Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File:                     pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier:          9yicNRsfhqbGHeKD1m8e1raxDJNKcfF1UX6FEyMN4aw=
Subject key identifier:   DF:F0:4E:9A:F0:FA:E4:18:5B:44:E2:FD:82:F4:D1:27:84:F4:2B:5E
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer:       /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number:          0232
Signing time:             Sun 19 Oct 2025 04:05:50 +0000
Manifest this update:     Sun 19 Oct 2025 04:05:49 +0000
Manifest next update:     Sun 26 Oct 2025 04:05:49 +0000
Files and hashes:         1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: Gdkk6l0HpSAWm3V7eBpgS31l4bfn0bzF/OjkitAsyHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
                          rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
        Validity
            Not Before: Oct 19 04:05:49 2025 GMT
            Not After : Oct 26 04:05:49 2025 GMT
        Subject: CN=68f4639e-aa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:af:5a:36:91:5e:42:e3:46:42:96:13:5c:
                    27:62:f1:dd:4b:59:60:f5:05:4b:f2:75:39:7a:57:
                    16:09:ef:0c:f9:cb:c7:6b:55:6e:62:ad:ae:7b:89:
                    9b:23:61:91:03:76:d7:49:e3:36:13:f2:de:83:52:
                    34:77:59:a2:e4:2b:27:c2:54:8f:62:ad:72:6d:77:
                    c1:78:82:ce:e4:87:a0:38:b8:d8:67:e9:f1:7b:34:
                    30:05:3a:a2:7b:d4:d1:64:9e:2f:8e:06:8b:7e:fb:
                    d9:25:ec:c1:1e:9d:91:e2:a2:b6:4b:3f:1d:88:d4:
                    e4:03:b7:af:69:5c:a9:cc:3c:83:7e:47:3c:96:6b:
                    0a:10:2a:70:24:90:d8:ea:c6:eb:29:8f:ed:27:61:
                    86:77:51:87:19:8c:98:2f:b4:5a:0a:1d:19:70:9c:
                    dc:ab:18:c8:cd:f9:f5:9c:f9:bb:66:cc:6b:9c:aa:
                    94:64:66:86:a6:32:4a:a4:10:01:32:ee:64:82:20:
                    70:8e:f6:07:a3:f0:71:54:78:b1:9d:c8:64:f1:97:
                    58:1b:f2:ca:61:a4:11:01:b8:ae:b6:17:fe:9f:da:
                    77:ce:d3:9b:9a:28:40:f7:04:07:c2:be:06:ba:6e:
                    4a:07:3c:b3:44:ec:47:39:67:13:65:eb:b1:c2:05:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:4E:9A:F0:FA:E4:18:5B:44:E2:FD:82:F4:D1:27:84:F4:2B:5E
            X509v3 Authority Key Identifier:
                keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:ee:8b:23:3c:72:cb:13:5c:45:f0:96:33:9e:2e:f6:c0:
         02:ac:9b:79:ce:35:33:0f:b4:3f:21:0b:34:72:06:2f:75:fc:
         6d:0d:79:83:33:50:f4:71:83:6a:0e:c8:f6:89:1a:26:1c:6d:
         33:ad:49:0a:08:82:ac:d5:e4:eb:4a:c2:79:fc:c6:fe:46:9e:
         b1:f1:6a:c8:d2:82:6d:e9:c0:ad:d6:7c:2d:e0:dd:07:f4:f3:
         1b:a1:e1:4b:09:74:b2:6f:2a:0e:b2:f7:27:04:d9:58:0d:02:
         0a:93:cc:66:cf:91:a2:ac:bc:20:e7:4f:a3:5a:28:94:3b:2d:
         36:cc:86:e6:7a:c5:3a:d4:ce:6a:4e:13:bb:ce:5a:fb:a5:6f:
         f8:54:70:8e:81:a9:b6:eb:4b:1c:e7:c9:a2:24:2b:e1:aa:32:
         8c:6a:73:78:3b:7a:4f:87:90:1c:74:02:75:61:cb:75:7d:e1:
         49:54:a5:60:50:5c:9d:e0:ee:b4:66:0f:00:85:e4:98:ce:dc:
         4b:94:0f:ed:19:cc:0a:ad:1d:51:60:c6:a2:cd:ca:84:bc:3f:
         a2:84:cc:94:f5:6a:6f:68:79:8f:9d:24:85:83:86:b4:25:98:
         52:c3:b1:5f:34:ba:43:ba:7f:ac:3b:91:d9:69:b4:39:e9:70:
         3f:d0:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:05 2025 by rpki-client