Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
File:                     5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json)
Hash identifier:          POEmJQuwqdK0RdPv3pKFwC79uAoLHKh4fjuDHFfrW0Q=
Subject key identifier:   58:BC:86:81:FC:79:28:50:04:A4:C0:67:2C:5F:5E:4F:E0:9E:7B:17
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Certificate issuer:       /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
Manifest number:          06D1
Signing time:             Wed 05 Nov 2025 00:08:07 +0000
Manifest this update:     Wed 05 Nov 2025 00:08:07 +0000
Manifest next update:     Wed 12 Nov 2025 00:08:07 +0000
Files and hashes:         1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: d35mDzjExQnnxOJPXN3m98PQOgmvXHjh+ITamjmSx5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
        Validity
            Not Before: Nov  5 00:08:07 2025 GMT
            Not After : Nov 12 00:08:07 2025 GMT
        Subject: CN=690a9567-d944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:e4:d1:52:85:43:c8:ee:85:65:9b:64:02:
                    97:a0:22:e7:42:5c:2a:d8:5b:41:a4:2c:14:7d:75:
                    c2:22:ce:e6:3e:24:2b:87:9c:6c:b6:40:6f:55:c2:
                    c8:70:a0:bc:19:0b:3b:b6:cc:ab:19:f6:c1:e4:8d:
                    61:a5:7f:25:97:96:4f:36:8a:e9:91:43:65:6a:a8:
                    ce:62:09:ff:a1:be:9f:65:68:c0:4c:41:35:57:4f:
                    44:de:9f:5c:7e:88:20:94:2b:13:1f:b1:e1:2f:d0:
                    fa:6a:77:1c:98:59:1a:88:77:d8:e0:15:14:07:3c:
                    8f:f3:31:fa:3e:4f:7b:0d:81:cd:7f:32:09:dd:6c:
                    75:9b:1e:73:ce:e6:c7:95:f2:45:69:28:5d:04:6a:
                    bc:43:b5:66:f2:1c:c0:cb:81:90:16:83:bd:c2:f0:
                    fa:86:58:6c:b8:2c:ce:23:65:f0:16:04:09:af:cd:
                    83:1e:d6:3b:ac:a3:0d:70:47:af:08:66:da:82:58:
                    43:2c:0a:e9:d0:08:89:67:00:7d:05:c2:98:4d:57:
                    bc:3d:fe:99:ad:13:bd:56:49:9f:6e:37:7b:8e:f8:
                    85:6f:f3:9f:b8:80:eb:86:00:e8:a0:97:16:6b:91:
                    cb:e5:bf:fb:8b:12:98:ce:50:1d:69:27:44:d0:c1:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:86:81:FC:79:28:50:04:A4:C0:67:2C:5F:5E:4F:E0:9E:7B:17
            X509v3 Authority Key Identifier:
                keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:ec:1a:74:32:77:9d:c6:03:24:9e:c3:7a:1f:a0:dc:c4:
         74:b8:bf:7a:4a:1a:6d:cd:1c:a1:df:0a:3b:b8:18:5c:7c:bd:
         ff:9c:c1:0c:de:cb:cb:2f:3d:25:2b:25:22:e2:bc:89:c8:1b:
         a3:a0:22:e3:4d:f5:8d:9b:df:74:75:38:a0:02:02:d9:49:01:
         d3:aa:ce:3e:09:c3:a2:eb:10:d7:ae:1a:7e:78:9a:a5:65:dd:
         5a:5a:b6:22:48:2c:12:8d:67:97:e5:eb:de:1f:b2:61:b7:1f:
         c0:ee:91:fc:81:7e:ed:8c:7c:2c:9b:0d:0b:db:a3:40:4b:d6:
         d8:ed:cd:a5:b3:7f:b4:28:cb:e7:27:b8:a7:c1:57:08:64:8e:
         a6:70:e5:1d:74:24:d8:ad:cf:ac:c1:cd:08:78:fc:eb:f0:3d:
         45:53:3e:58:26:3b:a2:9b:3f:a6:23:67:4b:8a:e6:c5:ca:12:
         8b:26:b5:09:d9:b5:29:24:0b:61:b0:ba:08:c8:16:7e:d7:1c:
         e8:e9:2f:cc:d6:81:79:23:6e:00:41:29:49:df:79:25:c1:e5:
         2e:ac:2a:86:2b:bb:42:14:d9:96:54:fe:80:e7:78:d9:37:f3:
         44:87:ca:12:f5:a5:93:e9:62:98:81:88:f0:fb:04:db:dc:09:
         f8:5a:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:55 2025 by rpki-client