Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
File:                     rlT2Go-9_rnvA0VXvInXETsBUDw.mft (raw, json)
Hash identifier:          ae7/yzj0RjeiUVHIS72kPA2FonAsyMcC21BLviRkDNg=
Subject key identifier:   D8:AB:E7:D5:FE:E8:59:6A:B7:F7:3B:D6:98:36:17:B2:AB:C0:A2:8B
Authority key identifier: AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C
Certificate issuer:       /CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
Manifest number:          13E8
Signing time:             Sun 02 Nov 2025 17:54:30 +0000
Manifest this update:     Sun 02 Nov 2025 17:54:29 +0000
Manifest next update:     Sun 09 Nov 2025 17:54:29 +0000
Files and hashes:         1: rlT2Go-9_rnvA0VXvInXETsBUDw.crl (hash: KKpHiLgR760WGsR2/5CnzDtUQWayPGdMC4+HAWc30FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C
        Validity
            Not Before: Nov  2 17:54:29 2025 GMT
            Not After : Nov  9 17:54:29 2025 GMT
        Subject: CN=69079ad6-cf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:a2:70:99:0f:62:1f:7a:ed:36:72:be:d6:
                    bd:15:6f:e4:12:3c:14:95:dc:31:0b:8d:73:55:02:
                    13:d3:c3:db:b2:0c:e8:2f:b8:3d:ba:29:ac:7d:22:
                    d9:35:a6:db:3d:a3:d5:55:44:32:57:67:36:53:28:
                    39:8b:f1:62:37:12:09:dc:1d:44:b1:eb:7b:13:5d:
                    9f:a2:5c:44:d3:91:d9:02:4e:c1:7b:6d:34:f5:01:
                    95:2c:66:24:99:de:ae:17:77:dc:e1:52:c9:89:73:
                    64:4e:b8:28:c7:26:4e:bf:4d:25:bb:88:74:27:7e:
                    80:1b:78:d6:c7:88:63:85:f1:20:4f:d2:ba:14:63:
                    49:6f:1b:b0:b0:7e:08:31:1b:d8:bf:b0:c0:88:c4:
                    4a:5c:af:b6:9f:29:47:be:09:c8:6e:58:f6:a6:23:
                    ef:0d:5e:73:50:c9:33:8f:b2:00:a3:44:db:e7:ed:
                    35:18:9d:2b:e9:88:b0:55:39:91:aa:38:44:50:18:
                    31:44:37:86:1c:11:76:52:92:58:ee:63:3f:8e:75:
                    50:79:16:1a:08:d2:01:4d:dc:c4:83:70:04:17:d4:
                    c6:f2:93:77:9e:fe:e6:f8:34:a2:b6:ae:7c:a0:34:
                    8f:b3:a5:33:b9:e4:1c:8f:84:13:9c:5f:11:98:b0:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:E7:D5:FE:E8:59:6A:B7:F7:3B:D6:98:36:17:B2:AB:C0:A2:8B
            X509v3 Authority Key Identifier:
                keyid:AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:1f:dd:e2:69:cc:2b:8f:ad:31:39:fb:3e:ab:1a:3b:18:
         a9:a8:8e:12:71:73:a5:da:64:3a:89:91:be:21:e6:46:4b:0a:
         c1:cb:62:6f:74:88:5b:ce:2a:30:9a:6e:97:33:41:86:1b:20:
         66:4b:92:db:7e:db:24:39:eb:60:41:eb:e5:da:b0:26:1d:51:
         c7:b0:e3:89:f3:90:28:4f:30:c1:af:81:00:39:9c:7b:c7:4f:
         3e:53:0a:f3:62:46:78:f3:2d:be:f7:a3:63:f3:73:dc:84:68:
         d8:3b:64:ff:14:76:05:85:ec:ba:16:59:b8:86:af:79:3e:4f:
         a8:55:48:13:63:3a:34:34:6f:cc:98:a8:c8:a0:a5:3c:34:ab:
         06:2c:4d:1e:f2:1b:c3:82:f7:53:6a:7d:e9:12:19:fa:c1:e5:
         c2:e6:b2:41:2e:f1:84:ae:00:a1:57:fc:95:51:19:45:7d:e1:
         2a:69:91:8f:2b:12:48:d7:55:16:0c:f5:d2:47:b9:8d:aa:b9:
         cf:dd:66:52:9d:0b:e7:f7:d8:d4:9b:42:0b:56:04:fe:94:95:
         99:06:08:35:18:25:83:40:b3:3d:fb:25:e5:c3:2b:21:4b:20:
         2e:e6:93:f0:f9:09:cd:55:df:30:2e:ab:5a:a4:b5:21:af:08:
         39:cd:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:41 2025 by rpki-client