Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File:                     WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier:          k051rFZ0A3CTFjg6sMiW9jYD84tNSm+fRPCciVe7z3Q=
Subject key identifier:   C1:52:C2:B0:B5:B2:DD:31:F6:80:CA:87:56:AF:B8:A6:F4:29:4A:1A
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer:       /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number:          0724
Signing time:             Tue 04 Nov 2025 21:55:23 +0000
Manifest this update:     Tue 04 Nov 2025 21:55:22 +0000
Manifest next update:     Tue 11 Nov 2025 21:55:22 +0000
Files and hashes:         1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: NVqhEH5BKHd0VZyiC9+aGGndT8AWRmUcBTEHZ1sAamM=)
                          2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=)
                          3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
        Validity
            Not Before: Nov  4 21:55:22 2025 GMT
            Not After : Nov 11 21:55:22 2025 GMT
        Subject: CN=690a764b-42e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:3d:92:34:90:65:c4:0b:ec:0c:b9:0d:9b:
                    52:e2:2b:29:18:a4:4d:d3:f7:2c:a8:a3:17:13:d8:
                    4e:b1:b9:f3:4b:3a:d4:fb:9d:d8:cd:fc:d8:64:1e:
                    63:45:28:29:8c:63:e6:5c:0a:7b:bc:46:c3:80:85:
                    29:63:5e:5b:07:f9:b5:ba:6b:5a:3f:5d:19:09:0e:
                    53:dc:2a:ac:2d:e9:d6:c0:6e:b4:89:f9:58:63:81:
                    5a:e0:e0:51:9d:7d:a9:0c:8d:e1:7d:21:87:3b:8b:
                    98:1a:ba:c8:41:88:e1:6c:65:87:9e:70:c8:41:fb:
                    0d:49:c0:70:43:c6:8d:11:f7:8e:98:e7:76:19:62:
                    c7:91:08:05:b4:27:e8:e2:de:c5:21:52:0c:27:1d:
                    16:03:84:f9:93:a3:a6:27:93:e7:27:84:86:89:5e:
                    6b:32:eb:36:e4:ed:9b:9a:a1:76:e9:9a:a6:99:f6:
                    53:4b:4f:3b:08:f9:5e:1b:b0:c8:11:fd:dd:b9:8a:
                    12:6c:aa:14:5a:a1:c4:a0:28:bd:60:9a:43:a2:ee:
                    aa:e8:53:95:6c:f5:70:5d:db:4e:64:46:3a:17:b7:
                    dc:b2:dc:42:aa:76:c0:43:e6:e6:3f:ac:55:50:77:
                    b7:59:78:15:f5:3b:1b:ef:83:df:3d:ce:8b:e0:65:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:C2:B0:B5:B2:DD:31:F6:80:CA:87:56:AF:B8:A6:F4:29:4A:1A
            X509v3 Authority Key Identifier:
                keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:57:65:92:09:09:55:bc:65:f8:dd:d1:84:b6:5f:fd:cd:
         e3:12:dd:65:4e:ca:08:09:e1:2b:7d:09:b4:80:f7:f6:35:2a:
         87:c0:d8:d7:de:28:3c:85:27:99:50:ed:8e:aa:a4:30:34:9e:
         a6:77:af:80:de:04:ad:0e:fb:ce:8a:f3:2f:28:5f:b7:9e:4a:
         9c:09:6c:cc:37:16:80:fa:1c:9f:12:4f:43:03:0a:7e:75:59:
         cb:45:7a:82:bf:dc:fc:11:a3:f0:46:7b:49:54:9a:50:46:70:
         bc:ee:77:38:30:4c:1d:95:c2:7d:eb:76:92:5b:a4:89:6a:ce:
         a9:9b:89:ec:45:e8:48:a0:a8:e4:2c:8d:fe:4f:38:3a:60:cb:
         54:77:d0:30:0c:15:2f:30:f3:00:2c:f3:50:5b:bf:0f:38:aa:
         68:f6:80:20:1a:d6:c5:68:7a:f0:82:cd:ec:e7:5c:1f:d8:73:
         ef:98:49:04:c4:66:22:65:0f:85:15:16:36:8b:a2:ad:5d:de:
         ec:44:c9:7f:7a:97:75:3e:05:57:34:5d:31:ed:1c:64:69:95:
         87:e6:e8:fa:3c:eb:37:1b:2c:b7:1b:37:ae:38:5b:ba:90:5d:
         e2:bd:43:1b:16:a8:2d:c6:be:d0:c5:b3:94:33:44:b5:af:56:
         22:b1:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:53 2025 by rpki-client