Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
File:                     0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json)
Hash identifier:          G6tVnX3sg58aLAn4CKbNp8jnHPDrAG8Pj2kptAuAK20=
Subject key identifier:   D0:96:17:A6:D7:D6:4C:89:8D:BC:BA:AB:A9:6D:54:8F:BF:A4:8E:EE
Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A
Certificate issuer:       /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A
Certificate serial:       3361
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
Manifest number:          9AF9
Signing time:             Sat 18 Oct 2025 15:26:35 +0000
Manifest this update:     Sat 18 Oct 2025 15:26:35 +0000
Manifest next update:     Sat 25 Oct 2025 15:26:35 +0000
Files and hashes:         1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: bvDTlbszxCYwLJr6o8cyIp4Y8jItnVH2ytwB+PcRsFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13153 (0x3361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A
        Validity
            Not Before: Oct 18 15:26:35 2025 GMT
            Not After : Oct 25 15:26:35 2025 GMT
        Subject: CN=68f3b1ab-3a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:4f:0f:55:aa:46:98:c5:23:cc:29:58:71:
                    91:69:e4:2d:3b:56:79:e3:c6:96:e1:3a:e9:c8:4b:
                    a5:71:66:3f:a1:48:52:62:db:41:78:07:e1:7b:e7:
                    49:58:86:ae:90:43:c1:85:a5:32:25:63:34:e5:5f:
                    8b:89:90:6d:24:0e:7d:10:d7:6c:20:fd:10:ec:a5:
                    78:d7:88:af:b2:37:c4:ed:78:f7:58:59:24:55:fc:
                    ad:af:f5:8f:44:94:a1:0c:2e:78:0f:9a:40:3c:06:
                    4d:23:dc:c7:43:4b:43:25:19:60:af:e3:05:16:fd:
                    98:c4:a2:96:fe:c9:d2:50:3c:d4:b7:1d:59:18:50:
                    24:0b:e2:c3:09:bd:cb:c4:2a:12:dd:c7:71:02:db:
                    6b:32:33:7a:a8:07:9d:cf:1a:ca:a9:c2:27:f5:eb:
                    91:66:f8:93:38:27:d0:97:b5:4c:c3:6e:a0:eb:8e:
                    38:2a:f3:c1:e5:40:02:40:63:8d:56:c9:79:2f:37:
                    c3:33:eb:90:f1:9c:ac:ce:05:8f:21:be:6d:ab:7f:
                    9b:e5:88:c9:e9:58:a3:73:44:ff:b3:9c:73:46:8f:
                    9a:6c:6a:98:53:ae:10:4c:02:a3:3a:21:20:b5:86:
                    72:ff:7e:57:da:83:b4:1a:01:a4:fd:ab:52:01:99:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:17:A6:D7:D6:4C:89:8D:BC:BA:AB:A9:6D:54:8F:BF:A4:8E:EE
            X509v3 Authority Key Identifier:
                keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:ab:53:90:91:05:3c:43:2e:6a:3d:e4:c0:a3:b0:50:48:
         92:b3:66:08:1e:ca:66:25:31:94:cb:76:ff:ce:87:82:19:c6:
         09:8f:88:08:09:0f:8d:ea:18:30:4d:f0:2b:94:63:7f:d4:1a:
         21:48:d6:51:07:1a:db:87:6a:1d:47:0d:66:f9:ec:22:bf:b2:
         31:16:10:9e:ad:a1:68:83:b7:c4:97:6a:3a:39:d4:d3:be:ce:
         8e:6d:47:5b:4c:62:58:f3:89:29:b2:1a:4b:3e:f1:99:b5:db:
         27:f2:0d:f5:5d:6c:7c:a2:e7:8f:4c:13:bd:7b:22:ef:f4:60:
         15:fc:15:52:2e:90:3b:11:10:9d:66:7a:f8:b8:1f:29:9f:e8:
         92:34:f2:d5:fa:a0:93:4e:e1:43:19:7e:9e:76:cb:1f:83:f4:
         3e:a9:e9:98:94:f8:62:63:62:e7:82:e6:6d:63:f9:17:2e:33:
         08:e5:f4:2c:ad:a6:e4:37:29:19:ed:09:af:cb:fe:92:27:67:
         99:1a:6a:7f:25:0e:1f:59:c5:31:bd:03:e0:fd:45:9e:4e:b6:
         ae:ed:8c:ef:22:01:08:d0:c2:16:73:5c:52:67:a1:30:0c:69:
         7e:96:ff:79:bf:0d:b5:7a:a3:16:4a:88:32:52:12:b4:b0:d9:
         b1:ad:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:27 2025 by rpki-client