Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          I5Id0cszYjRqpTwCeN+7rcKSa7nWJu/TLyM2ZRjvheg=
Subject key identifier:   70:63:B3:F4:D8:73:84:FC:9D:B7:12:BE:FB:5F:D3:5B:E3:26:BD:C7
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          0561
Signing time:             Thu 18 Sep 2025 23:41:48 +0000
Manifest this update:     Thu 18 Sep 2025 23:41:48 +0000
Manifest next update:     Thu 25 Sep 2025 23:41:47 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: l4+3u+GugTEkV6hQHGz+BoYWdtqpKdwC7vk5epdjIls=)
                          2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=)
                          3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 23:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: Sep 18 23:41:48 2025 GMT
            Not After : Sep 25 23:41:47 2025 GMT
        Subject: CN=68cc98bc-48ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:9a:33:99:ae:2a:fb:58:01:f7:d6:fc:b1:
                    aa:64:39:4a:b2:76:76:ee:e2:80:ac:19:00:40:be:
                    a3:a9:e8:d3:85:25:d0:4e:38:08:ae:45:ba:b6:c2:
                    0e:cf:99:70:c5:40:03:da:71:2a:12:77:01:dd:a1:
                    4e:ed:85:6e:fe:b1:d2:ff:62:75:ea:b8:42:83:74:
                    19:fd:27:5e:d2:49:c0:81:cd:77:0f:a3:01:f6:f4:
                    9e:cb:f9:74:d0:a3:7d:95:3a:d0:0a:08:59:71:32:
                    33:83:ca:74:bf:59:03:58:c0:3f:65:de:a0:19:2c:
                    10:0d:64:6f:a5:33:f2:29:f2:1e:39:ab:59:d6:88:
                    04:6a:ce:5a:c1:90:38:11:6d:67:0e:3f:1e:35:a3:
                    fb:f9:45:bc:0d:98:cb:92:eb:67:44:40:c9:55:6b:
                    4d:97:3a:fd:5b:30:0a:5b:e9:34:f5:cc:70:6e:2e:
                    24:02:fd:a1:97:6b:57:87:0b:2d:99:b3:ed:ea:15:
                    c5:2e:c8:26:a5:b4:de:5e:de:00:11:50:6c:11:3e:
                    da:26:df:4d:09:16:41:a7:c6:e4:ae:2e:db:e5:1c:
                    5a:57:ee:78:3f:04:b5:b5:94:c5:0a:eb:2a:d4:07:
                    48:0e:77:46:6c:88:9c:31:ba:00:a9:2e:89:3e:57:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:B3:F4:D8:73:84:FC:9D:B7:12:BE:FB:5F:D3:5B:E3:26:BD:C7
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:65:7c:7c:d3:06:49:e4:4c:11:59:94:2b:bd:9e:9b:89:
         06:c2:a8:c6:ed:c9:49:5b:81:19:5a:85:d7:df:0c:e0:8e:d5:
         8f:e8:2a:8c:e4:52:74:68:b0:83:61:cf:1b:29:40:80:f3:39:
         54:89:26:ad:57:8d:5a:37:70:25:30:3d:81:51:ff:54:04:1c:
         12:65:0e:9f:93:0a:a7:6c:6a:94:16:88:f8:56:23:4c:9b:67:
         03:1f:cc:fe:f3:d9:5c:b5:64:de:01:08:50:10:c1:32:8d:be:
         62:6b:57:d1:1f:a8:c8:08:72:60:6b:85:e5:4b:c1:46:d5:47:
         53:f0:24:01:ef:25:ed:8a:e3:bb:cf:74:00:4d:d5:07:c4:49:
         a7:77:1c:0e:a1:a6:a6:30:2c:5c:eb:98:e7:b5:8f:40:e1:d0:
         67:31:6f:71:47:93:e1:59:6f:70:60:57:c8:78:28:bc:93:f0:
         bb:64:5c:58:70:e4:85:53:52:c6:15:51:a0:2b:d3:b2:9a:a5:
         06:6e:97:4f:64:41:66:81:21:ac:88:15:e1:15:7b:3d:49:21:
         5b:cb:ae:ff:0f:d5:26:55:10:9f:dd:5b:da:15:d9:52:3b:f4:
         d5:3a:3c:b3:7a:25:dc:91:b1:e0:40:67:3b:6b:70:59:44:bf:
         c1:0b:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:33:26 2025 by rpki-client