Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File:                     kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier:          JHtzxa4VGg2txbq+BN/KpqjD8b1wwL/bI30xD9JQ9Ao=
Subject key identifier:   DC:4B:32:EF:84:AE:99:D5:FF:A8:94:4B:65:6B:86:3E:F9:D9:84:1D
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       0661
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number:          065C
Signing time:             Sun 19 Oct 2025 00:09:47 +0000
Manifest this update:     Sun 19 Oct 2025 00:09:47 +0000
Manifest next update:     Sun 26 Oct 2025 00:09:47 +0000
Files and hashes:         1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: xdMZbIEWoQI/lDRIq1R6qiNUVInLCgEDnloulrsi73c=)
                          2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: Oct 19 00:09:47 2025 GMT
            Not After : Oct 26 00:09:47 2025 GMT
        Subject: CN=68f42c4b-8006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:ea:db:87:d1:ec:ca:16:de:42:f9:ba:2c:
                    57:fd:c9:18:2e:6b:33:a4:96:68:9e:3f:40:9e:30:
                    66:08:0c:44:b0:56:f8:43:0b:77:9d:7b:99:8b:c8:
                    a4:f9:b1:40:79:f4:4b:19:25:f1:6d:2a:77:a7:52:
                    ae:10:5f:e9:24:19:03:f8:34:29:43:0f:ef:32:ec:
                    df:ae:70:b0:c4:56:9c:84:a6:09:66:21:d1:48:ba:
                    16:6e:bf:c7:fd:e9:9e:bc:5e:76:93:6a:09:b0:22:
                    2f:08:7d:99:d7:fb:38:85:f6:d9:9f:79:af:24:ad:
                    80:a7:65:22:33:c4:e7:44:f4:14:73:49:17:68:26:
                    52:62:0d:6f:3d:84:8f:78:b2:0a:ca:d8:89:03:ed:
                    c5:a3:da:09:c3:d5:0f:58:89:f7:3e:94:6f:d7:74:
                    d4:5c:83:c7:84:6f:85:5c:75:a7:f8:09:2e:97:3f:
                    ad:e0:cd:84:8f:83:88:d6:a6:05:93:b7:3e:c2:e3:
                    77:ed:f5:c6:ce:65:44:d1:81:73:02:8a:08:62:3c:
                    ba:15:a8:0b:82:06:4c:ca:79:b1:e7:b8:8e:71:1e:
                    03:14:81:a3:08:79:2b:02:50:97:02:04:f3:ce:04:
                    ed:f0:74:7d:96:5e:a7:28:24:bd:45:7b:e1:9b:3b:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4B:32:EF:84:AE:99:D5:FF:A8:94:4B:65:6B:86:3E:F9:D9:84:1D
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:6c:bb:10:70:69:ce:3f:a3:ef:bf:4a:b5:81:56:48:6f:
         12:fe:ee:fc:05:37:d8:e6:bd:5d:41:98:c2:bb:00:3f:fe:6f:
         4b:be:7b:a2:e2:a5:0a:b4:1b:1b:29:4b:14:99:5c:a6:5e:e0:
         2b:b6:af:b8:47:ff:7c:c8:9a:83:94:78:05:90:13:af:38:d4:
         73:4b:ab:80:ad:16:9f:e5:10:1b:c8:c6:e0:77:5c:3d:f5:f7:
         bb:4f:32:d0:8e:e8:34:a1:ff:6c:84:ec:aa:2c:3e:f5:ac:68:
         f3:af:ec:26:0d:45:dc:4f:c2:76:a0:ef:83:e8:32:ed:c3:be:
         37:e9:b5:44:87:ad:29:20:94:e2:5d:ca:10:65:f1:83:12:ae:
         4d:0a:c8:69:ae:72:22:ea:fe:d5:d5:2b:56:ba:9c:3f:cb:c1:
         22:6a:1c:cc:8a:0d:e8:1b:f4:bf:fd:de:5d:9d:bd:07:a7:2b:
         ec:ec:0c:44:7d:c6:ec:0e:f8:fe:dc:0a:a0:76:bf:c9:b9:54:
         a5:45:98:16:7f:a4:69:cf:05:ee:3d:30:d8:00:09:81:0a:a0:
         a4:27:78:e0:63:b5:da:bc:34:0e:32:3b:d1:f4:74:e5:1c:df:
         e1:f9:a9:22:1d:8e:b6:e0:51:ec:95:bc:d7:36:67:c1:27:95:
         b8:00:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:06 2025 by rpki-client