Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File:                     STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier:          rQ7BuaCpbg0/6KOSI1yPgbC+C55mRVpnjlh2pgkhiJA=
Subject key identifier:   51:EE:02:AD:74:31:18:B1:68:C8:76:BB:63:77:2E:1B:29:30:14:C3
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer:       /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number:          C5
Signing time:             Sun 19 Oct 2025 08:55:50 +0000
Manifest this update:     Sun 19 Oct 2025 08:55:50 +0000
Manifest next update:     Sun 26 Oct 2025 08:55:50 +0000
Files and hashes:         1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: DTaN3aKySmoA3R2ONI0f56NTjTMV01hDlohJkWA+ZUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
        Validity
            Not Before: Oct 19 08:55:50 2025 GMT
            Not After : Oct 26 08:55:50 2025 GMT
        Subject: CN=68f4a796-af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:06:74:e9:5e:91:ee:60:17:1b:fa:a9:54:
                    68:fe:6e:6e:4a:46:71:d9:16:32:59:4c:10:d3:9c:
                    cf:3b:35:27:6d:db:2b:28:16:c9:b1:2d:f8:c1:ba:
                    26:53:0c:1f:e2:f8:60:94:47:d3:ad:79:d5:dd:f2:
                    25:73:9d:df:10:4e:99:62:97:dd:5f:0b:d2:3e:76:
                    37:c2:f5:d8:05:76:fe:29:5a:ee:2e:df:50:3c:94:
                    54:05:8e:39:0d:ba:19:0f:5d:2d:c6:a8:32:4e:da:
                    14:c7:22:3e:76:db:ac:2b:ab:d9:55:43:65:27:27:
                    82:7a:73:56:1c:65:f7:63:6a:e2:b4:d4:6d:79:ef:
                    b4:96:d8:15:76:0d:14:5e:1e:a6:5a:4d:1f:85:d9:
                    ac:51:a5:3b:6f:02:b0:6f:b1:a3:04:46:f9:96:39:
                    0f:d2:57:be:52:1f:69:56:94:fb:05:e6:e7:ea:07:
                    e8:fd:b3:7a:4e:fa:ed:36:bb:f0:06:56:08:58:50:
                    12:81:70:34:97:6e:76:2e:6c:4d:a7:3c:cb:aa:b1:
                    d8:2f:c2:be:c5:68:e2:6a:dd:a3:16:c0:74:2d:22:
                    ee:8d:ad:33:12:72:3c:d2:d2:81:de:d8:4f:71:54:
                    2b:3a:15:2e:b2:01:f5:23:69:b8:df:40:60:eb:3a:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:02:AD:74:31:18:B1:68:C8:76:BB:63:77:2E:1B:29:30:14:C3
            X509v3 Authority Key Identifier:
                keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:cb:08:9d:1e:3d:a1:8d:cb:5e:8f:80:63:28:e8:72:9c:
         51:28:cf:67:52:24:d4:18:b8:8f:c2:8a:4c:86:ca:41:27:98:
         d9:19:cf:4e:65:42:1d:82:c3:1e:01:06:45:57:09:e1:15:4c:
         2d:ef:b4:f5:aa:df:73:67:b1:fc:1a:ba:bb:0e:d9:15:c8:5f:
         9a:0d:02:c7:d8:74:8a:00:47:7f:24:2b:44:8e:68:61:26:ac:
         51:a5:43:ee:e9:ee:7b:0f:6f:e5:d4:a8:e4:e2:3e:fb:79:48:
         67:db:6f:86:34:16:33:2e:dc:5a:6f:39:8a:4f:11:5c:19:aa:
         e6:af:7b:95:f6:2b:c1:1f:bd:0b:33:7a:e3:42:c9:60:48:49:
         4c:cf:7a:52:60:51:b0:1e:30:15:b9:df:71:ca:39:b7:48:b6:
         6f:7f:9a:a7:a5:f5:2f:e4:9a:f6:cc:82:81:d8:39:75:ce:61:
         11:f3:76:73:89:39:e1:4e:9b:a8:4d:99:80:8f:d7:15:11:18:
         85:e8:22:fc:30:95:9e:bc:b7:3e:12:63:9a:8c:23:0b:8a:fe:
         ec:07:b1:7c:a7:8d:0c:79:92:2f:db:6f:ea:a3:e2:bc:11:90:
         6d:af:ff:c3:01:87:9b:d8:a3:8f:55:9b:31:5d:0e:41:a5:3d:
         b0:d4:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:13 2025 by rpki-client