Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File:                     x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier:          VJcQpOQfgx//L9J1frud/1VIhmLrA9kMZE2pIL8+5Po=
Subject key identifier:   6D:0F:BD:26:B3:E5:06:5E:F3:22:D8:2E:C9:77:6D:3D:16:AE:F2:AA
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       06EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number:          1377
Signing time:             Thu 18 Sep 2025 18:42:35 +0000
Manifest this update:     Thu 18 Sep 2025 18:42:34 +0000
Manifest next update:     Thu 25 Sep 2025 18:42:34 +0000
Files and hashes:         1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: XUNok7DBm3KQbkR6FD/hX5veaazyU+JNRohQBXn2FjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Sep 18 18:42:34 2025 GMT
            Not After : Sep 25 18:42:34 2025 GMT
        Subject: CN=68cc529b-b1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:5b:90:77:4f:97:08:1e:f9:d3:29:43:d9:
                    d2:a7:47:5e:6c:fd:ae:dd:41:23:3d:7a:77:d8:0e:
                    1e:3a:51:8e:d5:1a:1f:c5:6a:41:75:6a:60:3d:bb:
                    63:d7:33:6c:8c:9a:18:eb:f1:9a:a4:27:ca:f5:6c:
                    85:91:82:7f:2d:50:96:0c:81:c5:a9:53:f5:d7:a0:
                    9d:a6:09:6b:3e:05:7a:28:eb:60:89:6a:75:d4:b9:
                    ba:e3:3f:41:d7:2f:87:4c:8d:ec:f0:0d:26:82:15:
                    23:70:c8:e0:10:4d:8c:2e:d6:3f:b3:9a:0f:37:58:
                    de:3b:e0:2c:f9:1c:05:b7:20:4f:f1:5a:8e:d9:3f:
                    fc:7c:83:80:df:68:93:bc:a5:c4:19:af:02:74:25:
                    6e:b0:ff:3e:6b:cd:80:05:73:40:14:93:6e:c1:1a:
                    87:16:73:b7:88:04:b3:e0:0a:0b:34:47:27:87:25:
                    dd:53:bd:bc:de:55:05:63:d4:dd:da:67:08:3d:f2:
                    19:ac:08:b4:70:8d:ae:e0:8f:bf:c3:a3:ee:81:3c:
                    95:1a:a9:5a:de:5e:88:11:fc:0c:1f:69:d4:12:26:
                    a3:5c:1c:e6:de:79:37:34:88:fd:d3:00:ad:b3:21:
                    c5:12:e7:e9:4c:8f:9d:1a:6b:18:27:59:a1:00:2b:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:BD:26:B3:E5:06:5E:F3:22:D8:2E:C9:77:6D:3D:16:AE:F2:AA
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:cf:3c:05:19:38:4f:46:7b:03:f0:fd:3d:65:fd:8f:95:
         01:94:57:4b:5c:74:ce:9d:8e:c5:3a:8b:b3:5a:2b:a2:04:47:
         43:c4:3a:a4:7f:98:8e:ff:5c:fc:70:af:47:f9:8e:81:bb:60:
         1c:39:15:df:34:fe:4d:ad:ae:3c:3c:1c:af:ed:5e:52:af:fa:
         9a:03:93:d4:94:2d:82:2b:e2:45:ad:0c:42:6a:7c:9c:db:25:
         c6:fd:98:ec:10:69:59:42:8e:c4:2f:e5:f4:3a:e8:55:df:90:
         08:e2:1e:5c:2d:e0:41:39:2d:c8:f5:8e:0e:af:03:26:69:a3:
         eb:da:d7:f0:65:52:b4:22:ac:6c:96:d8:d7:8f:9b:8f:d4:7f:
         8b:cb:e4:98:90:5e:e1:5f:44:53:5d:7e:9d:39:2b:b4:91:ec:
         2d:0a:06:c1:4c:ef:0c:00:68:d0:5e:9d:eb:7d:6d:79:de:a8:
         84:83:24:73:ee:fd:1c:7f:59:5b:75:df:af:cd:1d:69:98:d9:
         e8:ea:88:f8:3c:6a:11:da:1f:ba:0f:aa:ae:fa:9d:b1:0f:30:
         4a:1a:9e:61:94:2c:f9:bb:41:7f:4e:39:40:90:05:01:19:23:
         87:df:53:07:8e:51:46:76:52:fe:01:83:f1:af:da:87:42:2a:
         d0:8f:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:55:12 2025 by rpki-client