Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
File:                     wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json)
Hash identifier:          WyEW4nb4uinuRM7oKVu5ykHCRSnaxgJOsGmMaoKF8SQ=
Subject key identifier:   D6:0B:7E:BC:DE:FF:0F:C3:23:16:24:B5:19:A1:56:AA:94:C8:35:B2
Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
Certificate issuer:       /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
Manifest number:          51
Signing time:             Wed 05 Nov 2025 07:27:23 +0000
Manifest this update:     Wed 05 Nov 2025 07:27:23 +0000
Manifest next update:     Wed 12 Nov 2025 07:27:23 +0000
Files and hashes:         1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: zmHamvzxtU8Uo2DYXY5fu59LXUJzlbRtlwC/lacBfxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
        Validity
            Not Before: Nov  5 07:27:23 2025 GMT
            Not After : Nov 12 07:27:23 2025 GMT
        Subject: CN=690afc5b-00d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:83:4f:64:f3:d6:d8:76:5b:02:fb:e9:02:
                    71:52:4e:7b:75:f7:80:6f:9f:5c:64:5a:3f:2c:45:
                    d7:1a:b3:20:ae:99:01:48:32:95:86:48:2f:78:91:
                    30:95:bc:c8:99:10:8d:60:86:9f:a0:9c:d1:87:1a:
                    0f:0b:fd:3f:df:76:68:24:66:35:10:d8:39:e1:e5:
                    9c:e8:5e:7b:60:e5:5a:c7:62:e2:d2:31:33:df:04:
                    a7:2a:e6:69:37:1c:36:d2:dc:1d:15:c8:b7:00:d0:
                    c6:90:a6:23:6c:95:72:19:73:ac:87:71:22:e0:1d:
                    90:1e:6f:89:de:41:bd:36:2a:2f:09:6b:f3:8a:03:
                    99:a8:e8:a8:27:b8:23:12:82:bf:23:cd:71:8b:6e:
                    c2:bc:cc:e8:bb:b3:47:6f:d9:88:0a:3d:8c:dd:94:
                    f0:da:ed:7d:d5:37:4d:93:d9:fb:c3:11:62:eb:2e:
                    5e:ce:9c:13:ce:d0:32:d2:13:b1:e1:73:48:3a:74:
                    70:6f:d4:a4:98:81:97:46:68:16:74:46:a2:93:f9:
                    ca:5f:c3:3c:a6:7a:7f:f5:ef:fc:19:c0:1b:63:6a:
                    41:84:88:87:83:88:20:74:6b:4a:ef:a8:e8:68:a4:
                    4c:40:a8:44:ea:21:04:70:cc:d9:1a:d7:34:e6:ff:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:7E:BC:DE:FF:0F:C3:23:16:24:B5:19:A1:56:AA:94:C8:35:B2
            X509v3 Authority Key Identifier:
                keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:74:ea:41:ab:e7:82:84:9e:57:41:f8:17:1e:23:4e:05:
         cc:17:c7:06:5a:dc:00:4e:ad:7f:4b:a2:aa:c3:bd:da:e4:76:
         e8:f1:67:a7:ef:f7:09:a2:ed:f6:d6:73:7c:a9:5f:fa:f4:40:
         5f:b3:92:6f:94:28:b4:79:e8:d0:0b:19:4a:ac:dc:fd:69:f1:
         d9:14:b5:04:b8:9a:cb:b6:f9:20:12:29:d3:23:b9:a7:38:81:
         c5:c2:36:0b:59:36:41:59:63:6f:ae:ea:8f:25:48:74:1e:7e:
         9e:a3:0c:60:11:28:28:98:59:91:0e:2e:5c:59:2f:81:ec:5b:
         32:47:f6:56:cf:60:59:c0:93:33:5e:d1:c4:f1:e7:aa:1a:30:
         35:e1:37:e7:c3:ba:db:26:a8:16:c6:ce:06:ec:50:d6:bf:88:
         18:07:59:c0:b8:bb:27:03:1f:32:97:48:b4:f8:cc:14:2e:5c:
         74:30:ab:02:8e:2b:2d:31:f2:6b:a8:ea:70:b3:53:85:0b:bc:
         85:4d:e8:f0:56:24:7d:c0:b0:6b:48:4d:12:4e:13:3e:53:7e:
         c3:36:35:8e:ad:83:71:35:4e:08:c4:e8:e4:37:92:d9:32:6a:
         5a:8a:22:1b:76:fe:75:ca:a4:17:0a:43:a4:44:39:dc:58:4a:
         e4:5e:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:35 2025 by rpki-client