Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File:                     AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier:          bKd+nN+hP/QNGYJXzoZnoKFC/UnT3DzU8PBMMa+weR4=
Subject key identifier:   F0:33:C9:0D:4E:1F:2A:80:B7:31:0D:F9:ED:B3:DA:67:6E:4E:68:28
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer:       /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial:       0536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number:          0740
Signing time:             Tue 04 Nov 2025 23:35:10 +0000
Manifest this update:     Tue 04 Nov 2025 23:35:10 +0000
Manifest next update:     Tue 11 Nov 2025 23:35:10 +0000
Files and hashes:         1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: Bj2o3EdvcxQGfzp5swlutfFGfYZKYVkvjLDEsTv2HNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
        Validity
            Not Before: Nov  4 23:35:10 2025 GMT
            Not After : Nov 11 23:35:10 2025 GMT
        Subject: CN=690a8dae-3aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:a9:5f:03:2c:45:24:7d:2d:86:8b:42:e1:
                    d9:9b:12:de:44:6b:c7:71:fa:e8:91:94:bb:fd:e2:
                    90:a6:12:a7:42:39:8d:e1:e3:fd:05:71:90:a7:d9:
                    48:84:b1:72:f5:60:c5:73:0c:fb:13:26:ae:b8:b5:
                    77:25:be:51:b8:3a:e3:3d:d8:2b:6a:00:07:bd:eb:
                    a6:56:02:d3:51:6b:28:59:a2:41:45:33:fc:7e:8a:
                    78:9f:36:62:4b:63:40:f1:b5:62:5a:b0:ee:93:ff:
                    2c:9f:0e:36:8d:df:5d:2a:4e:92:42:70:65:25:00:
                    b3:6f:30:2d:7b:55:02:f9:38:c5:30:5d:59:1e:a8:
                    db:8b:14:0c:0e:c1:20:1f:3e:a9:1e:8b:e2:66:3b:
                    1f:61:c4:4f:b4:e5:ba:30:3b:2d:61:2e:f0:37:ac:
                    71:94:f4:bf:05:ea:49:88:78:f9:2c:37:a0:93:d8:
                    af:da:6a:88:6d:6f:01:a7:5a:b7:13:52:17:3e:6e:
                    8e:5f:0a:44:10:04:2d:75:62:bb:aa:69:8c:c4:b5:
                    62:e7:30:a2:0e:af:c8:b1:07:cd:fd:e7:85:f4:e4:
                    0d:9f:60:2e:09:d1:a9:97:e6:60:2b:12:b7:71:e3:
                    fe:50:d2:92:12:65:35:f8:f1:5d:56:91:c0:ad:c0:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:C9:0D:4E:1F:2A:80:B7:31:0D:F9:ED:B3:DA:67:6E:4E:68:28
            X509v3 Authority Key Identifier:
                keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:a0:44:83:7f:2b:2e:e3:1c:cf:d4:4e:e5:3f:d4:41:38:
         e7:ab:cd:c2:85:04:37:1e:66:15:29:84:f6:c5:de:14:92:b6:
         8f:ad:f8:6b:2f:4d:0f:0e:30:9e:5b:50:5b:b2:dc:8a:9f:62:
         45:2f:07:0d:e2:b2:af:d5:e5:9e:ed:a1:67:7d:68:99:2b:c6:
         e7:cd:44:7d:aa:dc:29:1c:fe:b8:f2:ec:91:aa:0d:95:0e:f8:
         a0:57:bc:e8:49:1d:c4:f8:c5:87:74:e0:67:cb:4f:a1:d8:59:
         8f:57:f1:ba:5a:53:c2:54:50:a0:1c:38:01:95:f7:5f:40:5e:
         74:98:30:65:e0:8e:28:cb:96:cf:21:b6:b7:61:42:0b:3c:2b:
         8a:ed:f0:26:28:71:6b:6a:27:19:01:76:e4:27:75:f3:6c:be:
         66:bf:21:b9:1c:fb:58:be:ce:67:a4:9b:a6:da:f1:8a:f3:6c:
         16:5d:67:fd:db:e2:01:85:62:93:e0:f9:86:7a:6b:8c:02:88:
         93:ea:f9:b3:46:9f:20:df:52:ff:f2:f3:90:ac:56:81:ff:4f:
         8c:ca:3f:53:b6:b7:cb:78:03:21:d2:b2:3c:3f:6d:29:6a:f8:
         5b:0e:c1:94:bb:88:d2:80:70:1f:c8:8b:bc:f9:50:d1:5b:84:
         b5:3f:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:46 2025 by rpki-client