Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
File:                     4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json)
Hash identifier:          INthi9ue+XJawbPG4R2xB5RHF4OMRZlREfETKlBqa6c=
Subject key identifier:   A1:4C:58:C7:49:6E:BE:1C:47:B4:FC:BC:2C:05:2D:23:7E:9C:08:8E
Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF
Certificate issuer:       /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
Manifest number:          C5
Signing time:             Sat 23 Aug 2025 05:55:26 +0000
Manifest this update:     Sat 23 Aug 2025 05:55:26 +0000
Manifest next update:     Sat 30 Aug 2025 05:55:26 +0000
Files and hashes:         1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: kVJloiw9s7d0SKizwhtRUu7tByY3ctgNnyFmFkdTnwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl
                          rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
        Validity
            Not Before: Aug 23 05:55:26 2025 GMT
            Not After : Aug 30 05:55:26 2025 GMT
        Subject: CN=68a957ce-6a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:ff:ce:40:72:55:4e:60:eb:2e:a7:eb:2c:
                    22:f1:60:4e:0d:d6:5c:9c:45:2f:c3:07:73:28:fc:
                    c8:f2:40:c2:6f:34:89:a2:6a:93:e4:49:8d:66:48:
                    77:eb:a3:4f:99:82:af:29:f3:d0:57:33:0b:da:d6:
                    9c:ac:8d:73:f6:51:c9:1c:99:3d:74:0f:4a:65:95:
                    63:ef:7e:51:a8:44:e5:da:78:e0:31:8b:aa:86:c8:
                    4a:30:4b:dd:6d:95:7c:6d:c2:30:52:e4:c2:de:51:
                    64:c6:52:7c:e7:6e:cf:4c:b5:f0:29:da:4a:a2:31:
                    43:1e:de:d8:9b:aa:4f:d0:f3:e1:0f:a6:0a:f5:7b:
                    f1:ef:90:03:2d:3a:6f:a7:32:f5:03:43:a9:b4:89:
                    42:57:d3:45:9a:df:3d:c7:bc:7b:c8:f5:e9:d0:37:
                    92:b4:72:01:a3:7f:b0:e9:b2:50:42:1e:2e:f8:37:
                    ce:05:a3:e1:3e:31:11:27:7d:08:c3:c0:36:b8:83:
                    ce:ef:c0:97:5b:5a:41:bf:29:39:59:7a:12:21:fa:
                    51:ce:22:4c:e9:c5:e4:d3:18:ed:66:f1:cb:46:17:
                    37:52:95:c9:56:fd:5e:8d:20:0a:ad:72:88:b6:b5:
                    f4:ec:5b:ea:94:a0:61:68:07:28:18:01:1d:15:61:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4C:58:C7:49:6E:BE:1C:47:B4:FC:BC:2C:05:2D:23:7E:9C:08:8E
            X509v3 Authority Key Identifier:
                keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:30:48:67:99:e7:e7:6e:8c:26:ec:4d:4d:ed:92:1a:68:
         13:ba:38:1f:7f:57:5e:27:2f:40:c9:b6:99:ce:23:85:17:9a:
         69:23:36:49:c9:ad:d9:c3:90:8c:11:24:de:56:69:39:ea:e2:
         6d:cd:aa:0d:3a:2c:66:68:da:13:5d:91:77:dc:09:99:06:13:
         8d:4c:be:21:dd:d9:42:67:f8:43:40:df:8e:54:cb:29:76:a7:
         c2:03:21:1c:58:84:fe:b4:44:bf:df:2b:7a:81:cc:6d:33:d6:
         b6:c1:77:b6:21:48:36:ea:90:e1:10:81:13:e6:b3:ae:53:72:
         32:fe:a9:ae:5c:88:3c:20:52:ae:86:11:88:2c:6d:63:c3:61:
         e8:ad:d8:1b:c4:0c:0f:52:39:20:0c:9a:79:71:5f:1e:0b:a2:
         ce:41:22:8f:0f:9b:fd:47:5a:d5:48:8d:fb:0e:cb:0f:81:00:
         6f:0d:fa:49:1b:af:81:ae:7e:e4:07:0d:ec:bf:fb:63:2a:da:
         62:27:1b:21:85:09:46:a1:bb:e2:c6:d7:f5:47:2c:e8:19:46:
         0c:f8:cf:0b:23:27:f2:6d:62:46:17:23:0e:c4:fd:e8:c4:09:
         12:7e:72:e6:05:85:f4:42:42:71:35:b9:42:07:d1:57:76:e7:
         83:bf:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:29 2025 by rpki-client