Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
File:                     kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json)
Hash identifier:          SjBcyRnEIZ9ZeFFb4g0YmvouJ/ahEduuCa1dHue18cQ=
Subject key identifier:   61:63:2E:8F:52:15:B3:66:33:4E:E0:35:04:6D:D0:96:CE:2C:6F:2B
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Certificate issuer:       /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial:       054D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
Manifest number:          0541
Signing time:             Thu 18 Sep 2025 23:49:30 +0000
Manifest this update:     Thu 18 Sep 2025 23:49:29 +0000
Manifest next update:     Thu 25 Sep 2025 23:49:29 +0000
Files and hashes:         1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: IBqUxU5NoQ78jBc0yCur395ecLmAAvcG2hlHTOOVMtg=)
                          2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: YuwAjf0VpmVoTjcP53b2MZy/33jsOggpPYKkc+Tnm7Q=)
                          3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: So00zJ1AKw4WG3WlOWEkw0uPB14Z1y1sOqNnyZb7Bn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 23:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
        Validity
            Not Before: Sep 18 23:49:29 2025 GMT
            Not After : Sep 25 23:49:29 2025 GMT
        Subject: CN=68cc9a8a-c30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:ff:4b:3b:6a:a7:ea:19:c4:a5:05:1a:6d:
                    cb:13:04:ed:ee:13:1b:a8:92:0f:99:44:09:6e:29:
                    c9:f2:8c:7a:b8:ac:5b:4e:89:2f:7a:18:a5:a7:83:
                    08:70:02:a5:aa:66:46:9f:d3:83:f3:da:f1:ed:13:
                    40:b5:62:ee:1a:26:fe:86:f1:dd:bb:0c:00:6e:ac:
                    7a:85:68:24:92:06:63:cb:2f:b2:82:d1:56:96:97:
                    2b:f5:eb:24:d6:1f:e7:ed:e7:00:f9:07:ef:73:d4:
                    da:25:e5:21:c9:78:34:e3:99:eb:f9:f2:bf:d2:49:
                    f7:af:a0:93:c0:49:d2:22:a5:7f:6c:a0:eb:b5:68:
                    0c:af:c0:4e:86:4f:34:46:72:12:04:d8:80:62:e8:
                    97:e9:20:46:11:98:b6:2c:13:e5:5f:be:9f:77:02:
                    f4:b4:2e:0a:d0:7a:14:c7:fb:b0:a4:05:56:58:39:
                    4b:92:5c:ef:ca:3a:80:73:06:85:be:65:db:d2:45:
                    43:26:16:e6:92:93:5f:6c:b4:5a:5f:2e:cd:a2:7c:
                    06:5b:94:79:38:82:7a:b8:75:d5:ac:cb:48:71:04:
                    71:28:8d:3d:77:a7:eb:fd:e0:cf:d0:8e:a2:b6:ed:
                    f9:3f:8b:ae:29:89:a8:c7:22:4e:53:4e:8a:d0:16:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:2E:8F:52:15:B3:66:33:4E:E0:35:04:6D:D0:96:CE:2C:6F:2B
            X509v3 Authority Key Identifier:
                keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1b:80:18:a7:fa:c6:c7:8c:3e:95:c2:cb:d3:40:e6:2d:9f:
         e5:0e:28:a9:61:d7:37:ba:f0:4e:ae:0b:ec:a7:a8:0c:36:15:
         c0:a3:ce:1c:cd:8c:b7:79:e3:92:ea:9d:21:5d:ff:09:c6:1c:
         8d:7a:7f:27:00:b0:98:43:ad:25:2a:23:7b:59:f0:9f:73:2c:
         a3:96:c4:76:1f:35:65:c7:48:51:59:d9:7e:07:94:d5:5a:e3:
         01:fe:b3:9b:00:b2:ef:b5:4e:2f:b3:9c:f8:6e:30:3d:6e:fe:
         85:48:99:10:e5:ea:92:11:c6:45:69:c7:c5:aa:63:19:75:8d:
         de:07:d5:d7:7b:31:5a:ed:fb:75:0f:43:b5:6c:28:d7:53:6f:
         4b:f7:c2:6b:34:43:19:79:6e:73:4a:02:44:04:1b:76:ff:3b:
         d4:d8:ad:91:06:72:6d:6f:a4:7c:9f:a4:29:e7:6a:16:74:32:
         97:ee:7b:b0:ad:ba:e3:c2:69:ce:a0:e6:2e:db:44:a7:8b:d4:
         ee:01:4b:14:57:c5:ed:93:40:da:06:bf:9f:3e:24:79:11:4d:
         4e:34:04:56:72:48:3c:0e:4f:cc:8e:fc:bb:fb:7e:dc:dc:48:
         ec:85:6c:3f:3e:a9:1c:2c:8f:3b:ca:fc:29:d4:09:37:99:ec:
         e2:11:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:41:17 2025 by rpki-client