Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          z+65dkxVOhiVRhAT63aIGAheo9NlNhe/Ut59rvaGqQA=
Subject key identifier:   A7:6F:98:4C:F8:79:CD:80:AA:33:EC:EC:22:8E:8E:5B:64:FD:39:8D
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       0333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          0324
Signing time:             Wed 05 Nov 2025 01:11:40 +0000
Manifest this update:     Wed 05 Nov 2025 01:11:40 +0000
Manifest next update:     Wed 12 Nov 2025 01:11:40 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 0TwFSU91+aKwt2MmZbvvtSHgvCGRWo/LgYyByIin3E0=)
                          2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: 7fAydexKXPdZvEhVXyfnP9N5MybcBu9GtBprbPNnugw=)
                          3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: dvzhA8SmNiPJaXBGb4hu0iK1TSWFRqrP4dxIxnPOkaQ=)
                          4: 8409527078B011EE8D737723C4F9AE02.roa (hash: Smslgu7rJqUTUi4Mp8vBgW1QUKGuNL2tLBKb/4Rsvdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Nov  5 01:11:40 2025 GMT
            Not After : Nov 12 01:11:40 2025 GMT
        Subject: CN=690aa44c-5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:c0:b6:db:e2:38:c1:00:e9:7d:f5:bd:22:
                    d2:16:2b:a7:8b:9c:b4:00:2a:f8:60:d4:eb:f5:d9:
                    9e:70:14:0f:9f:b6:5e:6a:b8:90:f3:fa:82:af:8f:
                    81:74:ba:fb:65:f5:b5:32:0e:40:06:86:59:b5:65:
                    09:9d:59:51:70:42:74:ce:73:a8:3b:05:fa:c3:8d:
                    02:86:65:67:7d:e7:94:37:75:e3:75:c8:52:2f:a3:
                    3a:fc:31:f8:ac:f1:31:8c:4d:51:a7:f1:05:bf:00:
                    4e:e1:1b:64:e2:b4:68:f8:91:84:9b:86:87:de:78:
                    f1:b1:54:42:e8:2b:4a:29:4c:19:2a:16:98:34:1c:
                    f8:0a:cb:18:32:d8:6d:c9:c7:25:22:46:34:45:89:
                    9b:3b:7e:54:81:e1:f7:50:db:25:b3:7d:f5:39:30:
                    d2:f5:57:3f:28:c6:4e:59:ac:0b:5c:17:de:cf:7e:
                    a0:d3:61:d3:9a:5b:a1:f5:b0:2f:03:76:85:fc:7f:
                    0a:75:a6:44:7a:85:08:9a:ea:9c:2d:97:e3:9c:55:
                    48:7a:f2:d8:a7:ef:62:3f:02:22:31:91:a1:68:21:
                    d9:14:1a:6d:29:8e:36:b1:73:34:d6:db:31:f7:f1:
                    f9:5b:f6:c2:f3:10:f8:a9:74:f4:4a:cd:54:d0:cc:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:98:4C:F8:79:CD:80:AA:33:EC:EC:22:8E:8E:5B:64:FD:39:8D
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:00:22:26:6f:64:a4:9e:37:4d:39:47:ba:6e:b2:38:5a:
         a0:a7:bd:18:8b:0d:d7:19:95:62:01:45:3d:10:fc:5c:1e:ba:
         51:b7:a1:18:13:c4:88:a8:41:26:c0:f3:5e:61:97:e5:4a:d7:
         8c:4a:47:38:80:22:18:69:90:18:89:22:c4:44:7e:28:58:5d:
         08:4f:e1:02:ad:16:82:ea:43:83:f6:12:bf:46:c0:a7:d4:b1:
         ae:6e:8f:3c:76:84:ad:ae:ee:56:f6:00:3e:47:7a:1a:56:71:
         30:f0:7e:61:00:36:64:14:0e:28:fa:ce:16:cf:8a:74:2a:ac:
         22:7c:9e:59:cf:2e:a9:7e:16:e6:8f:f7:bf:97:23:ec:ae:3d:
         2f:b0:de:7a:a2:d9:1b:1c:c2:55:ac:b2:44:10:97:c7:bd:7f:
         0a:56:cc:8b:06:80:8c:a5:60:c7:e6:6c:a9:46:0f:54:b9:0a:
         2a:a7:ec:ef:ff:50:73:c0:9f:ee:fd:2d:b9:e6:60:55:e0:d4:
         79:5b:f2:97:1c:a6:9d:c5:2d:c7:18:56:36:51:92:1c:e9:09:
         ae:20:67:73:22:4f:2a:2f:c2:b0:d5:61:dd:38:f3:14:b9:9f:
         21:90:8f:de:76:d6:05:d4:4c:b9:cb:d8:9d:6d:2b:9e:d2:84:
         b5:47:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:41 2025 by rpki-client