Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
File:                     K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json)
Hash identifier:          fjpnUkOtyYwmqxEARA2u69YYDj8VeJ/FFpPTwSox/ow=
Subject key identifier:   55:5C:45:69:2C:40:C5:42:C1:58:BA:0D:DE:60:92:A7:98:E7:3A:77
Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA
Certificate issuer:       /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
Manifest number:          41
Signing time:             Sun 19 Oct 2025 10:53:37 +0000
Manifest this update:     Sun 19 Oct 2025 10:53:36 +0000
Manifest next update:     Sun 26 Oct 2025 10:53:36 +0000
Files and hashes:         1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: uPoXf5O9JSkqlztF4F3SkHycc9jSCmtKqiH7d0/UWYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA
        Validity
            Not Before: Oct 19 10:53:36 2025 GMT
            Not After : Oct 26 10:53:36 2025 GMT
        Subject: CN=68f4c330-6e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:d3:8d:0b:ec:95:d6:56:c5:1a:fb:13:e6:
                    7e:8b:27:36:0c:00:55:16:02:c1:aa:ea:f8:fa:fb:
                    a1:05:0b:e6:dd:45:64:d3:8c:0b:35:6f:8e:89:65:
                    5e:61:b8:3c:3f:cf:bd:a6:7d:17:17:d0:50:7f:82:
                    c3:78:f7:42:c7:be:2b:c6:e9:d9:7b:09:78:00:33:
                    ca:ec:54:85:b6:82:77:21:b0:73:45:46:7c:2a:55:
                    8d:c8:ee:1c:d0:ea:b3:c1:50:2a:55:5d:cd:e1:1c:
                    7d:69:91:de:16:fe:cc:1f:a7:1c:ef:46:2b:7b:d0:
                    00:c3:9a:4d:2e:d3:8b:19:29:15:25:43:66:b6:72:
                    e7:23:39:e1:86:dc:cf:d0:cc:46:7c:cb:da:7d:b8:
                    f6:ab:1a:4e:43:db:b1:15:67:70:a6:dc:7c:1e:e2:
                    49:b4:48:12:fd:e9:c0:6c:88:08:ca:e7:5f:57:87:
                    c0:95:13:dd:e2:7b:00:58:f4:83:c7:38:05:92:48:
                    c1:58:48:72:85:55:9d:00:39:4d:15:38:98:18:dc:
                    ff:f7:f4:d9:98:c1:98:d4:20:1e:0e:d3:a5:d6:90:
                    21:62:ab:38:4c:a6:2a:32:4f:f2:ad:5b:2e:01:c0:
                    c1:58:b5:ab:42:47:42:0a:c8:25:4e:a7:bd:6b:04:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5C:45:69:2C:40:C5:42:C1:58:BA:0D:DE:60:92:A7:98:E7:3A:77
            X509v3 Authority Key Identifier:
                keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:92:ec:21:70:da:cd:7b:4e:b7:e8:0c:20:4c:57:85:61:
         a2:69:c1:4e:ee:ba:19:8d:35:86:5e:2a:ae:d3:bf:f6:04:78:
         4d:4c:6f:4d:40:61:90:a8:1d:74:b6:80:59:da:ec:dd:91:c5:
         df:b9:34:7e:50:ad:53:aa:c9:9a:d7:c7:5b:34:a6:6a:28:85:
         fe:64:06:ee:08:c3:4e:64:8b:8b:03:67:64:4a:97:8f:50:ec:
         b1:fb:9e:a6:e2:e8:e5:20:fb:e8:ca:65:e7:b9:6d:e4:4b:55:
         b6:94:41:52:24:58:a2:bc:43:fc:49:fe:ca:3a:5d:b0:14:93:
         d1:d8:45:af:40:34:92:b3:5f:8a:8b:46:99:a1:9d:11:28:5d:
         3e:b5:61:af:95:74:81:81:16:34:e0:0d:8b:9c:7f:af:d2:c9:
         38:af:ff:fd:64:67:85:a1:cf:de:78:88:a2:12:c1:7e:18:4e:
         a7:26:31:aa:aa:f0:df:50:15:f1:0f:85:60:02:68:24:cd:de:
         40:3c:16:35:19:7e:49:b6:e7:12:e8:d7:81:a2:e9:d6:b1:66:
         68:23:11:e9:9d:4b:cf:51:79:2c:3e:1f:2f:e0:4d:2c:56:97:
         de:a7:fd:f3:4b:ce:be:f5:fc:de:a7:b1:a8:9e:aa:2b:4d:5a:
         9d:72:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:24 2025 by rpki-client