Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File:                     KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier:          GftYLTphlH/aBtz3CIVv76xYEQB9eskQkxlQNdulEbo=
Subject key identifier:   B8:79:53:65:B5:18:81:FF:ED:E8:90:4A:A7:AB:2D:FF:F7:0B:5D:45
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer:       /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number:          25F5
Signing time:             Sat 18 Oct 2025 16:39:55 +0000
Manifest this update:     Sat 18 Oct 2025 16:39:55 +0000
Manifest next update:     Sat 25 Oct 2025 16:39:55 +0000
Files and hashes:         1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: +uY4HwGMvjAJ5/BaFIwYql88I8PIax44tHN7gSsvVts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
        Validity
            Not Before: Oct 18 16:39:55 2025 GMT
            Not After : Oct 25 16:39:55 2025 GMT
        Subject: CN=68f3c2db-5116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:f8:08:12:e1:37:23:b5:7c:d9:11:eb:bd:
                    ac:8f:d3:13:c3:73:3f:44:67:4c:ba:2b:1c:5f:23:
                    d9:77:fe:13:f9:3d:95:ba:33:a2:09:bf:ea:0b:66:
                    64:73:94:93:e8:43:43:a2:fb:8a:45:4e:82:c6:1e:
                    1b:74:e2:ef:00:9d:fc:52:89:2c:fe:27:42:5e:98:
                    f2:76:d0:64:95:6c:16:27:2d:4f:67:92:25:bc:0b:
                    f3:7b:86:1f:1d:40:0a:3d:ee:c8:1e:c4:24:14:1b:
                    b7:06:6a:d2:a8:b2:ef:a6:71:21:25:18:52:3a:18:
                    ba:d8:61:2b:92:04:d8:65:d3:f8:09:a6:d5:d2:a7:
                    0b:61:c4:3c:99:8c:d5:9b:e0:4d:13:e2:b0:17:eb:
                    fe:b0:41:b9:77:69:9d:bd:95:34:35:0c:3a:c4:b3:
                    e8:1b:a2:0b:07:cd:19:30:2c:c1:7e:16:e9:23:f8:
                    95:0f:6c:f8:95:d6:f2:d4:d0:13:a4:1f:62:f1:dd:
                    99:e2:dc:58:40:35:d2:5d:25:38:66:9d:06:16:1a:
                    3b:db:31:88:0b:f2:b3:5a:af:6b:0c:45:61:dd:a8:
                    c9:40:e4:01:c5:b0:b7:2a:fa:49:af:2e:fb:ed:27:
                    a0:8d:c2:07:a4:60:e5:60:cb:0f:26:0b:b1:4b:aa:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:53:65:B5:18:81:FF:ED:E8:90:4A:A7:AB:2D:FF:F7:0B:5D:45
            X509v3 Authority Key Identifier:
                keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:f9:5e:db:e8:0c:72:1e:28:4a:de:b3:73:71:b4:37:74:
         cb:54:c6:cc:59:b6:2b:73:85:9d:f2:fe:b0:cd:08:30:22:03:
         2b:fe:ab:d3:cb:b8:1b:fb:9b:39:4f:4b:ce:0c:8b:94:b0:75:
         61:bd:e2:4e:6c:02:71:68:63:c4:84:c4:3a:02:22:85:d4:c4:
         07:1f:65:9a:69:90:b1:75:40:16:1d:f4:c4:77:f4:3f:47:23:
         c0:93:2c:57:3b:ca:dd:2f:dc:39:34:ea:e3:72:db:98:01:61:
         9f:e0:e4:16:54:a5:22:8b:6c:c0:cc:9b:b3:9e:5b:89:0b:40:
         ce:dc:4c:e9:e1:6c:49:2c:35:4d:44:c8:36:de:67:46:ef:5f:
         97:ac:15:fb:8d:88:75:a9:d5:40:f6:c8:7d:09:32:f0:39:51:
         71:a3:4e:7a:7a:ec:95:0c:3c:fc:f3:6f:56:82:a2:d6:3b:3b:
         69:c2:7f:18:76:60:82:49:7c:77:8b:1a:e5:61:17:62:0a:be:
         bd:4b:96:e7:33:26:ef:a9:ab:22:cf:04:61:6c:32:59:48:44:
         79:fb:cb:2d:63:70:de:d0:37:ac:b1:67:84:2e:7a:7d:ed:a9:
         ee:55:77:40:1f:dd:10:d6:36:e4:ef:08:d1:21:63:b8:c7:a0:
         b8:13:c0:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE
Nzk1RkZDODQwHhcNMjUxMDE4MTYzOTU1WhcNMjUxMDI1MTYzOTU1WjAYMRYwFAYD
VQQDEw02OGYzYzJkYi01MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFL4CBLhNyO1fNkR672sj9MTw3M/RGdMuiscXyPZd/4T+T2VujOiCb/qC2Zk
c5ST6ENDovuKRU6Cxh4bdOLvAJ38Uoks/idCXpjydtBklWwWJy1PZ5IlvAvze4Yf
HUAKPe7IHsQkFBu3BmrSqLLvpnEhJRhSOhi62GErkgTYZdP4CabV0qcLYcQ8mYzV
m+BNE+KwF+v+sEG5d2mdvZU0NQw6xLPoG6ILB80ZMCzBfhbpI/iVD2z4ldby1NAT
pB9i8d2Z4txYQDXSXSU4Zp0GFho72zGIC/KzWq9rDEVh3ajJQOQBxbC3KvpJry77
7SegjcIHpGDlYMsPJguxS6q+SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh5U2W1
GIH/7eiQSqerLf/3C11FMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE
X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQf/le2+gMch4oSt6zc3G0N3TLVMbMWbYrc4Wd8v6wzQgwIgMr/qvT
y7gb+5s5T0vODIuUsHVhveJObAJxaGPEhMQ6AiKF1MQHH2WaaZCxdUAWHfTEd/Q/
RyPAkyxXO8rdL9w5NOrjctuYAWGf4OQWVKUii2zAzJuznluJC0DO3Ezp4WxJLDVN
RMg23mdG71+XrBX7jYh1qdVA9sh9CTLwOVFxo056euyVDDz8829WgqLWOztpwn8Y
dmCCSXx3ixrlYRdiCr69S5bnMybvqasizwRhbDJZSER5+8stY3De0DessWeELnp9
7anuVXdAH90Q1jbk7wjRIWO4x6C4E8Cd
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:20 2025 by rpki-client