Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          bpAOJBknnhD2Dgp7rLvoza9pWxK004vfQ9hf2zcHaq4=
Subject key identifier:   FC:7E:5C:AC:34:D1:C3:8B:FD:84:95:64:6A:14:E2:61:25:25:CE:15
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          022C
Signing time:             Sun 19 Oct 2025 04:12:06 +0000
Manifest this update:     Sun 19 Oct 2025 04:12:05 +0000
Manifest next update:     Sun 26 Oct 2025 04:12:05 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: wm/9+kdy1t5U/wJA/4pXUVSEEacj+pPgI3VXZzN3ZfU=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: Hz4MNEz2iKlBVZUTwXmU+LHuAvQlzMxEja9uy8vjPy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Oct 19 04:12:05 2025 GMT
            Not After : Oct 26 04:12:05 2025 GMT
        Subject: CN=68f46516-6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:32:49:dc:3c:14:fb:06:26:30:4c:68:16:
                    00:ba:2a:46:a3:f9:87:22:ba:0a:d6:df:11:4d:fd:
                    ae:dd:96:19:1f:cc:3c:80:f8:aa:62:0a:6a:24:59:
                    63:1d:e1:3a:a5:01:89:8b:96:fb:a1:6c:05:2e:c4:
                    82:46:30:0c:d6:90:13:b9:47:c6:11:8d:c0:ba:ee:
                    b1:55:cc:01:ad:cb:70:9e:a4:93:1b:33:a6:96:ab:
                    3d:41:c2:72:1e:35:ae:fd:ce:38:d6:96:66:c3:44:
                    81:e7:f7:72:9f:3f:a5:77:88:0e:58:9c:e0:48:8f:
                    13:3b:93:4b:5f:d0:d2:cf:6b:86:a8:4c:13:32:c2:
                    b9:a4:7a:05:72:cd:00:f0:1b:d3:3c:d0:c0:3a:73:
                    5b:c0:56:bf:a6:47:06:62:55:38:6a:1b:01:d5:58:
                    83:be:55:41:54:d6:91:14:ca:02:f4:55:4f:02:00:
                    46:bc:43:06:39:6f:45:ca:b8:cc:45:2b:98:1a:5c:
                    14:5d:36:3a:1e:62:d1:c7:2a:d6:d4:f4:4b:34:b4:
                    fb:a5:76:ff:81:35:e8:7d:5f:78:f7:79:ae:de:95:
                    4a:ac:12:f3:bd:d1:34:9c:59:b5:48:3e:80:0d:82:
                    6f:d9:65:c2:84:64:f9:1c:74:0b:34:27:19:38:17:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:5C:AC:34:D1:C3:8B:FD:84:95:64:6A:14:E2:61:25:25:CE:15
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:68:9e:c5:ba:8c:19:e1:e8:72:5f:57:54:14:aa:83:48:88:
         ae:77:76:db:9e:b5:d3:e5:37:57:40:6b:5a:5a:c5:77:66:28:
         61:85:49:24:16:a3:56:af:45:01:df:42:3b:3c:12:e5:b8:5b:
         78:f0:03:52:a7:ec:0e:33:54:10:08:6c:0d:9a:d7:79:b0:5b:
         85:db:d3:d4:2f:8b:ab:d5:79:7a:e8:1c:a5:eb:8f:6b:80:1b:
         7d:81:85:0a:61:08:c4:64:50:f8:92:f9:09:78:26:56:93:2f:
         34:50:67:fa:46:26:fd:5a:0f:1e:fe:7c:df:39:c3:36:9b:bc:
         62:8c:36:33:57:9c:f5:cd:ac:8f:02:7c:31:82:05:a6:77:88:
         4d:35:4b:23:bb:26:b6:26:0c:56:c3:c5:53:46:3d:e0:7b:c5:
         d1:03:b2:ab:c4:10:6a:e2:22:9a:4d:06:3d:8f:52:42:8f:e1:
         c7:43:56:76:d0:4e:0b:57:f2:12:21:4f:7e:b3:18:e8:dc:1e:
         d1:e1:7a:09:ed:47:e7:37:9f:a5:fa:7f:3a:18:f0:c2:c9:cf:
         de:ba:98:20:94:5b:01:1a:65:70:62:21:9c:82:56:ec:ce:49:
         d7:c0:e8:74:cd:db:6f:f1:81:df:73:6b:f7:99:2b:0b:7e:09:
         07:52:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:36 2025 by rpki-client