Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          CLyOtKVd/VsiqPV6wHlcc+kZ6KTSgrs65SyMuVHGUJE=
Subject key identifier:   27:27:02:8A:D5:C5:10:D0:26:27:A2:68:3D:3F:E9:89:16:5D:DE:0D
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       34CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          34CE
Signing time:             Sat 18 Oct 2025 14:37:05 +0000
Manifest this update:     Sat 18 Oct 2025 14:37:04 +0000
Manifest next update:     Sat 25 Oct 2025 14:37:04 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 8k8A5HtT4wpAGi+JyjpV35aHH0GeqAWy0RMgscSWVTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
                          rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13518 (0x34ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
        Validity
            Not Before: Oct 18 14:37:04 2025 GMT
            Not After : Oct 25 14:37:04 2025 GMT
        Subject: CN=68f3a610-7bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:ce:e8:39:c2:35:42:31:4d:a9:42:c5:71:
                    6b:10:ec:32:17:a6:47:37:d0:06:db:30:cd:f8:5b:
                    6c:2b:06:2a:f2:79:d5:0d:80:18:ea:da:c7:f9:99:
                    33:07:26:ce:27:d1:89:c6:dd:20:d9:bb:d9:f6:81:
                    1b:8b:ba:39:63:80:f0:2e:91:c6:f6:73:1c:ea:7b:
                    c0:ce:35:47:71:06:43:27:63:ee:17:cd:40:06:6e:
                    7c:6c:71:05:8f:7f:fe:7a:01:1d:fa:c8:23:c7:55:
                    9d:fd:56:3c:6b:9a:72:c2:70:35:9d:8d:a2:e8:38:
                    42:51:77:e1:6c:b3:79:d8:85:ba:4e:66:b0:c5:e7:
                    8f:8a:e5:02:be:59:50:cc:27:dd:96:c2:d7:58:c9:
                    fe:ed:7b:2b:e4:db:eb:6b:a1:cd:fd:e5:f8:fc:45:
                    e8:b3:ee:d5:ab:21:32:18:04:8b:fc:bf:c1:a6:bb:
                    3e:96:99:3f:56:fd:c1:06:79:a7:06:04:0e:35:bc:
                    f9:fd:5b:54:ea:66:9b:90:70:d0:87:68:13:f5:be:
                    f3:d0:d5:53:fa:95:7d:46:e6:d3:c8:6e:89:c6:a5:
                    9f:43:02:20:cc:11:e5:45:b4:45:95:ee:71:d7:e8:
                    53:5a:22:18:c8:dd:1e:2a:56:51:fa:cf:e1:58:62:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:27:02:8A:D5:C5:10:D0:26:27:A2:68:3D:3F:E9:89:16:5D:DE:0D
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:aa:84:88:22:ec:f5:e8:33:1e:18:24:a6:19:ec:18:e5:
         38:0e:fe:66:79:11:04:d0:b7:a1:68:4e:35:c1:dd:64:5f:4f:
         5c:72:0c:13:db:1e:c9:bc:5f:c2:10:fc:b7:ea:7c:d1:70:20:
         97:37:ee:00:22:1d:b8:95:d2:27:6c:d3:8a:3a:63:ca:34:46:
         66:8a:b9:49:83:7a:d4:63:3a:7f:2b:4c:17:46:3c:5e:69:86:
         56:0a:23:aa:29:33:1a:64:8d:ce:56:43:2f:7d:74:81:e9:45:
         e3:48:34:8d:62:8e:2a:64:9b:64:00:22:f4:2b:82:17:3b:f6:
         1f:b1:55:75:40:2e:6b:95:bc:fb:87:8a:2a:85:e0:ec:18:98:
         4c:83:92:da:1b:37:37:88:b2:13:c6:8c:ed:10:ba:b7:31:5e:
         cc:64:02:21:7d:05:05:2c:ff:13:34:99:b6:f6:a4:00:9e:56:
         d4:63:5d:59:6c:75:2e:05:fc:f7:cd:24:9e:11:8e:be:c2:7e:
         10:fe:60:2e:bf:f2:13:9f:cc:f9:9f:3a:98:b0:d8:a7:29:7d:
         7e:4e:1b:62:b3:d1:15:13:a9:a4:92:e1:ea:bf:cc:bd:69:09:
         b4:b9:81:45:f7:44:7d:ba:87:d3:c9:59:56:2b:f7:f5:da:ae:
         03:9a:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:42 2025 by rpki-client