Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          AyV0p822QFYihFzkt6bx1E5C7CNKnaOCJQqGvhs/wMs=
Subject key identifier:   B6:CB:28:68:F7:99:52:DA:73:C3:3B:A5:81:BB:FE:1E:72:59:B0:E3
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0CE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          14B4
Signing time:             Sun 02 Nov 2025 18:07:14 +0000
Manifest this update:     Sun 02 Nov 2025 18:07:13 +0000
Manifest next update:     Sun 09 Nov 2025 18:07:13 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: VPOCynW5wEnXy3EwwJGXD7hZew2N6mM1aU+MFQaUrM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3297 (0xce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Nov  2 18:07:13 2025 GMT
            Not After : Nov  9 18:07:13 2025 GMT
        Subject: CN=69079dd1-ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:77:d4:e2:c8:cf:0b:c2:18:2e:e5:e4:a2:
                    97:e7:06:87:89:fe:d5:c5:54:d1:e7:62:1e:c7:08:
                    06:19:87:e7:37:ff:e8:4d:fb:c0:68:48:8e:08:5b:
                    12:8a:f4:7f:8d:2f:ed:4f:7c:6c:ad:e7:ae:76:1e:
                    c6:06:85:71:7e:97:dc:dd:24:9b:52:33:38:e1:dc:
                    59:43:aa:fe:2a:30:25:19:4c:b1:f9:33:9e:96:a3:
                    dc:75:22:59:36:41:49:07:f1:ff:70:a0:8e:d7:51:
                    8b:51:1b:04:ed:a1:ac:25:d0:9d:d5:9f:37:e2:75:
                    92:9d:79:f7:76:0f:16:8e:72:ca:0e:c1:86:a2:fe:
                    9b:a0:0b:14:64:37:c9:8e:c4:39:69:71:b1:23:79:
                    3c:af:f0:92:7a:d8:90:ff:b1:ab:f2:f7:5d:23:05:
                    14:1c:8f:34:83:18:2a:29:af:c8:2a:2e:1a:6f:58:
                    f2:84:9e:3a:d2:be:ef:7c:7b:4f:41:11:e8:74:bb:
                    70:35:91:86:37:20:61:97:d5:67:66:4f:3d:f4:33:
                    b7:4f:bf:1f:8f:33:80:02:da:46:bd:5e:2f:f7:c2:
                    2b:26:16:7f:b3:5e:e9:0d:83:cb:26:9f:6d:d1:f4:
                    0c:92:7c:7d:50:b9:45:bc:6c:1c:a2:f1:18:f0:3c:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:28:68:F7:99:52:DA:73:C3:3B:A5:81:BB:FE:1E:72:59:B0:E3
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:cc:1e:72:be:fb:a9:98:7a:b3:00:91:60:d9:72:7b:c0:
         4e:a8:de:1c:f5:5b:2a:1a:76:03:33:cb:e1:93:74:f2:43:8b:
         6d:fd:60:80:55:83:ef:90:be:e2:7a:b1:03:78:e6:28:c3:32:
         5c:3a:4c:cf:f5:c4:16:35:20:5c:10:81:1c:f7:c7:a7:05:35:
         64:d1:51:5c:3d:87:91:2d:38:8f:6b:ac:ce:7b:f4:c0:84:37:
         19:c1:41:cb:21:36:5a:c7:a8:fb:08:b2:49:78:9d:5f:d4:73:
         e1:7e:ec:53:72:46:0c:46:1d:e7:f7:90:94:b2:02:4c:d7:96:
         28:54:fa:c3:15:c0:0a:0c:89:3f:6a:ff:e3:63:79:e5:a5:86:
         3b:30:51:c3:50:dd:a6:7c:53:b6:02:db:a1:7b:72:8f:bf:30:
         07:36:c2:2e:bb:ca:d6:bb:5b:a3:27:a7:0b:40:28:8f:be:e4:
         47:92:6d:ee:43:4a:fc:21:99:0b:e4:e8:80:39:85:95:b2:bd:
         c9:5e:d9:78:6c:e7:ab:ee:b5:6b:27:6a:85:7c:2c:95:79:31:
         3c:48:95:d8:bf:0d:7b:ee:d1:33:d9:54:9f:3d:aa:c7:71:00:
         29:01:71:07:85:0b:fa:70:8d:08:32:29:17:42:1c:17:6f:33:
         69:f9:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:42 2025 by rpki-client