Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File:                     ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier:          sbwAfC/MBvMj9KJg5xGuXq0SCER5p8kLQ5entjwba8o=
Subject key identifier:   82:B4:A3:DB:E9:C3:69:33:B0:99:3D:56:41:CE:80:7C:EA:FB:98:F2
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer:       /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number:          C2
Signing time:             Wed 17 Sep 2025 06:31:35 +0000
Manifest this update:     Wed 17 Sep 2025 06:31:35 +0000
Manifest next update:     Wed 24 Sep 2025 06:31:35 +0000
Files and hashes:         1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: ru3SS2sO9EyoTwRXQNZlhxQu/9XCXGjlGVtDwdp5HN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
                          rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 06:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
        Validity
            Not Before: Sep 17 06:31:35 2025 GMT
            Not After : Sep 24 06:31:35 2025 GMT
        Subject: CN=68ca55c7-beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:d7:44:f1:ae:3c:60:b6:17:da:e2:1f:4a:
                    a2:a5:1f:66:e9:d7:bd:36:7b:1e:a5:d1:5c:ef:b2:
                    bd:08:b7:e7:a2:86:28:08:de:0c:db:ae:a9:32:b4:
                    2e:64:f0:48:f9:ae:07:a6:ad:0a:9e:a3:51:15:2a:
                    9e:fa:24:5b:51:3e:36:cb:33:b1:c0:cd:cb:22:16:
                    fb:c9:a5:27:b9:7b:c9:37:92:47:73:f2:0a:52:4c:
                    1b:30:75:ac:75:3b:7b:ee:6c:d2:54:5f:dc:7f:09:
                    f8:68:06:bd:6b:af:5c:f4:87:38:14:7b:8b:32:cf:
                    2d:0c:3c:f7:43:f1:7f:fa:01:56:18:9f:db:ee:4e:
                    98:e7:2b:29:d1:c6:84:66:22:41:61:16:4d:1d:d8:
                    ea:94:b7:58:18:84:74:10:27:81:66:f8:6b:02:95:
                    22:89:57:44:c3:aa:25:17:af:1b:75:22:5f:dd:9c:
                    13:11:90:ec:3f:48:24:88:10:86:84:e3:00:05:87:
                    1a:5d:c4:c6:59:77:d2:d8:60:b7:f1:b5:dd:8f:3e:
                    a9:c5:f3:6a:2b:ba:b8:b9:6a:d5:56:ec:e6:8a:8e:
                    c7:a0:7f:36:03:31:27:b5:36:d9:9e:bc:c3:14:b3:
                    b7:1c:76:39:bf:79:4c:61:e9:cd:d1:90:3b:23:42:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:A3:DB:E9:C3:69:33:B0:99:3D:56:41:CE:80:7C:EA:FB:98:F2
            X509v3 Authority Key Identifier:
                keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:22:6d:51:30:e1:ff:ff:91:d0:49:ba:a2:49:3f:df:a2:33:
         d9:d3:44:07:9e:4b:94:3b:ac:cf:43:a1:fe:f7:7c:a9:dc:e2:
         97:24:36:ff:30:ee:2e:c7:cc:be:c4:ab:1b:c1:2c:18:53:26:
         0b:3c:8c:45:f1:51:2a:0d:ba:7a:9e:53:0e:aa:2a:e1:0c:25:
         bf:d8:ee:82:22:56:f2:20:4b:8f:2d:d6:8b:24:e7:e0:f2:d4:
         a3:57:92:00:54:3d:66:11:68:cf:37:49:f9:fc:f8:b5:0c:99:
         fe:16:3e:56:18:66:9d:25:b8:07:0f:a9:a6:68:fc:e1:20:d4:
         88:d6:fa:37:ea:72:0b:cb:a8:a7:f9:33:87:6c:77:ab:ee:e6:
         ad:4c:ad:88:cf:35:c8:dc:f9:5f:1a:24:31:f4:86:2c:32:93:
         3d:41:22:cf:72:0d:3d:c3:d4:6c:1c:58:a4:34:02:0b:12:6b:
         1a:84:39:57:ec:51:35:7e:a4:1e:85:0c:a4:98:f5:0b:ab:49:
         08:f1:b3:38:93:cc:0e:46:05:d6:f1:27:3b:b0:d3:1a:82:27:
         8c:b5:6c:5b:81:81:70:16:2c:77:d6:df:5c:d5:4a:03:10:e0:
         02:bb:69:60:9f:87:1d:16:64:18:06:8a:30:5a:9d:b5:7b:a2:
         bc:bf:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:00:13 2025 by rpki-client