Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          3aFuXdMG9tmNF4tNY+1AcE3PE5xRsiS1Vuo7YuDozdU=
Subject key identifier:   DA:07:EA:45:B1:1A:4C:A0:97:F6:BD:B6:2C:F0:96:00:3B:25:00:3C
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       1043
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          1024
Signing time:             Sat 18 Oct 2025 18:01:18 +0000
Manifest this update:     Sat 18 Oct 2025 18:01:17 +0000
Manifest next update:     Sat 25 Oct 2025 18:01:17 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: WI+ghwBp6EZqWqx0NNGOhYTF1ga7+hp3LFujpbf6Rgk=)
                          2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
                          3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
                          4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4163 (0x1043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Oct 18 18:01:17 2025 GMT
            Not After : Oct 25 18:01:17 2025 GMT
        Subject: CN=68f3d5ee-97aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:a5:af:f8:0f:64:be:de:7b:60:78:ca:04:
                    4a:69:7b:dd:1a:07:9a:51:61:55:3f:4f:d0:ef:d9:
                    ef:6a:38:b0:1a:6f:b2:50:b1:75:9d:2d:a6:1e:1d:
                    7c:64:1e:33:61:3b:68:c2:1b:52:c2:56:83:2d:59:
                    03:c2:65:d7:a3:1a:f1:7f:77:38:af:40:b8:d3:e4:
                    d3:ad:c2:92:82:68:fb:75:c8:d7:6b:79:14:77:2b:
                    3d:60:63:75:92:5a:2f:18:e0:56:12:51:46:b0:74:
                    6b:51:70:a2:2f:41:4c:8e:c1:e1:9a:c5:e1:5b:f3:
                    79:a8:ac:38:1c:37:93:81:72:e2:da:09:8d:27:11:
                    6c:6f:04:b3:15:6b:80:8c:d9:9a:9c:73:66:5b:0d:
                    41:39:97:db:56:c6:ef:69:11:10:bb:1d:4d:c0:81:
                    ec:57:bb:f6:5d:ec:02:75:52:e5:b0:9a:dd:b8:95:
                    cb:d6:ce:a0:fa:1c:f3:72:58:e2:ee:2e:40:af:e0:
                    64:d9:46:72:84:cc:46:6d:5d:95:bb:e8:62:9f:b0:
                    4b:de:eb:64:c3:ad:01:d7:f4:64:36:38:0e:cb:5b:
                    40:4f:20:70:a3:54:3f:d8:31:f8:0a:ae:a0:f8:08:
                    85:27:b9:97:90:a2:99:ab:8b:ce:cf:ac:a7:1a:24:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:EA:45:B1:1A:4C:A0:97:F6:BD:B6:2C:F0:96:00:3B:25:00:3C
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:62:85:86:32:8b:4f:4a:29:a2:cc:30:4d:97:d9:be:1c:
         ff:39:64:b0:a5:ff:41:65:fa:51:ce:80:87:2b:55:eb:cd:0b:
         8a:99:ff:b9:14:c7:e0:57:59:46:79:91:a0:43:45:6f:d7:68:
         6b:91:22:8a:1d:d7:41:32:e6:9f:f8:0e:f4:e2:ca:25:16:c8:
         68:b4:f5:97:7f:13:38:16:6f:04:84:9c:2d:5c:c3:62:ac:32:
         d6:e6:8e:99:5e:ed:9e:5c:57:5d:c2:3f:22:0d:77:72:d4:99:
         97:8d:bf:42:0f:60:30:42:c0:f3:d8:8d:0d:90:48:4b:0d:02:
         f2:df:79:d4:e8:b4:a9:f8:7a:1b:2b:a4:bf:1e:3b:33:ec:69:
         69:48:94:3a:07:86:91:62:44:b6:f7:55:36:60:a9:ff:57:52:
         5a:b0:35:d8:cc:2e:4d:5f:7a:70:d5:41:41:46:33:e7:d4:f4:
         8b:ce:30:a0:97:33:8d:89:f3:04:a8:e8:17:4a:f6:6c:c7:b4:
         d1:87:5b:09:37:8a:70:04:16:1c:7d:5e:b5:35:04:10:08:a8:
         80:fe:18:ba:3b:fc:a4:0f:54:69:6d:a7:16:77:36:8d:87:6a:
         15:ca:cb:34:ee:fe:7a:90:e1:cf:3a:5c:48:a2:77:84:f3:bf:
         74:f7:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:08 2025 by rpki-client