Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          6IS6GrbK6bVZUC9XW1OIVBHDPhIb37/5El6G6wSB0gw=
Subject key identifier:   7F:65:F3:8B:C6:A6:47:E0:18:06:E9:AC:EF:DC:8B:85:C2:3D:35:DB
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       34BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          34BD
Signing time:             Thu 18 Sep 2025 14:31:50 +0000
Manifest this update:     Thu 18 Sep 2025 14:31:50 +0000
Manifest next update:     Thu 25 Sep 2025 14:31:50 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: pJqKmnTy5eANa7572pWa+GPjcaFBKWrlP3grP3H4onE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 14:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13501 (0x34bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Sep 18 14:31:50 2025 GMT
            Not After : Sep 25 14:31:50 2025 GMT
        Subject: CN=68cc17d6-e845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:e6:24:62:3a:62:1c:92:22:d5:87:b3:40:
                    86:f3:9f:78:57:83:0e:92:bf:d4:49:65:e7:0f:b0:
                    ff:13:7d:5e:ec:7d:65:91:12:74:4f:7d:ab:1c:59:
                    54:dc:83:9b:a8:25:b5:cb:90:b0:f6:37:8b:dc:cc:
                    7d:1d:d4:04:14:fb:f2:d0:3f:51:b7:ce:7c:7a:8b:
                    2c:15:2a:80:ff:36:0b:d4:06:87:5f:9e:0f:9c:ce:
                    89:ae:f6:75:c2:c2:63:19:f0:38:d0:22:62:64:c8:
                    00:92:09:b1:e9:24:86:e2:99:54:30:3b:87:ee:42:
                    02:e6:a7:4b:07:16:be:09:eb:62:ec:c9:b7:d3:0a:
                    a3:8e:66:3a:bb:2b:6d:ab:d9:82:ae:fa:fd:99:9f:
                    16:71:c8:af:1c:60:7c:f4:a2:7c:f0:64:17:40:35:
                    9c:01:e0:e2:bf:35:fe:48:8a:e2:ec:0b:25:43:15:
                    37:5a:e8:ae:b1:47:f9:25:e2:3a:24:ca:f2:a0:92:
                    a1:69:8f:9b:a3:f3:cc:b3:6b:2c:97:30:e6:c1:c8:
                    09:5c:4b:42:38:bb:8f:1b:6d:85:25:44:0c:80:40:
                    96:65:d9:8e:69:ce:1d:8b:30:ec:28:9d:d3:ed:f7:
                    cf:23:38:4a:03:32:33:c0:94:1a:6a:e6:86:a3:f6:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:65:F3:8B:C6:A6:47:E0:18:06:E9:AC:EF:DC:8B:85:C2:3D:35:DB
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:cc:76:e5:67:11:6e:5a:f4:09:4c:3e:06:c6:7b:83:fa:
         76:dc:88:8e:28:72:42:64:76:b2:50:c8:99:8b:bc:18:4c:eb:
         aa:87:33:b4:5e:62:10:7b:47:ba:4e:a7:2a:35:f2:ab:b8:71:
         93:06:79:61:7f:7d:5b:d0:af:02:ad:f2:31:a3:68:2d:a1:65:
         fc:91:6e:67:98:99:98:bb:82:57:2a:4f:99:b4:51:4c:07:22:
         44:ba:c9:fb:e8:ca:b1:2c:bc:d3:93:6a:a6:62:9c:82:ab:b5:
         97:c8:8f:a1:ff:34:57:a9:be:99:2f:d6:a4:1d:14:8c:97:23:
         dd:28:a7:7a:2f:8d:91:c5:9c:60:2e:80:2c:ef:8e:fd:0d:d0:
         7d:60:99:ef:f0:51:d0:bd:6e:db:18:80:6c:83:21:c0:97:14:
         d4:b8:ee:6d:71:a7:c5:76:ce:ca:69:3e:55:20:81:57:90:2c:
         ba:5a:87:4e:1b:a1:80:86:75:43:e6:11:69:0c:ce:8e:a3:45:
         10:8d:97:06:af:5a:83:3f:b1:62:98:eb:2d:78:db:3e:f2:ff:
         4c:91:11:1b:17:43:00:82:cd:ec:54:73:1b:ad:fe:19:31:20:
         55:b7:7d:8a:e0:21:f0:da:c2:7e:da:af:5b:97:a1:97:5f:2a:
         dc:16:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:45:22 2025 by rpki-client