:65:85:
         7c:15:01:34:50:d1:4d:76:80:f5:9b:33:7f:34:28:83:5f:d3:
         1d:e3:3f:c5:25:70:13:ce:60:97:7c:6f:9a:00:0b:95:9e:b8:
         8f:e2:6a:fc:1c:7f:0a:28:e9:62:69:79:90:03:8d:65:ec:d6:
         d6:b9:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:19 2025 by rpki-client