Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          hMgvemTsMdoeudPHSeZIzhLvNcB6bTYk4prh+XXvslE=
Subject key identifier:   8D:A2:B2:75:55:DF:8F:80:1C:9D:A5:42:63:81:4E:5A:BA:14:A3:3B
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1386
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          1270
Signing time:             Tue 04 Nov 2025 17:16:02 +0000
Manifest this update:     Tue 04 Nov 2025 17:16:01 +0000
Manifest next update:     Tue 11 Nov 2025 17:16:01 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: HMGEgpM9fkYKq+NFcuor8ZprN2esWZrvRYM7LlH+hP8=)
                          2: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: GR7vQYmLyzxJEas0mYDVxALBB8DKhJeqrbl3u+F+zek=)
                          3: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: tY9T8lU5kcHY3u57MMofX3/O0BgwKesBYrVdBe32n74=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: ew8cW9pgjuyfp1DgnDklnBC1cWChQLDChxAz6sJgc3o=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6QULpY0nwICQI5KzGG+hH2ilXe6jG7YgfCERUQkDC9w=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: qioL4f3Nv8IN5xmx7gisd0+PyYeZ++sJbxfOgfDQBd4=)
                          10: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: Jm69XnxkSt8CaD8B4M7m2OfdxuyjH53yi3Y2n3LjPoQ=)
                          11: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: UbbJeh1gWwixc1KBx/TcENcb/xObt11wZD4U7s3lZJw=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws=)
                          13: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: LghbHudSYXpZvbN5rcOeOmOH0Pzs46h/rkleKElMl2o=)
                          14: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: 8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=)
                          15: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: KlRlIQIriEHzptBPZWJtv0ze/AJ1Mbh5VvKzMPz2Ls0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4998 (0x1386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Nov  4 17:16:01 2025 GMT
            Not After : Nov 11 17:16:01 2025 GMT
        Subject: CN=690a34d2-92dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:62:e4:b1:60:94:59:f4:d2:58:ef:30:8a:7b:
                    9e:9a:d5:1d:b6:7c:69:95:56:a9:7d:33:ba:a7:b8:
                    6a:a7:a4:1b:0a:91:6e:12:4f:9b:1d:ca:f9:50:11:
                    54:e2:29:33:6b:23:73:1a:0f:eb:d8:a8:2c:05:11:
                    5e:84:b9:5f:fe:cf:e1:2d:06:ae:06:04:0c:20:ec:
                    b4:fd:a6:b5:a4:4d:fd:0c:60:b2:10:2e:36:51:c5:
                    fd:ea:f6:34:ea:29:72:2d:2f:ca:fe:bf:fb:dd:88:
                    31:6f:4a:13:22:73:98:89:72:b8:62:8b:df:d2:df:
                    2d:c8:5f:df:6f:7b:80:04:36:cd:7c:1c:ae:2b:74:
                    2c:40:30:5e:77:6f:6c:bf:1d:cf:6c:3e:d7:e7:ea:
                    5a:74:5b:6c:7b:75:13:ae:a2:74:79:12:2f:a1:e1:
                    a6:58:54:bd:41:6f:01:63:19:54:f3:ef:ae:52:02:
                    c4:36:d9:65:b5:b9:e2:76:f9:69:c2:76:d2:3f:48:
                    56:19:a3:b4:0b:21:e0:b9:40:76:e0:57:9e:94:3b:
                    51:71:12:e2:22:17:b0:56:39:47:1f:b4:f2:3c:27:
                    a9:d4:13:20:21:b2:cf:85:93:98:75:f8:98:1f:e4:
                    50:f3:90:cb:f8:73:b9:89:78:fa:91:bf:4f:17:56:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:B2:75:55:DF:8F:80:1C:9D:A5:42:63:81:4E:5A:BA:14:A3:3B
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:22:09:c4:68:5d:66:79:c5:35:73:fd:bc:b3:7a:ae:b9:
         7f:e6:58:f3:73:ba:28:9c:6f:e6:0a:88:a1:05:04:b4:48:14:
         bb:9a:d9:74:4f:40:55:8c:30:2c:b7:50:55:f9:d9:96:85:6d:
         1b:da:6f:02:0e:6d:6c:29:66:6d:29:bd:49:8f:66:16:13:62:
         6f:06:3b:da:03:d1:23:34:b1:54:95:2b:cd:33:e7:eb:56:f3:
         4f:df:5a:e6:86:a9:41:c5:6c:1b:9b:bb:06:86:f5:df:b1:da:
         48:4c:c7:70:48:1f:c7:1e:93:53:5a:cc:ae:19:a6:da:6f:0f:
         81:83:48:c9:01:2e:41:fc:92:ed:7f:73:af:5b:fb:68:9d:6d:
         66:2a:81:be:11:14:10:c4:df:d0:40:5b:65:61:7a:95:94:2d:
         6e:f3:92:bc:fd:95:dd:6a:94:31:55:1c:6a:d3:ef:bd:8f:59:
         b9:16:6d:72:e0:b7:00:bf:77:66:84:3f:79:2a:ed:49:02:80:
         0f:81:ce:13:16:67:91:5a:a7:f0:73:59:d0:7c:f9:70:8a:9f:
         82:aa:d4:9b:e1:c9:a3:7f:7b:21:54:66:62:59:2c:b9:1a:10:
         3c:19:4b:68:b5:af:bf:13:da:fd:66:43:12:d9:cc:94:93:00:
         0c:cf:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:54 2025 by rpki-client