Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          6h8N5fbmo7PoCRymVN2BwBXn671kqjrRknpwgEG+zGg=
Subject key identifier:   A9:0C:3D:6B:C0:D9:D8:7C:DA:EB:C7:4D:A9:9D:C6:FE:47:4D:7D:E3
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          06D2
Signing time:             Wed 05 Nov 2025 00:08:09 +0000
Manifest this update:     Wed 05 Nov 2025 00:08:09 +0000
Manifest next update:     Wed 12 Nov 2025 00:08:09 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: npzEagC8D/f+/eNmbqVhAZ4ybthQgb/hoM04NGXPAm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Nov  5 00:08:09 2025 GMT
            Not After : Nov 12 00:08:09 2025 GMT
        Subject: CN=690a9569-ca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:50:ac:ac:c8:e7:18:e2:bc:8b:0f:1d:48:
                    7a:8b:df:f0:e3:f6:39:e0:fc:8f:35:ab:28:5f:79:
                    72:82:31:73:de:80:af:0e:0e:e6:e8:8e:d0:9f:9a:
                    e5:b6:2d:db:92:dc:5f:3a:8e:3e:51:b5:d0:7b:bc:
                    28:f4:b2:f0:e5:0b:27:2c:f5:50:e6:48:67:6a:82:
                    78:ef:3b:e2:31:23:0f:94:e6:99:e2:40:70:58:5e:
                    d6:07:ad:55:54:af:be:e1:e6:b2:7a:85:a1:9b:22:
                    05:59:67:69:ae:53:13:0c:82:f4:85:9b:dd:92:d1:
                    b9:3a:fc:0e:e4:6c:7d:a3:a4:4c:8d:3c:e5:6d:8a:
                    b6:46:41:fe:26:89:6e:a5:eb:2f:8e:59:f1:81:d0:
                    57:ea:99:0f:1c:4f:83:ec:ab:b1:9e:c8:a8:eb:d1:
                    b7:33:49:7a:ec:1d:85:5d:ed:3e:70:52:e7:5e:b9:
                    03:a2:ff:f3:d0:08:f2:63:ff:ce:20:b2:b5:88:04:
                    e3:55:42:d0:11:95:74:cd:20:59:5c:55:da:bf:e3:
                    aa:f8:a9:98:d1:3a:ce:f9:a2:fb:eb:cf:95:09:92:
                    54:ac:c5:1d:e4:e4:a0:aa:2d:58:8a:25:83:b3:88:
                    ff:41:a3:86:be:c6:ec:86:e2:f8:d9:ec:d8:ee:d4:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0C:3D:6B:C0:D9:D8:7C:DA:EB:C7:4D:A9:9D:C6:FE:47:4D:7D:E3
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5f:ff:7a:9d:03:d3:ec:10:1b:40:f0:91:96:b5:1d:52:bd:
         ff:ea:46:67:07:f5:c4:f1:75:00:58:f2:2e:50:90:f3:bd:fb:
         61:ac:92:46:e1:a1:3e:0e:82:3d:a9:c8:56:33:a8:97:92:76:
         48:d2:1f:90:79:6c:99:5c:01:a5:a5:2c:a0:2d:73:b0:18:08:
         60:5e:cf:2a:c9:8e:e9:b7:dc:78:61:39:ee:6c:c6:73:70:01:
         f5:95:95:16:fe:48:e9:8e:63:e1:66:64:e0:1b:c3:2e:fb:6e:
         46:2d:7c:6c:11:a3:b0:b2:be:bb:95:0a:59:18:d7:8d:99:8b:
         cb:53:2f:0c:a4:ca:a1:5c:13:81:dd:a2:2a:be:8d:ef:29:dc:
         a0:28:1d:77:3d:99:db:fb:8f:51:0a:29:56:b3:d3:26:bd:df:
         69:51:52:3d:58:13:42:15:a8:71:2b:39:8f:30:7a:d2:6d:bb:
         e8:4d:3d:f8:44:3c:af:13:63:25:c3:73:97:a3:8a:6a:b9:5e:
         5b:8a:34:34:59:b6:f6:3f:e7:8f:f1:a6:01:12:eb:ac:03:dd:
         5a:ae:2c:f8:7e:16:85:42:f6:c5:50:55:a7:2b:1e:8d:30:41:
         2a:39:f6:b4:d0:3c:43:46:82:ab:9e:e0:68:ac:6a:74:df:73:
         82:d7:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:43 2025 by rpki-client