Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File:                     kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier:          /qsFoPwJxN381IA6W0tyZzufR00RzEn7eFYjCQ0NUAA=
Subject key identifier:   1A:AC:0D:13:A2:4E:3F:C1:FC:36:2D:22:BD:41:27:FE:98:A7:B1:42
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer:       /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number:          6B
Signing time:             Sun 19 Oct 2025 10:19:38 +0000
Manifest this update:     Sun 19 Oct 2025 10:19:36 +0000
Manifest next update:     Sun 26 Oct 2025 10:19:36 +0000
Files and hashes:         1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: DSgS8ovOPaEwNHDHTZJY2nGgMg9fHk5olD5zsIxP5WE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
        Validity
            Not Before: Oct 19 10:19:36 2025 GMT
            Not After : Oct 26 10:19:36 2025 GMT
        Subject: CN=68f4bb39-dad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:9e:a7:7e:c5:36:8c:f8:5b:27:d3:30:08:
                    08:42:7c:63:06:79:26:1c:92:b0:cb:09:e3:ed:ec:
                    18:a8:dd:31:30:dc:c4:ba:a1:2b:bc:3b:ee:18:ee:
                    c7:7a:e3:7e:d3:be:aa:65:08:7c:dd:db:a7:65:d3:
                    c7:0e:60:df:bd:e7:c2:97:5f:f0:0e:6e:84:49:7f:
                    df:3e:39:97:7c:26:89:13:44:11:fd:86:29:3e:63:
                    33:2d:e9:4c:7f:21:2a:64:e4:a8:78:70:fa:9b:7c:
                    7a:72:3c:59:de:e7:d2:f4:f1:10:cd:3e:d7:c8:9d:
                    95:55:5c:88:9e:09:bb:de:af:7e:e8:4c:5e:e2:1e:
                    89:1b:17:8d:74:4a:48:74:84:b8:16:6c:e4:eb:52:
                    40:2c:43:41:c2:b1:fa:65:2b:30:aa:3e:57:3b:0c:
                    58:40:98:89:0b:45:3d:d2:3d:82:23:9d:a3:0b:9c:
                    b1:40:6c:02:d8:8d:0f:d0:48:53:ee:90:18:60:ab:
                    9c:f0:82:10:d2:84:8d:1d:44:22:87:9d:60:16:bb:
                    8b:03:01:92:24:dc:6d:74:00:d7:fb:e2:66:0b:9c:
                    ec:85:e2:c4:97:90:e0:a0:30:c4:6e:7b:7a:ad:cc:
                    27:fc:a1:a0:be:21:0f:7f:05:6a:02:9f:af:be:7a:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:0D:13:A2:4E:3F:C1:FC:36:2D:22:BD:41:27:FE:98:A7:B1:42
            X509v3 Authority Key Identifier:
                keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:6a:85:a3:95:e6:ab:12:c0:76:2f:80:c5:15:55:b2:45:
         c9:0f:d7:14:f0:47:7d:45:cc:8d:7b:91:fd:e7:a9:21:64:d1:
         64:88:66:1b:fe:b1:9a:28:0d:ba:c8:32:d5:1b:7e:3b:92:32:
         e2:7a:53:f1:2e:81:a3:c6:04:3c:e5:ed:8f:76:39:99:77:2d:
         84:14:82:a6:03:0a:60:5a:1d:48:73:9f:de:62:15:98:c9:0e:
         a7:32:78:8e:9d:0a:1a:77:d9:24:83:dd:17:95:7c:f3:4e:39:
         c4:0a:79:15:c2:d0:fd:89:d5:b0:9c:2c:e4:0d:c9:3e:dc:61:
         12:11:09:27:05:bd:9c:64:f5:97:ed:07:e3:f1:ca:10:b9:49:
         a4:bf:ef:c3:26:70:8f:dc:aa:94:76:06:fc:1b:21:90:c5:61:
         67:60:7e:2a:f2:0d:b7:a0:22:bb:a1:ec:3c:40:a9:cc:66:44:
         c9:e8:69:23:33:84:de:5f:cf:05:93:7f:64:5b:5c:86:e6:af:
         72:b3:aa:1c:a4:69:fc:ed:a7:40:d9:de:c4:eb:61:19:2d:df:
         c5:2a:e0:14:27:93:d5:13:4b:bc:d3:3e:a1:ad:b1:97:c9:7f:
         e5:9e:eb:38:38:bc:ba:21:e5:9a:04:57:ff:00:5b:fe:95:b7:
         4a:d7:28:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MkZFMTExMC8GA1UEBRMoOTIwRTdEMDkxRjE1NTY5RjJEODM0MEM2NTgyQjk1OTVF
QzA2NTY4MDAeFw0yNTEwMTkxMDE5MzZaFw0yNTEwMjYxMDE5MzZaMBgxFjAUBgNV
BAMTDTY4ZjRiYjM5LWRhZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkRZ6nfsU2jPhbJ9MwCAhCfGMGeSYckrDLCePt7Bio3TEw3MS6oSu8O+4Y7sd6
437TvqplCHzd26dl08cOYN+958KXX/AOboRJf98+OZd8JokTRBH9hik+YzMt6Ux/
ISpk5Kh4cPqbfHpyPFne59L08RDNPtfInZVVXIieCbver37oTF7iHokbF410Skh0
hLgWbOTrUkAsQ0HCsfplKzCqPlc7DFhAmIkLRT3SPYIjnaMLnLFAbALYjQ/QSFPu
kBhgq5zwghDShI0dRCKHnWAWu4sDAZIk3G10ANf74mYLnOyF4sSXkOCgMMRue3qt
zCf8oaC+IQ9/BWoCn6++er1xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGqwNE6JO
P8H8Ni0ivUEn/pinsUIwHwYDVR0jBBgwFoAUkg59CR8VVp8tg0DGWCuVlewGVoAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0YxQzc0NDdFMDlG
MTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1Zv
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIva2c1OUNSOFZWcDh0ZzBER1dDdVZsZXdHVm9BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy
RkUxL0YxQzc0NDdFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL2tnNTlDUjhWVnA4
dGcwREdXQ3VWbGV3R1ZvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJtgaoWjlearEsB2L4DFFVWyRckP1xTwR31FzI17kf3nqSFk0WSIZhv+
sZooDbrIMtUbfjuSMuJ6U/EugaPGBDzl7Y92OZl3LYQUgqYDCmBaHUhzn95iFZjJ
DqcyeI6dChp32SSD3ReVfPNOOcQKeRXC0P2J1bCcLOQNyT7cYRIRCScFvZxk9Zft
B+PxyhC5SaS/78MmcI/cqpR2BvwbIZDFYWdgfiryDbegIruh7DxAqcxmRMnoaSMz
hN5fzwWTf2RbXIbmr3Kzqhykafztp0DZ3sTrYRkt38Uq4BQnk9UTS7zTPqGtsZfJ
f+We6zg4vLoh5ZoEV/8AW/6Vt0rXKOk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:52 2025 by rpki-client