Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          GWQnkyDFGFWlFCVaqcUkFaSh5wWHxWzbEkjUvYFGSQ0=
Subject key identifier:   67:94:58:42:53:6C:5A:10:CC:7D:9B:E0:F8:C2:FD:32:ED:4A:42:75
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0C73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0C6E
Signing time:             Sat 18 Oct 2025 19:11:43 +0000
Manifest this update:     Sat 18 Oct 2025 19:11:42 +0000
Manifest next update:     Sat 25 Oct 2025 19:11:42 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: E61Jsq+MedddMCpdbcYUZWsvhmGb7DmvcB8YzhNFKws=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3187 (0xc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Oct 18 19:11:42 2025 GMT
            Not After : Oct 25 19:11:42 2025 GMT
        Subject: CN=68f3e66e-890e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:f9:53:c1:2e:37:49:eb:d3:27:84:54:9d:
                    9b:19:8f:2d:f7:19:df:73:d7:79:ff:33:7f:14:67:
                    de:1f:d3:e5:de:a1:c3:e3:47:98:e7:ff:b2:a5:a5:
                    89:c2:a5:24:e0:61:79:b5:9c:fb:a0:88:7c:08:90:
                    d9:4a:71:7a:d5:11:e9:b0:39:9b:4f:95:db:72:07:
                    59:ce:6b:15:e3:2f:eb:ac:93:06:dd:5b:0f:29:a4:
                    13:81:21:d8:08:40:98:53:39:31:ec:38:bb:2e:b2:
                    ec:c6:e4:02:64:f9:f0:4e:f9:df:ab:e5:f1:30:24:
                    a0:a8:81:9b:70:eb:5c:fe:79:25:23:6f:e4:21:77:
                    59:56:51:ff:57:d1:7c:0b:38:9e:a7:0d:ab:b1:06:
                    aa:a9:76:25:1b:8a:67:7a:49:c9:1b:90:5d:1d:46:
                    c8:e9:08:0b:a7:97:ca:0c:8c:fe:f7:82:e2:b7:f5:
                    6d:8e:4e:5d:fc:20:fc:54:ed:f3:07:3d:90:f6:8c:
                    ae:14:ab:1f:d8:59:b5:70:7c:f3:d3:91:e1:48:3a:
                    b4:0f:b0:e9:cc:e5:cc:30:b0:11:ad:f5:6d:ea:bb:
                    0a:3c:be:c4:2f:39:c3:59:0c:e7:6f:96:d8:8d:0c:
                    e8:83:1d:be:f3:bc:53:cf:09:dc:87:23:4a:e5:ee:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:94:58:42:53:6C:5A:10:CC:7D:9B:E0:F8:C2:FD:32:ED:4A:42:75
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e6:17:69:ee:b4:12:a8:a9:50:74:80:96:3b:44:89:a8:94:
         19:f7:03:60:63:ee:67:fb:af:fc:0d:fa:8c:00:ae:5f:96:0c:
         54:f4:3a:f0:96:bf:24:b9:c5:e7:33:33:08:15:22:42:f9:6c:
         52:d8:5b:8c:39:34:b2:9b:2c:9e:e7:3f:8a:31:8b:61:c8:7a:
         4f:72:30:e5:b2:04:e3:74:2a:e8:36:3c:d1:43:82:df:e9:3c:
         5b:ae:d7:da:19:0b:97:9f:9f:96:bf:53:cc:82:43:47:5c:26:
         34:0c:2c:9f:15:c7:41:c2:9b:a5:c6:76:31:0b:73:c0:db:11:
         9e:ce:61:44:f8:de:a0:2b:68:90:dc:45:4a:74:27:86:1b:d1:
         0a:f0:be:48:17:7a:4e:19:8e:8d:99:e5:00:29:51:ba:5c:5a:
         38:d2:f7:d2:e2:1c:03:9c:72:4c:cc:dd:cf:77:07:07:4c:91:
         63:c9:f6:14:ad:f4:3c:c3:1d:7c:d1:93:d8:0c:a5:1f:88:de:
         40:76:b5:95:ab:c4:85:80:4f:37:7b:23:14:42:29:79:a9:1b:
         df:d1:04:20:78:29:93:0f:fc:98:a5:81:bd:8b:00:2e:a7:64:
         26:8b:c8:c2:62:36:75:1d:49:5b:b3:8e:fe:26:ad:7a:99:4e:
         a0:ea:c9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:51 2025 by rpki-client