Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          y0mWqX0lg25EtoDcIFdBhzX4aK6VupoxV9raQ7wcSFU=
Subject key identifier:   2B:D8:D6:F7:CD:32:BD:B0:51:F2:94:2C:AD:30:64:94:DF:ED:3F:93
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          47
Signing time:             Mon 03 Nov 2025 07:22:28 +0000
Manifest this update:     Mon 03 Nov 2025 07:22:28 +0000
Manifest next update:     Mon 10 Nov 2025 07:22:28 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: 8iOurWou+UUi4rGJkiJ/UqStWWiS7kLviN1nC9jXXzw=)
                          2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=)
                          3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=)
                          4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Nov  3 07:22:28 2025 GMT
            Not After : Nov 10 07:22:28 2025 GMT
        Subject: CN=69085834-efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:55:88:cc:0b:86:ab:8a:8c:1a:9d:aa:7f:a0:
                    aa:67:dd:b4:30:7b:d7:84:48:5d:38:c5:78:7d:9b:
                    fb:89:04:9e:b4:d0:b4:e7:5f:44:8a:78:ff:23:ab:
                    56:5c:2d:95:18:ec:f5:9a:5e:0b:b9:5e:58:e6:c8:
                    12:19:47:fe:f2:a4:d6:1e:5d:eb:c5:4a:a8:42:bc:
                    50:d0:08:44:dc:f5:b3:25:4d:57:57:75:04:c8:37:
                    03:fe:29:c9:ba:2b:89:d4:8c:a6:28:e2:a7:f4:60:
                    30:48:3f:5f:0f:59:6c:48:16:71:a1:41:2c:d2:5e:
                    0c:a5:e9:47:f6:6a:fd:d7:15:26:ec:86:33:3c:73:
                    91:6a:d6:1c:6e:b8:b8:93:24:dc:98:ac:e8:a8:47:
                    80:80:92:2c:d3:3b:b6:19:03:1a:4b:8a:1a:1c:ca:
                    cd:11:12:23:f8:20:22:3f:73:71:62:d8:e1:52:8c:
                    f5:ed:36:96:09:82:e1:5f:4d:d3:96:a3:27:b3:8e:
                    8e:be:66:91:bd:87:cc:ec:73:4a:4c:0a:4c:8a:8a:
                    bc:d2:c4:ce:43:f7:12:9d:25:d2:42:c7:31:36:7d:
                    0b:05:c4:b9:7a:1d:ea:e2:d2:e6:01:50:0b:09:cb:
                    8c:f5:40:99:7a:a7:35:96:5e:59:d7:11:6d:07:cc:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:D6:F7:CD:32:BD:B0:51:F2:94:2C:AD:30:64:94:DF:ED:3F:93
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:5f:c7:d3:9e:c9:76:02:ae:9f:83:7e:b2:6e:52:2d:78:
         1f:c6:8c:c6:de:96:05:35:39:51:23:ee:5b:ab:6a:70:66:72:
         2b:ee:49:c0:03:84:9a:4c:76:c5:7a:3e:2f:f1:d8:d0:54:4d:
         08:0d:c3:01:40:c6:93:20:6c:f2:37:de:ef:29:c6:25:03:4d:
         00:f3:07:be:e3:34:f1:95:6e:d5:8c:cd:30:de:1b:02:25:72:
         3b:36:85:14:76:83:3e:aa:bd:7d:50:48:cd:79:bc:df:2a:78:
         05:65:5d:fe:f6:ad:ff:27:c2:e1:e8:7a:d2:12:de:fd:4a:82:
         a5:75:ef:a6:db:e5:1a:45:cb:5f:da:15:56:25:77:3c:ef:16:
         a6:fe:01:79:c3:3b:af:d6:18:12:f8:c0:ca:95:b7:e8:0a:b4:
         6c:b2:8c:43:c5:a7:cb:79:56:82:4b:ab:f2:f9:f2:61:52:18:
         c5:55:3c:28:68:27:b1:9c:2d:47:78:61:c0:81:fd:3e:5a:51:
         a2:21:94:de:ee:e2:eb:9f:c2:03:40:a8:b3:ed:f2:3f:41:83:
         57:15:94:87:4e:1f:00:fd:0c:0e:89:ec:30:05:f5:ea:05:41:
         88:17:33:c0:b5:89:eb:a1:e2:a8:f1:0f:73:2b:87:be:86:6d:
         8e:01:39:ec
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzFBRDExMC8GA1UEBRMoQzE1OTcxMzFFQUJDNUJCMzMyQkM5OTlENDE2RTlENUU3
RkNDMEE2OTAeFw0yNTExMDMwNzIyMjhaFw0yNTExMTAwNzIyMjhaMBgxFjAUBgNV
BAMTDTY5MDg1ODM0LWVmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvVYjMC4ariowanap/oKpn3bQwe9eESF04xXh9m/uJBJ600LTnX0SKeP8jq1Zc
LZUY7PWaXgu5XljmyBIZR/7ypNYeXevFSqhCvFDQCETc9bMlTVdXdQTINwP+Kcm6
K4nUjKYo4qf0YDBIP18PWWxIFnGhQSzSXgyl6Uf2av3XFSbshjM8c5Fq1hxuuLiT
JNyYrOioR4CAkizTO7YZAxpLihocys0REiP4ICI/c3Fi2OFSjPXtNpYJguFfTdOW
oyezjo6+ZpG9h8zsc0pMCkyKirzSxM5D9xKdJdJCxzE2fQsFxLl6Heri0uYBUAsJ
y4z1QJl6pzWWXlnXEW0HzLcDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK9jW980y
vbBR8pQsrTBklN/tP5MwHwYDVR0jBBgwFoAUwVlxMeq8W7MyvJmdQW6dXn/MCmkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0JDMjhBRjAwNTA5
QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdNeXZKbWRRVzZkWG5fTUNt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd1ZseE1lcThXN015dkptZFFXNmRYbl9NQ21rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
MUFEL0JDMjhBRjAwNTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdN
eXZKbWRRVzZkWG5fTUNtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAICeX8fTnsl2Aq6fg36yblIteB/GjMbelgU1OVEj7luranBmcivuScAD
hJpMdsV6Pi/x2NBUTQgNwwFAxpMgbPI33u8pxiUDTQDzB77jNPGVbtWMzTDeGwIl
cjs2hRR2gz6qvX1QSM15vN8qeAVlXf72rf8nwuHoetIS3v1KgqV176bb5RpFy1/a
FVYldzzvFqb+AXnDO6/WGBL4wMqVt+gKtGyyjEPFp8t5VoJLq/L58mFSGMVVPCho
J7GcLUd4YcCB/T5aUaIhlN7u4uufwgNAqLPt8j9Bg1cVlIdOHwD9DA6J7DAF9eoF
QYgXM8C1ieuh4qjxD3Mrh76GbY4BOew=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:25:50 2025 by rpki-client