Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
File:                     6RNroVXdqYLO0enREJ2UGszagj0.mft (raw, json)
Hash identifier:          nJm6ucYqbgCEHKUBl+Or7tsa9Un5Fe8Jt3tn4yh7D14=
Subject key identifier:   78:78:62:19:D3:42:D4:BF:D6:1A:C5:7B:19:DD:4D:0A:65:F4:7B:F9
Authority key identifier: E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D
Certificate issuer:       /CN=A915A4AF/serialNumber=E9136BA155DDA982CED1E9D1109D941ACCDA823D
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
Manifest number:          D2
Signing time:             Sun 19 Oct 2025 08:42:17 +0000
Manifest this update:     Sun 19 Oct 2025 08:42:16 +0000
Manifest next update:     Sun 26 Oct 2025 08:42:16 +0000
Files and hashes:         1: 6RNroVXdqYLO0enREJ2UGszagj0.crl (hash: s4xLVmcM6uFNWukKfcCm5EFfPKRNyJdDW7fXIzUhRrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=E9136BA155DDA982CED1E9D1109D941ACCDA823D
        Validity
            Not Before: Oct 19 08:42:16 2025 GMT
            Not After : Oct 26 08:42:16 2025 GMT
        Subject: CN=68f4a468-bccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:f0:df:ec:c9:e2:6c:01:47:50:5d:3f:5e:
                    f6:9c:6a:83:19:4d:64:57:93:4b:66:7f:fb:8d:1b:
                    cc:8e:15:49:15:66:09:02:48:3f:79:fe:ad:f3:5d:
                    17:6d:e6:a2:30:b4:b0:de:bf:92:c6:3f:d2:e3:f0:
                    dc:2c:3c:34:ad:a2:f7:6f:35:ba:44:fc:60:5f:56:
                    94:14:2c:5f:2d:db:ce:8e:e8:41:6b:45:29:f1:08:
                    fc:da:68:c3:17:ea:fd:50:0a:4b:4a:47:8d:1f:05:
                    59:c7:26:99:b8:6d:5f:77:8e:7b:12:4c:79:8f:29:
                    ff:b2:0f:7f:95:1a:ae:47:4d:6d:9d:ff:4a:68:59:
                    53:02:fb:a0:a5:b5:92:25:1a:f0:34:3d:ec:2e:01:
                    18:32:ee:8f:6d:ad:0c:c6:2e:bf:3d:4c:da:c9:57:
                    d9:c2:6d:d6:6c:35:87:ee:ca:0c:45:84:0d:0d:d5:
                    a4:44:db:19:ce:dc:8a:83:65:74:61:19:22:b5:96:
                    b9:31:7a:f1:cf:be:d4:2f:2a:ba:1e:3b:ab:36:13:
                    76:c1:23:51:3f:4c:b7:ad:de:7f:d1:79:60:aa:a6:
                    b3:fd:28:20:26:76:94:87:ad:2b:1d:40:3b:ca:c2:
                    92:be:29:e0:f2:42:da:5f:b6:70:a4:2a:a6:96:97:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:62:19:D3:42:D4:BF:D6:1A:C5:7B:19:DD:4D:0A:65:F4:7B:F9
            X509v3 Authority Key Identifier:
                keyid:E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d7:d8:d0:92:ff:70:05:5d:13:fc:09:94:e3:ce:b2:b0:e5:
         bf:94:0c:d6:de:ee:06:33:8b:83:fd:79:9f:0f:89:cc:95:05:
         5c:96:1b:1f:63:53:cd:14:af:95:09:eb:7d:67:8c:de:78:42:
         df:d4:23:9b:4a:b9:32:20:38:cd:e1:18:c1:12:af:5b:c3:2b:
         7a:33:fb:3f:b0:5a:4c:34:1b:26:8f:fa:59:81:bd:24:c8:ba:
         fd:6b:48:de:96:d6:dd:e4:b8:68:e8:cc:60:ee:b0:13:40:c5:
         63:e8:36:28:68:db:a1:3e:57:b1:55:9b:08:5a:37:74:95:df:
         83:30:7c:72:32:aa:a0:37:c2:42:0a:3e:00:51:18:81:5d:bd:
         20:f8:b9:32:80:38:02:fe:d5:23:fe:3e:9f:ee:ae:0e:ef:e3:
         8c:d1:bc:76:33:39:ea:0f:d3:7e:ca:eb:e9:58:91:56:ff:45:
         df:3a:c5:59:30:8e:bf:99:ce:d2:54:55:08:3c:26:b8:3a:d2:
         02:02:af:c2:05:a7:3f:b1:d2:bd:3d:d3:a9:5c:55:d1:5b:d6:
         ad:40:4d:1a:08:cf:e7:7c:64:85:19:91:c0:69:fc:fd:d9:69:
         4a:33:62:d5:7b:7d:94:43:dd:e8:31:14:a9:ed:80:8c:b7:d9:
         e0:a4:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:32 2025 by rpki-client