Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
File:                     k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json)
Hash identifier:          kR15SeqgmsYFoC7Fbsot2R/4lvDTZzKc0Z2iSUtoruU=
Subject key identifier:   4C:B3:A2:4C:C6:83:05:B4:25:AD:8F:04:CE:72:C9:F8:EB:29:04:87
Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
Certificate issuer:       /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
Manifest number:          53
Signing time:             Mon 03 Nov 2025 07:15:33 +0000
Manifest this update:     Mon 03 Nov 2025 07:15:32 +0000
Manifest next update:     Mon 10 Nov 2025 07:15:32 +0000
Files and hashes:         1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: v8kOEKqKZRldSJ3u/Gmi0N2rmighvEnULOBcLp+Cirs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
                          rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
        Validity
            Not Before: Nov  3 07:15:32 2025 GMT
            Not After : Nov 10 07:15:32 2025 GMT
        Subject: CN=69085695-c18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:d7:dd:0f:39:4d:ea:92:29:32:d7:2a:dc:
                    e5:c0:ff:cd:a5:2a:ef:87:20:12:7b:a3:db:9b:b5:
                    62:bf:58:49:57:f5:fa:5d:c5:08:52:ff:76:eb:d6:
                    d5:5f:fd:f7:b1:35:5b:ab:43:06:ee:48:6b:71:20:
                    30:bc:1d:21:21:c3:2d:a2:0b:fa:97:7f:a6:92:8a:
                    23:93:2f:f1:d1:f5:c3:a5:29:03:75:c4:00:f5:00:
                    a2:ba:62:c3:87:38:6f:30:88:b2:d4:41:47:38:4e:
                    a8:34:6e:8e:8d:fb:df:b8:bb:6d:f2:53:9e:46:db:
                    ea:ec:97:78:9d:5b:e5:49:87:87:2f:a4:a9:c0:94:
                    e9:0a:51:9e:06:69:9a:c1:52:c0:d2:ba:92:fd:1e:
                    90:72:09:62:f5:bb:b4:60:6b:8a:ab:34:08:af:09:
                    5c:4a:20:f1:fd:5e:f1:54:88:d0:cc:9c:4a:33:08:
                    1f:2a:8d:bd:3b:eb:e5:a7:e6:ce:20:94:3b:02:ce:
                    6c:b2:a3:85:3f:a3:0e:d1:9d:6f:33:a1:fe:11:cc:
                    8c:ab:68:2f:ef:0f:1f:a8:f4:d6:d6:87:b8:9f:d9:
                    c3:93:91:97:55:4a:10:bf:e2:b8:4e:6b:57:8d:19:
                    77:44:32:69:e5:0f:e9:b5:a6:fe:d6:3c:2e:e3:f8:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:A2:4C:C6:83:05:B4:25:AD:8F:04:CE:72:C9:F8:EB:29:04:87
            X509v3 Authority Key Identifier:
                keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:4d:fe:77:30:cb:5f:da:18:8a:aa:dc:c2:31:8d:6e:83:
         08:fc:32:70:bc:db:96:28:6e:57:4f:57:be:56:e4:13:3c:06:
         26:29:24:d8:a5:c7:6d:d9:6a:be:74:c1:8d:7f:72:eb:a0:e9:
         42:fd:55:43:1b:c1:4f:4c:45:b6:c7:3b:12:9a:a7:7d:7a:52:
         a6:3e:3a:60:ec:35:c6:07:7a:86:15:a4:25:03:93:32:4e:bc:
         46:25:e1:c4:58:95:d2:3a:41:cd:ce:27:ac:98:ab:e3:e3:9c:
         d1:ec:5c:d1:3b:8a:94:a6:55:81:f5:b9:82:92:f5:c1:d7:5c:
         6d:e8:ce:7f:98:86:d1:92:aa:dd:8a:44:9f:da:6a:1b:47:6c:
         ee:e9:0c:fd:85:ae:1d:f9:62:fc:22:f6:cd:47:cb:8a:a8:45:
         e0:4f:b4:eb:f6:08:d4:43:3e:50:e9:5e:61:23:8a:8b:8c:40:
         5e:9f:58:ea:d3:ef:81:10:be:57:02:00:b1:6b:58:b9:2d:18:
         b0:5f:21:66:10:f6:45:0d:05:7a:e0:0e:0b:f4:9e:1f:c7:8b:
         7d:77:66:38:06:75:cb:5e:fe:c5:d1:43:42:6b:da:1d:24:12:
         a1:4c:ea:10:3b:3d:90:12:c8:2b:bd:92:dd:49:bb:20:b5:4c:
         00:f4:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:14 2025 by rpki-client