Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          asF8VIhlLEw6mh7LnLRxjRxe9uQ2f8NXFXCnldJjE4c=
Subject key identifier:   AE:8A:03:65:97:47:3F:D9:30:10:7B:F1:C3:A5:CC:8C:20:FC:F8:0E
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       34CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          34CE
Signing time:             Sat 18 Oct 2025 15:27:30 +0000
Manifest this update:     Sat 18 Oct 2025 15:27:29 +0000
Manifest next update:     Sat 25 Oct 2025 15:27:29 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: UQsw5ZE7eqcfAZE7lnhgduYhxPEEFyOAw5AYVUpZmd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl
                          rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13519 (0x34cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Validity
            Not Before: Oct 18 15:27:29 2025 GMT
            Not After : Oct 25 15:27:29 2025 GMT
        Subject: CN=68f3b1e1-8deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:f9:72:fb:0a:f8:fd:90:f4:eb:5b:9f:50:
                    19:fe:16:6e:5d:57:c2:a0:70:af:cf:f6:1d:88:e0:
                    b5:a6:d4:18:ae:1d:57:41:07:44:46:dd:61:5f:40:
                    5c:6f:43:b0:73:a5:1b:8d:dc:bb:ef:b8:92:9f:a5:
                    a4:48:8e:6b:b3:42:0c:7b:18:34:f2:ee:cd:af:e0:
                    65:73:54:25:b3:bf:71:5c:db:fd:f1:e4:aa:50:f3:
                    c9:62:a6:35:2c:5a:14:7a:ea:b3:77:b2:c5:d4:ba:
                    63:01:1e:da:9d:cc:b4:c7:12:67:c9:20:24:fe:17:
                    e2:4f:50:e7:65:72:bb:eb:3f:1b:fc:5c:21:af:c7:
                    14:44:bc:5f:f2:e6:ba:5c:5e:d1:e8:c5:87:02:bd:
                    39:7d:99:18:a3:b3:f8:45:5e:91:b3:3f:04:64:46:
                    43:21:2b:45:49:15:ef:9c:72:40:e4:11:c9:d0:66:
                    41:b6:cc:08:e9:8c:19:53:8e:1f:37:a6:59:e8:f2:
                    8a:d1:d7:4b:57:0d:0d:67:cd:13:c5:ee:3f:57:f6:
                    94:ed:f4:f6:bf:6c:e9:fa:91:f1:b8:cd:59:6a:ec:
                    dc:34:09:1f:18:02:20:83:f8:42:17:58:9f:6f:4b:
                    ff:57:58:87:30:9c:c2:6c:92:6c:e7:08:fc:21:67:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8A:03:65:97:47:3F:D9:30:10:7B:F1:C3:A5:CC:8C:20:FC:F8:0E
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:e2:44:03:d8:54:5b:9e:30:b3:b9:aa:93:43:89:84:8f:
         6d:bd:b6:f0:ee:35:f3:9e:38:2c:e0:f3:13:9b:40:cb:4a:8b:
         39:73:9a:6e:6c:3c:f4:bf:08:12:0d:44:fc:f6:58:f5:88:72:
         d5:d8:d3:47:41:e2:6d:54:63:d2:0e:3b:50:bf:af:69:9d:f7:
         ca:aa:bd:a7:1f:c6:59:7a:b0:27:c8:5c:ef:50:59:2c:00:40:
         ff:fb:2d:a3:90:2c:c5:78:36:9e:8f:c1:21:9e:0e:3a:24:5b:
         97:27:55:f3:9a:61:b9:0d:79:73:90:f0:af:43:6e:c0:03:88:
         15:f9:c8:c5:4c:44:c1:f7:10:a5:d4:8b:2d:1f:23:05:b3:98:
         3d:76:b3:8b:bf:f3:6d:86:36:ad:44:8c:56:4d:ab:84:63:76:
         35:55:d9:08:1c:47:af:3d:2f:7e:e0:75:8e:1c:6c:b4:62:fb:
         d1:dd:97:16:56:96:62:1e:21:f2:96:1c:bc:b6:f5:e4:f0:d2:
         a9:8b:d9:9f:1e:d0:c2:21:20:95:2e:39:23:ea:ce:ab:d4:f0:
         07:2e:de:0b:79:d7:e6:9d:fe:b9:60:ae:3b:74:bd:3d:e4:d2:
         62:71:f2:e8:f6:f9:ef:03:99:86:2c:73:db:0d:fc:c6:d3:80:
         b6:65:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:01 2025 by rpki-client