Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier:          h8o6C2dMLXues/dVwoa6yDBbV8eyPTPKnk1z4DyAQWM=
Subject key identifier:   85:E0:25:50:88:BA:2E:D8:F8:ED:74:2A:54:C8:28:2F:E4:A8:93:99
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer:       /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial:       34D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number:          34D2
Signing time:             Tue 04 Nov 2025 15:07:59 +0000
Manifest this update:     Tue 04 Nov 2025 15:07:58 +0000
Manifest next update:     Tue 11 Nov 2025 15:07:58 +0000
Files and hashes:         1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: WJQPJg0GdorL7CXDoCgx8B5jwe+EyfdyQZBu5SHUBcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
                          rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13522 (0x34d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
        Validity
            Not Before: Nov  4 15:07:58 2025 GMT
            Not After : Nov 11 15:07:58 2025 GMT
        Subject: CN=690a16ce-2414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:89:d1:e8:03:9b:6e:ea:1f:cd:26:89:27:
                    75:a4:dc:da:3e:c0:d4:c8:4c:1b:7e:e7:c9:f3:8d:
                    9a:e1:3c:b0:8f:e4:9d:fb:6b:13:25:cc:59:d1:31:
                    cf:a7:2c:1f:74:1d:7d:3b:52:c1:3f:49:1d:fc:37:
                    83:2b:4e:66:54:e8:3b:b7:e2:45:db:0b:40:88:0f:
                    c7:05:d5:74:d6:db:d1:59:f6:f1:53:1f:d3:a6:9c:
                    54:07:b7:1f:13:7b:0d:66:ff:37:e5:2a:f9:4e:7c:
                    ae:e1:4e:50:33:1b:c5:a7:db:a7:b3:40:e0:b2:99:
                    f7:bc:8c:39:bd:49:3a:6d:d6:9d:4e:1d:30:ad:60:
                    c8:f9:be:bf:cb:30:8d:7e:ed:7c:0e:eb:62:63:9c:
                    1a:a9:e4:b0:fb:7e:80:f7:44:da:78:2f:3c:7e:2b:
                    93:e3:af:83:19:43:6b:79:14:70:a4:c6:fc:d2:bb:
                    17:48:87:77:9b:73:0a:72:ce:54:17:b4:a7:36:f4:
                    47:f0:e6:b9:28:0e:72:12:d3:86:c8:e6:3e:d3:69:
                    b8:43:cc:17:bf:39:5e:53:8b:56:b1:2f:50:66:ad:
                    62:0d:94:03:b9:0c:01:7d:7b:53:70:55:fa:2d:a6:
                    ad:25:b7:3a:1e:da:90:ee:69:ef:d5:6c:f0:6f:76:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:25:50:88:BA:2E:D8:F8:ED:74:2A:54:C8:28:2F:E4:A8:93:99
            X509v3 Authority Key Identifier:
                keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:4f:f1:76:e8:9d:f5:54:f8:47:2a:7e:5f:72:cf:55:9d:39:
         41:58:7e:28:a9:d3:5b:26:d6:49:ef:7b:64:2c:95:f5:63:b8:
         50:a2:6b:10:b4:b9:15:38:2a:ba:23:1b:3e:17:5e:09:50:73:
         4c:20:4f:ea:58:0a:fc:9f:64:f4:d4:24:8d:84:a3:5e:f5:df:
         80:c6:c0:a3:73:90:46:88:bf:12:29:45:d8:41:e5:a3:ba:f3:
         fb:5c:00:5f:15:50:d3:b5:56:ba:d1:40:42:5f:f9:8f:f4:6f:
         f7:73:30:d1:9d:e4:7f:cc:f8:37:2f:d4:86:a7:ef:8b:36:b9:
         0c:7d:36:f5:40:e9:7f:70:c5:60:17:43:ac:fc:81:74:fd:8c:
         d1:88:b2:66:81:f1:4e:42:ec:f3:b7:c5:33:87:d6:cf:7b:09:
         13:53:3f:4c:d5:84:f9:4f:a2:cb:6e:8c:6b:67:cd:df:ea:1b:
         69:3d:b6:46:bc:e3:2f:6b:7d:64:8e:67:5a:7f:41:a8:e5:cd:
         72:09:13:fe:51:a9:14:19:19:02:33:28:02:72:38:22:61:8a:
         a2:6f:83:94:d9:73:6e:80:b7:54:81:71:f1:46:4e:ef:40:21:
         1d:31:ed:dd:8c:a4:a0:10:4e:5d:09:bd:4a:e4:c6:b6:c4:c2:
         ce:a9:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:04 2025 by rpki-client