Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          64Qzt63u1LCL/qZbxX1E4JqCofTWPNoJ9cCK36T/Tiw=
Subject key identifier:   F0:9B:2B:80:0A:EA:76:69:B0:7A:C2:00:A9:70:8A:BE:EB:18:72:F7
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       05CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          05CA
Signing time:             Fri 22 Aug 2025 23:15:07 +0000
Manifest this update:     Fri 22 Aug 2025 23:15:06 +0000
Manifest next update:     Fri 29 Aug 2025 23:15:06 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: BK7JmQkDIfC3wFoRP1Wy62EaK7NS1qyNQeqE8AcP65g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2, serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: Aug 22 23:15:06 2025 GMT
            Not After : Aug 29 23:15:06 2025 GMT
        Subject: CN=68a8f9fb-c386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:89:47:ec:0d:d3:ab:ff:d5:d6:3e:42:74:
                    d7:fa:98:66:ff:a2:a5:1d:20:5c:3a:5d:1f:01:f0:
                    73:6d:62:3c:43:90:6f:3e:f8:b1:da:94:b2:f5:67:
                    35:d7:8a:a7:42:c7:e3:96:a1:4e:3a:7a:17:40:69:
                    fb:ea:07:9f:ca:e9:a2:24:d8:de:6d:4b:b7:d5:2a:
                    2c:7d:ca:3c:38:16:74:29:e9:4e:54:eb:62:59:36:
                    e6:73:90:f3:26:3f:ef:b9:27:8e:c9:8e:3e:aa:a2:
                    50:e4:ed:4a:a3:ed:2c:38:0f:2d:dd:f7:5d:74:61:
                    09:70:35:8c:d3:95:a2:19:48:1c:02:c4:ca:cd:31:
                    bf:5b:0a:36:b4:e6:87:10:aa:59:ff:27:1c:6f:15:
                    e5:db:2d:22:c5:d6:19:b3:ae:ec:27:9f:30:b5:b9:
                    16:6a:6c:4c:66:93:49:16:3f:9b:4d:33:f5:9c:75:
                    4a:6b:1f:be:8c:d1:2a:54:35:dd:a3:84:8b:0c:2f:
                    0b:17:52:61:d5:59:b1:d6:18:15:42:76:90:2f:c9:
                    d5:71:7f:b3:91:5b:4c:77:8c:8e:af:b8:d1:1d:9a:
                    93:15:a3:1b:55:e7:a4:1c:f8:1c:24:d2:db:fd:f8:
                    fb:dc:a5:61:d4:ce:38:99:2c:9a:63:e7:d5:e4:6f:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:2B:80:0A:EA:76:69:B0:7A:C2:00:A9:70:8A:BE:EB:18:72:F7
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:b4:0c:5d:53:14:c6:1d:68:83:ae:58:6e:e4:03:28:f1:
         4f:ff:45:3f:c6:41:ad:02:f6:cf:d8:79:24:d0:5b:56:02:eb:
         9b:c8:8f:46:65:a9:ba:5c:16:73:18:3a:d0:a5:6f:c5:ea:85:
         d3:9b:86:f7:81:a0:4c:bd:f1:1f:2a:75:02:ee:2c:f9:a5:c8:
         b4:f5:b9:9b:de:10:8e:62:56:52:45:30:21:66:e7:44:01:01:
         a0:ff:52:9f:9c:91:06:cb:67:2f:38:5c:2a:88:6d:72:f1:bb:
         56:e5:aa:8e:7e:d2:b1:f1:b3:d1:f3:fa:c9:c5:1a:f5:27:e4:
         5e:2b:81:a3:89:41:18:c1:a5:e3:35:88:7e:5f:4b:f5:03:c0:
         35:b4:79:bd:d0:f5:d3:65:16:a6:64:72:c3:6a:21:fc:86:62:
         07:11:e2:4b:0a:cb:70:43:e9:2d:45:de:7c:22:94:7a:be:cd:
         b2:50:46:b4:d2:56:9c:09:b0:62:30:2c:fd:8c:f2:5c:93:5b:
         d3:f6:cf:b1:a5:11:3c:2a:6c:49:c9:58:8a:20:bb:67:ac:29:
         6c:b6:bb:ee:64:c1:cf:7d:6c:c5:26:d2:b8:f2:78:ea:44:e0:
         06:15:4c:d3:a7:01:0f:ff:3f:ac:e8:21:ca:b9:d7:4a:9b:5c:
         2d:98:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:07:05 2025 by rpki-client