Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          RzCUW+re+nmzf0n4JKwgKSeJ3OmXIp81ozp53r9eUDU=
Subject key identifier:   3D:72:ED:B5:41:85:69:B8:D1:DA:37:D2:B3:72:29:CD:DE:4C:55:1B
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       34D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          34D8
Signing time:             Sun 02 Nov 2025 15:01:06 +0000
Manifest this update:     Sun 02 Nov 2025 15:01:06 +0000
Manifest next update:     Sun 09 Nov 2025 15:01:06 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: AsYAE+2iLCe+J1xNxkdop2H5OHYQKz4TRs4z695BVjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13528 (0x34d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Nov  2 15:01:06 2025 GMT
            Not After : Nov  9 15:01:06 2025 GMT
        Subject: CN=69077232-3aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:de:0b:81:1e:10:a9:22:29:60:4d:bc:22:
                    b0:5c:05:35:64:75:cd:6f:c1:91:43:b4:7f:72:28:
                    61:c4:91:33:ba:e5:64:b9:59:c6:83:f9:4d:2a:7e:
                    e6:bb:b7:23:c9:e3:17:d4:3e:78:14:30:dd:79:b6:
                    a0:47:0a:02:d4:aa:58:a0:e5:5c:ff:bb:70:88:3b:
                    49:c9:16:66:0b:e3:40:1c:1d:cc:df:0c:62:a7:25:
                    4e:56:28:59:52:5c:98:d8:7e:55:b8:10:7c:eb:7b:
                    d7:b7:b6:f4:6e:7a:bf:84:78:89:31:ca:8e:94:90:
                    d0:4d:5a:de:61:cb:07:ed:bc:e2:6d:4d:7e:60:36:
                    1b:67:54:e4:19:a9:41:21:ef:cd:0d:ad:96:86:86:
                    aa:c6:e5:88:f9:ac:b0:78:b9:32:b5:e4:45:8e:d1:
                    11:43:79:cb:42:8d:ff:d7:5d:ce:69:46:c6:1f:66:
                    c3:d9:10:09:97:0c:b6:61:41:9c:03:64:e1:01:e9:
                    f8:50:24:93:8c:75:76:40:6b:98:23:9f:f3:49:ab:
                    11:df:7d:90:f9:90:c4:48:cc:68:12:38:a8:3d:47:
                    e7:12:30:11:8e:78:a5:7b:5f:d2:d9:12:d4:5f:f8:
                    86:65:35:b6:28:09:70:ba:96:c4:fc:1a:d6:06:2e:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:72:ED:B5:41:85:69:B8:D1:DA:37:D2:B3:72:29:CD:DE:4C:55:1B
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:6c:1a:21:05:4b:90:7f:3e:ae:09:df:c4:fb:5a:0f:18:
         dc:c5:42:b3:9c:98:f8:7f:5f:9f:20:c7:31:b4:ce:a5:71:33:
         9e:a9:18:53:b9:61:56:eb:db:a3:5f:8e:d3:5e:a8:ef:db:d7:
         65:ee:b9:96:e2:1b:f6:1c:6d:6b:37:c7:23:ed:a5:b7:4c:e8:
         c5:f4:05:45:92:12:81:d1:3a:ee:46:d3:1d:ed:6a:a2:26:98:
         84:25:1a:b1:d4:43:4f:60:57:6f:9b:6b:fe:5c:28:e9:cc:50:
         0f:f9:f2:14:38:a7:ad:a1:79:14:ee:1e:aa:a6:e8:17:f5:bd:
         d2:5f:b6:60:d8:1c:eb:6d:dd:7f:58:7f:a9:ca:08:c9:71:b9:
         b1:1c:54:69:8e:a1:53:13:e5:4e:b3:ab:2e:42:18:7d:20:53:
         6b:7d:0b:bb:b2:4f:7a:c4:a0:60:36:a6:7d:12:c6:7f:e0:05:
         3c:6a:ae:68:16:5f:e6:5e:c2:fa:bb:c8:18:51:8a:ea:fa:ea:
         a5:00:82:e6:96:90:e3:6b:03:13:74:ac:b2:d4:c1:6a:e2:66:
         29:05:20:2b:2a:df:2a:b2:a9:0a:7d:25:d3:21:4b:a2:aa:71:
         20:f1:25:33:df:11:7f:09:ef:e7:80:00:d1:8c:23:f9:9e:c8:
         e6:1f:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:40 2025 by rpki-client