Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File:                     kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier:          lwqWGL2W63pRCi17q0PuszBaqzSnqJHxl8Pp37trHR8=
Subject key identifier:   A1:C8:4F:59:C1:B6:D8:3C:AE:B0:89:97:8C:A9:27:CE:4F:79:6B:52
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer:       /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number:          0F
Signing time:             Sat 23 Aug 2025 08:19:27 +0000
Manifest this update:     Sat 23 Aug 2025 08:19:27 +0000
Manifest next update:     Sat 30 Aug 2025 08:19:27 +0000
Files and hashes:         1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: DwlvYulpqQ8AUanIoMIegRapJhY2HE89dhnn0/uX29c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
        Validity
            Not Before: Aug 23 08:19:27 2025 GMT
            Not After : Aug 30 08:19:27 2025 GMT
        Subject: CN=68a9798f-875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:36:80:ef:9b:0d:37:96:10:24:50:06:96:
                    bc:26:9d:74:8c:c8:bf:54:a3:cd:7c:44:0d:80:99:
                    0a:3c:62:35:13:08:02:44:7d:dc:39:fd:da:c9:13:
                    45:d7:d4:e0:5b:b8:49:a5:e1:42:80:7a:9a:c5:07:
                    15:1c:ed:bd:9a:b3:b4:47:bd:e7:a8:0b:ad:48:0a:
                    df:71:f7:8d:df:a9:95:4d:69:1e:c0:23:89:41:f6:
                    cd:5b:15:25:a2:3c:fe:cf:61:6b:19:2e:ec:a1:da:
                    01:3e:b3:09:95:ba:f8:2d:2f:e0:fe:81:22:2b:39:
                    fe:6c:94:a9:ca:14:68:1d:21:65:18:88:6c:34:fa:
                    ab:0b:aa:db:fc:ca:9a:92:d4:2e:2b:b9:9c:fc:4d:
                    28:b3:f4:fe:a5:68:44:c0:82:69:c6:32:a2:c5:bc:
                    b3:23:e9:70:9b:fb:f1:27:c1:a4:8b:ba:b7:45:2d:
                    e0:c6:2d:43:76:15:80:54:7b:97:3a:46:80:0c:d4:
                    2e:f4:e3:ec:33:d7:2f:ca:d2:2b:39:07:b7:a7:30:
                    1a:e9:03:b8:fb:84:75:37:5e:a4:28:46:48:66:95:
                    b8:0c:2a:be:2a:35:84:81:21:ec:7a:cc:33:2c:97:
                    2c:ae:da:3e:21:bd:2c:67:8c:6b:25:79:8b:e7:80:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:4F:59:C1:B6:D8:3C:AE:B0:89:97:8C:A9:27:CE:4F:79:6B:52
            X509v3 Authority Key Identifier:
                keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:80:6c:40:7b:cb:a9:9c:ed:2a:a3:26:0b:7d:b5:74:74:e5:
         06:ec:f5:3d:81:99:72:d6:0b:8b:f0:f3:27:bf:ed:db:36:33:
         99:fa:aa:ce:bf:2c:b9:47:ed:94:a3:9d:c8:66:f8:da:e8:30:
         68:ea:e2:84:df:8e:59:04:94:07:ae:a7:7d:d1:db:07:d0:78:
         26:b5:b0:cb:3d:c9:61:dd:84:d7:31:6d:85:68:9b:b7:13:67:
         9e:c0:36:b9:46:74:65:1d:dd:dc:d9:2c:e4:6b:f9:e4:2a:1d:
         b5:70:44:84:10:04:e1:4e:8e:16:ad:0b:6d:ef:dc:0b:a4:bb:
         2d:31:78:11:24:a3:90:e6:22:1e:b1:c9:d8:83:36:97:fd:33:
         3b:61:74:08:0d:9e:73:c3:e1:c3:fc:e8:17:20:46:3b:1c:18:
         e8:6b:c8:59:68:9c:78:bd:24:a3:94:f2:ec:27:35:bd:dd:84:
         6e:af:38:56:94:c4:6c:e8:ac:ec:8c:a4:a9:0e:79:28:e4:06:
         bd:06:ad:2e:35:3f:8f:4c:cf:85:ca:5a:f9:c5:19:e8:23:42:
         a3:af:cb:69:39:4d:46:8b:46:1c:f2:b1:9c:29:60:b1:f2:91:
         7f:c5:8f:f5:67:f2:d3:bc:58:a1:9f:0b:00:a0:4a:89:b3:7d:
         68:5d:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:18:33 2025 by rpki-client