Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
File:                     zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json)
Hash identifier:          2kHdwSoWYHlH1YHN9jBD4mbVpn2jtKNcfCnkkN15L0A=
Subject key identifier:   41:C9:7C:8B:5F:7D:E8:6B:23:FD:E2:8E:4F:16:C3:0D:E3:19:27:05
Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
Certificate issuer:       /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
Certificate serial:       34CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
Manifest number:          34CB
Signing time:             Sat 18 Oct 2025 14:44:00 +0000
Manifest this update:     Sat 18 Oct 2025 14:43:59 +0000
Manifest next update:     Sat 25 Oct 2025 14:43:59 +0000
Files and hashes:         1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: /NGkjQ2BFdkJy1I1tvGsuahD1C7/wBEFtDYsRkUhzq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl
                          rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13515 (0x34cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
        Validity
            Not Before: Oct 18 14:43:59 2025 GMT
            Not After : Oct 25 14:43:59 2025 GMT
        Subject: CN=68f3a7af-e3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:d6:55:39:8d:fc:68:e6:0b:87:8a:e1:13:
                    3e:64:fa:22:c4:f3:54:5d:8d:9c:0f:62:d6:1b:de:
                    04:33:77:84:e3:5c:ce:c8:ae:34:99:ea:2c:a2:58:
                    ac:9f:35:8c:f8:d0:ad:3d:91:36:51:a9:3e:72:34:
                    81:63:22:a8:8b:44:7c:5b:a4:a2:31:96:2d:f7:d3:
                    1f:68:e5:de:cf:c5:94:07:e5:1c:77:8a:16:65:97:
                    8e:95:33:3c:d6:17:40:37:82:3c:3e:26:db:cd:37:
                    70:d3:d9:16:19:c2:6c:82:91:9d:83:a9:eb:7b:ad:
                    da:e3:83:a0:36:48:ad:4c:82:d4:7e:33:96:f5:98:
                    f4:f2:b4:b1:a1:1f:6f:c8:67:63:a2:dd:31:66:e6:
                    1b:68:71:10:2c:e6:ed:2e:bb:87:4b:eb:fc:8b:6b:
                    d7:df:58:6a:dc:0a:86:93:fd:b8:e2:38:1d:2b:91:
                    c2:44:10:a6:6f:be:30:30:46:a5:cf:42:e9:78:80:
                    42:38:20:80:e8:d4:eb:2a:89:e1:b0:10:2c:b6:78:
                    d8:18:f6:37:c5:06:82:21:4f:b0:bc:ac:2d:33:cc:
                    b6:bd:f9:9e:22:0e:3f:ae:3a:e9:38:a3:42:a1:d2:
                    b0:81:8e:41:fc:a3:04:01:2b:0e:33:89:c3:6a:6e:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:7C:8B:5F:7D:E8:6B:23:FD:E2:8E:4F:16:C3:0D:E3:19:27:05
            X509v3 Authority Key Identifier:
                keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:39:28:1e:57:60:44:3c:58:86:78:de:73:94:2e:f0:79:
         53:da:cd:b8:fa:f2:b2:69:d6:d8:43:5b:ce:d3:c5:07:1c:cf:
         9a:83:36:f8:c6:79:d3:81:17:bb:57:8b:0b:75:e7:8b:37:94:
         4b:c1:de:f9:4b:c4:60:56:61:45:04:a8:d0:39:4a:43:ab:f8:
         54:03:d9:9b:65:11:21:84:6b:00:81:6b:8c:1c:78:65:e9:56:
         5f:78:c6:86:e6:1d:53:f5:cb:a3:8c:1e:c5:d5:2e:17:c9:f4:
         ea:a7:e4:5d:16:50:14:50:bb:29:24:f0:b2:3c:db:8f:1a:70:
         3f:3c:16:df:87:c2:68:d9:f2:f8:d7:bc:2f:8c:47:3d:bc:cb:
         90:3c:9b:ed:58:ce:89:00:f4:f4:e2:55:43:62:23:a5:15:ff:
         ec:17:14:07:86:ba:3b:31:de:10:f8:a0:85:c3:a4:0a:19:70:
         78:bc:32:a8:4a:f7:f0:c4:2b:d8:c8:97:26:b2:4a:2b:87:91:
         48:bb:b4:33:00:57:c4:12:2e:cc:1e:df:3b:88:a7:5c:5e:05:
         a8:11:c6:8a:0c:3d:78:ce:a8:8a:3d:81:e7:1d:72:21:c7:d2:
         2d:be:12:2b:3e:ff:d4:f6:70:a5:88:c3:8c:a2:bf:b6:7f:ea:
         99:9b:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:42 2025 by rpki-client