Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          NKwyFSFCbZGia/JBQEpoP2J6RDwV/gQFyhc9lLyI1p8=
Subject key identifier:   04:75:7E:35:8E:9B:CA:29:06:F0:25:E6:1B:07:96:3A:25:3C:B9:B3
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          B2
Signing time:             Wed 17 Sep 2025 06:41:58 +0000
Manifest this update:     Wed 17 Sep 2025 06:41:57 +0000
Manifest next update:     Wed 24 Sep 2025 06:41:57 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: NnNPG0L9QtFn7Qbxlsm6WrSWqU9Wa8utyYGewaKDmEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 06:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Sep 17 06:41:57 2025 GMT
            Not After : Sep 24 06:41:57 2025 GMT
        Subject: CN=68ca5836-bdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:35:b1:90:a7:a4:31:c6:37:70:5b:a4:aa:
                    52:c0:ae:8f:37:da:49:7e:c7:6f:ba:cb:a4:e3:07:
                    32:20:e6:e1:d9:ae:4b:02:eb:4d:23:0b:51:bc:dc:
                    07:02:54:50:44:2c:80:7d:b6:43:68:da:a1:b6:7c:
                    f0:da:1e:14:cb:7d:7c:fa:57:91:d0:00:08:0f:ac:
                    29:c2:48:29:7b:13:f9:91:5d:6d:ce:60:f2:17:f4:
                    33:c9:93:0c:d7:5e:63:33:eb:32:43:14:55:fa:69:
                    2d:7c:be:5f:43:72:0d:95:07:6a:31:de:23:52:b7:
                    c0:99:b9:bd:e4:17:9c:28:64:95:fb:c6:21:8c:49:
                    c8:7e:3a:88:b6:64:22:ab:a7:8b:ff:fc:87:2d:22:
                    b0:dc:0c:ca:f9:aa:3f:4c:8a:90:1d:4e:2f:4f:ad:
                    8a:55:e1:9c:9c:7b:6a:65:41:38:cd:5c:55:32:27:
                    23:d6:8a:8d:fa:ef:8e:fb:66:39:1e:46:83:ee:84:
                    8e:2a:6f:09:ac:44:23:a3:19:5b:66:e2:4b:9d:d9:
                    9d:2c:3d:3e:84:81:33:08:13:44:b4:a5:c5:90:4c:
                    51:02:15:48:f2:af:a1:e3:a5:dd:5d:f0:97:15:d6:
                    d1:90:05:63:61:81:4b:d8:a6:84:4f:12:9f:84:94:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:7E:35:8E:9B:CA:29:06:F0:25:E6:1B:07:96:3A:25:3C:B9:B3
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:ee:b0:bc:04:c6:2f:e3:ea:80:37:6a:55:fb:34:ea:0c:
         d1:5c:a0:3b:f3:ad:22:db:df:b6:c8:42:51:04:f4:92:7c:bd:
         f2:aa:87:48:1c:10:64:8e:ca:7c:ff:d5:54:a1:b2:22:e9:32:
         ba:90:4f:de:66:89:fc:82:4d:06:78:f0:80:3d:8d:c5:62:fb:
         7c:5e:da:0e:53:57:0b:95:f1:11:c9:4e:f8:e4:09:bc:aa:a2:
         34:13:e8:e0:e4:8b:70:e2:d1:23:8d:09:99:a7:39:7d:0e:8d:
         11:05:a4:8c:16:09:4b:9a:c0:20:ea:08:2f:e2:af:8f:cc:9b:
         30:62:d3:38:c1:06:a6:4d:71:ee:3f:38:61:39:86:f5:fc:6e:
         9f:25:0f:cd:db:ca:0f:93:46:95:69:74:2b:22:13:da:a1:bb:
         02:ab:0a:3c:ed:00:ff:bf:28:0f:f5:4d:f3:72:8f:0d:18:c0:
         6f:cc:5e:6d:87:29:84:fb:55:e3:b5:c4:3b:2c:c1:78:bf:2f:
         9e:92:26:d0:9d:30:dd:e3:21:83:8b:2e:79:df:1d:68:6d:76:
         04:a0:ba:27:85:7a:ab:f0:51:d8:d5:fa:70:2b:93:74:d6:a8:
         20:98:2f:17:2f:8e:2c:72:be:b4:1e:aa:c1:d5:fb:3c:1e:39:
         a2:f9:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:24:10 2025 by rpki-client