Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
File:                     sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json)
Hash identifier:          dtge0mgmGBcsvgXGjSbOfRFNNnV0Ch6PMzZtR/nkVYk=
Subject key identifier:   1E:E8:BD:9F:03:FF:0F:B9:13:55:1F:7C:61:C2:5F:E2:1C:E4:85:BA
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       34BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
Manifest number:          34BD
Signing time:             Thu 18 Sep 2025 15:09:19 +0000
Manifest this update:     Thu 18 Sep 2025 15:09:19 +0000
Manifest next update:     Thu 25 Sep 2025 15:09:19 +0000
Files and hashes:         1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: 5DqCXcfLoLVrXw6yGWfPvCUgTG/xWEJbQEsKpoaTl4Q=)
                          2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13503 (0x34bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Sep 18 15:09:19 2025 GMT
            Not After : Sep 25 15:09:19 2025 GMT
        Subject: CN=68cc209f-4b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:d7:a4:6d:a9:4b:7d:dd:0c:38:a8:3f:c3:
                    e8:f0:99:8c:db:f8:9f:6a:a4:89:22:93:3d:2c:38:
                    7f:7b:70:ea:c6:8f:cb:02:9f:ec:2c:f8:02:93:45:
                    3a:e8:c1:29:7f:5e:28:be:d6:3c:69:32:01:c8:fd:
                    58:ce:cc:74:1b:4c:fa:e2:59:51:38:f6:f6:94:f9:
                    14:79:a6:d8:59:c7:f5:51:88:88:10:ff:8b:95:02:
                    8c:d1:e9:26:d4:67:f4:b1:b5:f4:ed:f3:72:06:91:
                    a9:bd:e8:6c:93:a1:77:f4:c8:c5:c5:08:b8:82:67:
                    b0:ed:27:72:c9:a8:34:22:de:4c:4a:02:7d:05:5f:
                    10:f8:01:e4:e1:66:65:3d:7d:5f:e1:a6:ed:d1:58:
                    42:03:5e:fb:d4:21:6c:3b:55:28:a1:3b:ca:1b:52:
                    04:be:1d:b4:06:3c:a6:be:51:26:b5:a0:fa:a1:38:
                    0c:a5:30:cb:4d:62:74:e4:61:da:64:50:e8:a9:0e:
                    7e:de:fe:2d:41:09:0a:c1:c5:0b:62:37:49:20:df:
                    16:e4:7c:56:88:86:ec:1c:4e:90:bf:8d:61:22:73:
                    4f:7e:16:5b:50:d7:6a:b1:73:5e:f4:b3:3f:c8:5e:
                    79:a7:e6:be:7e:79:ce:4c:9d:4d:1c:a1:ce:f8:ef:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:BD:9F:03:FF:0F:B9:13:55:1F:7C:61:C2:5F:E2:1C:E4:85:BA
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:3c:61:dc:01:9f:98:46:20:25:7c:1d:9b:8e:31:69:71:
         9a:2e:55:75:02:f3:25:4e:96:11:51:27:b8:ca:1c:15:af:a6:
         79:90:5e:05:d4:8e:39:1c:60:87:2a:eb:4c:1e:4e:bf:f7:81:
         3b:84:6d:7d:2a:70:7d:b3:e6:6a:3c:78:3f:b8:92:b2:da:66:
         aa:14:87:70:ae:80:2e:9b:39:01:e8:39:90:f9:e3:6c:ad:13:
         dc:cf:15:d1:4f:39:5d:c7:93:59:5d:76:b2:3a:34:c0:73:2a:
         91:de:7a:fd:cf:6e:1c:9e:21:1d:9b:d6:b9:b6:db:69:ec:7b:
         50:d8:a4:3b:48:eb:44:a0:06:25:11:8a:1a:72:1a:b4:99:81:
         e5:bd:12:a7:df:62:bb:20:97:92:2d:ac:62:a3:cb:9e:c5:ee:
         0a:92:09:1c:1f:22:04:ce:bc:fb:ff:ad:17:28:ec:2d:a4:33:
         72:62:99:c3:d5:82:ba:a1:4c:55:20:65:ea:c4:a4:c9:77:81:
         aa:46:e5:e0:91:6c:b0:ed:23:a2:8b:6b:cf:c6:ed:21:01:67:
         9f:12:ef:5f:83:b0:45:d2:c4:9f:77:06:a1:74:cb:9e:fa:4d:
         60:51:6b:8d:67:5c:a4:32:82:82:2b:f4:a4:e5:f2:04:60:76:
         11:c0:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:58:30 2025 by rpki-client