Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File:                     wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier:          4p1Gp84WSIt9wWNSmRpXZ3I7ypOtHXi0cLKV7RKY1xc=
Subject key identifier:   97:25:D3:7B:F6:DC:4E:AE:89:1A:27:CD:1E:74:FB:31:2F:34:A1:91
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer:       /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number:          E4
Signing time:             Wed 05 Nov 2025 05:38:05 +0000
Manifest this update:     Wed 05 Nov 2025 05:38:04 +0000
Manifest next update:     Wed 12 Nov 2025 05:38:04 +0000
Files and hashes:         1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: WO2+y6/3KxFpt9CJ5cZeQpUTnrmDld4COamKecj9FeQ=)
                          2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 9QvR+q9usp35MPBZykna9F1NepFSoFk8M5dJdWZQYbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
        Validity
            Not Before: Nov  5 05:38:04 2025 GMT
            Not After : Nov 12 05:38:04 2025 GMT
        Subject: CN=690ae2bd-74ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:6a:f1:f9:e7:2b:17:29:9a:0a:7c:75:5a:
                    b7:2c:24:52:64:ed:e2:d0:e0:04:8f:a7:93:7a:62:
                    ca:46:2a:30:6e:35:3c:07:27:f5:65:dd:a9:92:3c:
                    35:fb:fb:8c:b5:4e:5c:38:bc:1c:65:e6:bb:2c:49:
                    d3:a8:c1:5c:ee:24:8f:06:8b:1d:4b:4b:0d:ef:ae:
                    ed:77:fb:fd:08:65:33:9c:61:ff:25:1b:25:eb:9b:
                    82:7f:c0:65:de:b1:e7:1c:8e:d0:ff:db:82:47:3d:
                    31:bf:d8:85:8c:e0:f4:1c:b3:04:06:f8:a3:c8:f3:
                    20:f9:2d:e4:22:89:40:d7:f4:d6:95:b2:69:33:99:
                    91:5f:ae:d0:67:b1:b4:da:44:f5:64:a9:44:ca:4d:
                    f5:ee:ae:21:63:25:a8:98:9b:ef:46:39:93:92:3c:
                    f0:03:b2:c5:bd:04:06:01:72:2f:8f:40:28:b3:65:
                    be:bc:14:f8:87:af:91:46:cd:4b:3b:10:1d:c1:ae:
                    28:98:d1:e0:2f:7c:7c:e4:52:64:5c:65:7f:6b:7c:
                    82:f3:23:f6:eb:fd:3c:b8:12:37:e5:51:09:6a:08:
                    64:2e:95:c4:32:89:07:a1:0c:be:c5:ee:44:d7:a8:
                    60:3e:f4:aa:72:97:3b:3b:eb:10:86:0b:ca:93:3c:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:D3:7B:F6:DC:4E:AE:89:1A:27:CD:1E:74:FB:31:2F:34:A1:91
            X509v3 Authority Key Identifier:
                keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:25:5f:32:1e:e9:4d:a2:92:e8:e7:ea:1d:9b:2b:30:16:1d:
         a5:36:87:38:09:d8:97:a1:51:c1:be:2a:fd:09:24:33:e1:7b:
         6f:c9:65:26:70:1d:a4:62:b9:8d:2a:c2:9f:6c:42:c5:da:a2:
         a7:06:ab:2b:fd:1f:9d:5d:2e:72:e4:a3:f2:3e:53:f0:00:b4:
         41:be:67:d7:66:15:81:cc:9c:35:62:66:79:ec:8c:45:e9:dc:
         1e:a8:60:f1:86:8c:1e:99:2d:db:56:6e:c8:85:c0:78:b1:13:
         b0:58:ba:ee:f8:0a:0d:2d:c2:60:09:f1:3e:35:d1:17:8b:42:
         b4:f8:df:76:8b:87:fc:c1:04:3c:07:fa:71:28:96:a3:63:03:
         79:2b:6e:b0:be:4a:0c:16:18:cd:40:f3:e7:97:fc:eb:eb:be:
         35:ae:dd:d9:26:da:24:5a:02:77:d7:b9:c7:38:38:95:cb:a9:
         8d:0f:3a:1b:60:bf:fd:c4:65:c4:1b:1d:5c:e7:fa:e1:6d:0d:
         96:b4:00:5e:18:5d:51:b5:40:79:65:c0:c3:b9:fc:9e:c4:24:
         ea:18:79:fb:5f:d1:0d:3f:5e:93:02:76:df:90:49:21:f2:a5:
         e0:e6:a4:c8:a8:b2:ca:68:36:9e:ff:28:17:d7:04:74:28:a4:
         43:e5:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:19:39 2025 by rpki-client