Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
File:                     Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft (raw, json)
Hash identifier:          B0QNvP9unB1brBatLKro2B3EPSLICBAwm9suDSaJb4I=
Subject key identifier:   10:C6:4A:8A:CC:43:B2:2E:C6:37:25:74:79:A2:19:8C:A5:0B:D4:CE
Authority key identifier: 5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94
Certificate issuer:       /CN=A9181CB2/serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
Manifest number:          66
Signing time:             Fri 07 Nov 2025 02:23:08 +0000
Manifest this update:     Fri 07 Nov 2025 02:23:07 +0000
Manifest next update:     Fri 14 Nov 2025 02:23:07 +0000
Files and hashes:         1: Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl (hash: UTAJIe6H9nemOfpXn9waze8XBv5IwtqTnCCt/RIVdoM=)
                          2: 45A63E5E34C911F09E00523CC4F9AE02.roa (hash: UgHJ4HCtUSU7Mhsy3F8cs/81Xi5bIE2mJ11AdKYHzQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Nov 2025 02:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CB2, serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
        Validity
            Not Before: Nov  7 02:23:07 2025 GMT
            Not After : Nov 14 02:23:07 2025 GMT
        Subject: CN=690d580b-978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:c3:d9:d8:cb:02:3a:a3:87:07:73:52:06:
                    6a:97:26:00:8a:ee:8d:b3:97:60:9d:85:90:ca:93:
                    51:3c:c2:8c:37:49:d6:88:79:c8:d1:47:d0:f3:0f:
                    d8:c3:55:1e:64:18:03:ef:19:7d:31:d3:52:12:b6:
                    2e:f3:fd:14:a5:ab:bc:bc:26:47:cf:65:78:72:2f:
                    b5:de:27:98:3a:0e:d1:a3:17:92:98:05:ec:c1:fc:
                    2c:0b:74:10:ab:ae:9d:47:03:36:64:c2:ce:c4:fa:
                    f2:08:42:e9:b8:24:7e:c9:07:1c:22:38:68:a3:8a:
                    5d:e1:db:2f:14:2e:44:29:60:51:80:00:fc:ae:69:
                    92:73:49:60:38:9c:dd:3c:d0:e3:cc:cd:2c:5e:97:
                    9d:17:80:20:cf:5d:a7:7f:6a:19:cd:75:03:bf:db:
                    2e:3d:1f:83:26:28:c8:e1:ea:25:d7:44:22:1c:8a:
                    f2:5a:d9:eb:37:4c:ef:c5:e3:74:af:0d:88:cb:26:
                    2b:29:0f:e7:26:67:4c:34:a7:33:3d:c4:95:04:fe:
                    87:9b:18:59:b1:ae:bf:13:a0:e5:ff:6e:0c:08:e8:
                    1c:b5:d7:82:ed:87:89:d2:2f:ee:aa:8d:19:4c:a6:
                    ce:f3:6e:70:60:67:9e:d6:39:a8:93:fc:c5:1b:f1:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:4A:8A:CC:43:B2:2E:C6:37:25:74:79:A2:19:8C:A5:0B:D4:CE
            X509v3 Authority Key Identifier:
                keyid:5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:03:d4:fa:4f:63:7b:4b:b4:6e:8c:b1:82:ff:50:a1:92:
         9d:59:2f:f9:bf:6b:51:e6:ed:aa:ac:3f:72:fe:fc:be:6c:ff:
         ca:c7:82:4c:a8:6a:ad:7b:0a:93:c4:08:ec:a5:2d:f0:0f:6f:
         fc:de:a4:cf:0c:30:d2:04:3d:45:4e:c6:f9:23:bd:29:db:0c:
         b5:12:2c:d0:22:39:d5:59:d4:c9:91:de:1b:ec:1a:3d:7a:91:
         50:2b:84:9b:e8:e8:ac:1d:d0:73:2a:d8:be:18:21:00:65:a9:
         90:d8:ec:2a:78:14:3a:f8:a6:d1:ed:88:b5:b6:12:2c:fb:3a:
         49:27:20:97:d6:55:94:7b:cb:29:9a:46:89:a5:1d:4b:10:af:
         f8:e5:2b:28:2e:f3:6d:9f:a7:b0:16:9a:84:b6:51:45:db:9f:
         92:91:ed:d4:1c:61:28:e1:a0:18:8c:9e:2a:cf:21:7b:bb:89:
         4c:dc:6b:d0:11:dc:39:33:16:65:73:30:6d:23:fc:b5:17:29:
         3c:93:da:41:2a:29:f8:0e:51:f7:27:6a:1d:90:c3:90:9a:5c:
         58:b5:c7:5f:d4:fe:ea:0d:c0:b7:a0:c7:db:64:32:81:61:ab:
         ad:73:c6:40:6b:a7:5a:e8:c9:45:80:e1:b6:c3:72:35:b3:d1:
         df:61:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 15:55:46 2025 by rpki-client