Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          JqOjHraJjhWZpbCJVauZUBX/9IM5uDNh6JE1r/hCUus=
Subject key identifier:   BF:FF:73:25:C3:01:77:9A:12:8A:81:93:97:44:01:07:8F:33:71:FC
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       08A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          0896
Signing time:             Sun 02 Nov 2025 20:33:41 +0000
Manifest this update:     Sun 02 Nov 2025 20:33:40 +0000
Manifest next update:     Sun 09 Nov 2025 20:33:40 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: 64/bJ5tZYAIZxblRrMU1vmDHRQAftMrvf+bg9oKGcBQ=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: 36vsX/kRCXg+ogIu5Zo1EQtB8DOFdXEItLvHPcLnMbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Nov  2 20:33:40 2025 GMT
            Not After : Nov  9 20:33:40 2025 GMT
        Subject: CN=6907c025-a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:2c:7f:95:fd:23:f4:4e:2f:d2:b7:9c:00:
                    81:bb:dc:61:d1:a9:45:8d:42:c3:b2:ec:cc:ed:1f:
                    a6:d0:7d:78:0a:9d:22:e4:59:0e:9a:61:ae:1f:9b:
                    79:4f:8e:6e:00:69:0c:a7:a4:cb:e9:3b:15:82:e3:
                    3f:40:ef:3e:9a:17:46:cf:a9:bc:94:d7:e7:a0:e4:
                    fb:2e:fc:63:0e:4d:53:38:d0:53:ec:79:06:3e:44:
                    82:ea:37:cf:4e:8a:83:17:79:4d:b5:75:2b:4e:31:
                    75:f0:bb:56:c6:04:41:b2:78:5e:7b:55:f9:00:4d:
                    e3:59:65:64:b0:06:8c:91:d8:63:8d:29:83:1a:f4:
                    51:c9:d7:4d:fe:a7:9b:d6:65:05:5d:56:24:90:5f:
                    44:09:c2:65:75:88:ef:2a:02:6f:f6:ad:a2:09:ef:
                    45:3d:21:f8:17:00:91:d2:83:0d:98:6b:32:6f:0f:
                    f8:5f:89:b8:84:95:e9:bc:5a:aa:45:98:f7:d8:dc:
                    03:75:06:dd:d8:b2:2b:54:64:18:53:b6:2e:1e:e1:
                    12:a6:82:18:fd:2b:09:6c:db:74:9b:15:ca:8d:48:
                    6a:4e:8c:3c:a3:d3:8b:73:2f:75:58:7b:76:4b:16:
                    71:71:f7:ad:a5:23:1a:e5:3d:34:f1:0e:e6:e1:27:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FF:73:25:C3:01:77:9A:12:8A:81:93:97:44:01:07:8F:33:71:FC
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:81:81:9c:db:b2:11:55:f2:31:84:67:2b:b5:82:87:6a:
         f2:9e:5b:80:aa:ff:5d:1e:5d:f8:c2:d0:3a:d2:0a:1e:81:02:
         da:81:1e:2c:43:95:e6:47:1a:55:b8:4f:a1:31:67:6c:91:24:
         9c:14:5b:96:73:68:f8:ec:90:04:fc:fb:11:d5:3d:8f:be:a2:
         bc:cb:41:cb:ee:38:22:d8:8b:0a:ac:bc:b0:42:a2:61:78:50:
         b8:f4:16:d7:0b:07:62:07:8d:fe:d7:05:d5:00:44:62:50:70:
         78:61:41:44:86:76:e8:55:ee:89:5a:f6:82:b0:ac:84:9f:2d:
         68:c6:4c:a2:7c:2b:b6:ba:6c:d1:6b:76:85:44:9f:33:87:53:
         69:4a:6e:1d:a2:a8:cc:fd:7e:7d:53:73:b7:8f:5e:fe:41:7b:
         b4:bf:e6:fe:37:0b:f6:0e:e1:53:4e:ed:85:10:71:34:d7:b3:
         be:90:a2:fc:01:74:b8:b9:75:37:07:ed:d0:0b:f0:42:79:8c:
         6a:16:b5:c9:bf:59:74:c7:2c:c8:92:1d:16:df:35:12:62:88:
         d1:21:e9:31:0e:11:c9:22:50:a5:96:24:62:a6:59:1a:87:5b:
         b7:72:23:04:96:85:4a:ce:f0:db:17:3f:04:f6:c2:f4:42:5b:
         12:e9:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:20 2025 by rpki-client