Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
File:                     wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json)
Hash identifier:          0zDBIpDciYpW7ixeqE7tV/p7NeXkr/WiSWJUNl1mvUs=
Subject key identifier:   B6:C9:E8:A1:4D:F5:3A:97:B9:EA:FF:D0:F6:B8:BD:C1:2A:DD:12:E8
Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
Certificate issuer:       /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
Manifest number:          0107
Signing time:             Mon 03 Nov 2025 04:59:07 +0000
Manifest this update:     Mon 03 Nov 2025 04:59:06 +0000
Manifest next update:     Mon 10 Nov 2025 04:59:06 +0000
Files and hashes:         1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: cWhNbDaFy+2qzhqnfI0LmO59L0buAyLV8feqXEr4mdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
                          rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
        Validity
            Not Before: Nov  3 04:59:06 2025 GMT
            Not After : Nov 10 04:59:06 2025 GMT
        Subject: CN=6908369b-e6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:79:e8:41:3a:38:a5:bb:c6:d5:24:93:82:
                    72:29:d8:3d:78:45:6f:0b:8a:b5:ba:3f:c3:85:2a:
                    0d:fa:1e:fe:ce:60:f3:fc:3a:df:69:1a:ed:3b:af:
                    d2:98:a1:e0:83:41:90:05:f0:18:00:eb:c0:9f:97:
                    3f:bb:7b:6d:c7:a4:ce:c1:3d:99:ac:84:c0:da:39:
                    cb:29:e2:54:ce:af:cc:c0:a4:5b:20:22:7d:d8:2a:
                    1c:87:db:30:0e:d6:52:85:54:28:72:68:6a:70:79:
                    37:0a:13:82:c7:45:6e:c9:2b:37:fe:e5:20:b8:9f:
                    86:81:b2:57:97:29:b3:e0:85:fc:fc:64:fc:53:68:
                    ab:e4:7c:e4:b5:71:e5:73:c6:39:88:ee:d6:75:08:
                    c6:04:09:d8:b5:20:50:9c:a1:20:95:5b:31:73:52:
                    c9:02:46:8b:9a:8a:84:4c:55:1e:fc:f4:d3:97:f0:
                    86:16:23:04:5d:99:f9:58:8a:f8:c0:93:1e:ff:38:
                    73:01:3b:d7:23:ce:51:56:5e:08:3e:22:40:e6:38:
                    5f:10:0d:ec:74:42:d7:ef:34:d2:b9:3c:8f:0e:be:
                    e9:ab:46:77:fe:a0:3a:3d:65:e8:59:3b:60:8d:e4:
                    4e:df:e9:30:66:cd:05:82:f7:35:c9:12:d8:b2:c1:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:E8:A1:4D:F5:3A:97:B9:EA:FF:D0:F6:B8:BD:C1:2A:DD:12:E8
            X509v3 Authority Key Identifier:
                keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:92:be:12:b7:46:e3:22:e8:e9:87:12:5e:8e:0e:02:c2:a1:
         79:3b:b0:31:24:6e:a1:1d:2d:64:5a:51:f5:ff:f9:23:77:54:
         77:42:f1:d3:0b:e3:52:8c:f3:9e:61:39:7b:6e:13:e9:87:b5:
         20:a4:41:96:07:33:4e:e9:73:fc:80:9f:03:b9:72:09:84:c3:
         cf:c2:15:bc:ac:e5:d7:8e:cb:0b:8c:94:cf:43:52:09:14:e3:
         78:70:34:f7:95:01:ac:41:54:e7:ee:1a:d2:cc:c4:e1:e7:41:
         c0:79:ed:8d:31:09:b3:89:af:4f:4e:a3:18:b6:e5:d8:d9:f6:
         1b:44:6e:45:a9:a6:30:00:7d:2c:fb:7b:c5:60:a5:50:b4:f9:
         51:91:85:03:1f:0c:23:da:d9:ca:20:e2:03:07:90:26:ff:85:
         b6:a6:6d:66:cc:ae:bc:9c:97:03:13:b2:e5:eb:d8:11:34:2b:
         7a:ba:bc:94:27:c3:41:39:e5:ed:ba:ec:17:96:95:06:aa:5a:
         30:7b:22:1d:37:1a:2e:ef:8a:af:31:f3:39:70:4c:d5:c3:17:
         55:1b:94:b0:c3:2c:af:59:88:d0:cd:b7:03:49:c1:0d:e0:a5:
         37:76:8a:38:ae:ae:79:d6:f7:2c:b9:e5:a9:68:7e:93:e9:5a:
         ea:54:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:06 2025 by rpki-client