Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
File:                     x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json)
Hash identifier:          f9ZWayhgkmAh4H6ZCrx+Yc1s+236CgIf677Hq0Hgkco=
Subject key identifier:   AB:FF:EE:DC:D2:86:B5:B0:53:3A:34:79:B7:AE:2D:87:87:DF:C9:F4
Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD
Certificate issuer:       /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
Manifest number:          40
Signing time:             Mon 03 Nov 2025 07:26:18 +0000
Manifest this update:     Mon 03 Nov 2025 07:26:18 +0000
Manifest next update:     Mon 10 Nov 2025 07:26:18 +0000
Files and hashes:         1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: 13jrsJqKAl0kRiZAIJV+GnhhnSB9Wmk6ebzCnUulN+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD
        Validity
            Not Before: Nov  3 07:26:18 2025 GMT
            Not After : Nov 10 07:26:18 2025 GMT
        Subject: CN=6908591a-e256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:6e:89:b9:e0:12:ce:c6:ff:75:93:0c:9a:
                    91:d1:cc:d2:90:81:ce:06:0e:42:57:59:37:6c:2e:
                    1b:11:75:25:02:29:10:91:44:4a:9b:62:18:05:9f:
                    ea:6e:fb:86:76:5d:a3:16:a9:32:bc:51:7f:10:d0:
                    be:20:08:5e:3c:64:98:09:35:c8:99:78:35:c5:7e:
                    26:c4:d8:75:b8:05:89:01:b7:e9:22:8b:b8:e0:e1:
                    fc:1b:f3:fb:7f:03:61:87:2b:17:5f:cd:68:ff:c6:
                    57:d7:f1:60:0d:2f:71:bc:44:fb:0f:f6:25:13:47:
                    1f:a5:30:50:c9:e0:37:e4:c4:28:d1:a6:f2:e1:eb:
                    d4:c5:d3:4f:7d:22:90:ca:f2:e4:68:d7:2c:aa:f9:
                    77:2b:83:e1:0d:bc:40:11:ce:a5:8b:e3:d2:20:cb:
                    9b:d6:92:11:4f:44:f6:78:3e:9d:14:d7:24:fe:02:
                    24:2f:cb:5f:9a:21:c9:7b:58:33:28:16:4b:2e:4a:
                    e0:cc:cd:19:2b:09:ec:14:06:bf:98:5c:77:52:69:
                    2d:9f:13:e9:ce:5a:92:9d:5d:56:5f:cc:73:d8:d3:
                    09:a0:cc:5e:40:e4:2c:64:f2:b3:25:09:9e:b2:27:
                    37:2e:2c:98:b3:f9:37:a5:bd:27:3a:88:e4:e3:27:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:EE:DC:D2:86:B5:B0:53:3A:34:79:B7:AE:2D:87:87:DF:C9:F4
            X509v3 Authority Key Identifier:
                keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:89:7a:ac:f0:13:85:e9:57:d9:8c:0b:a0:ae:a8:1a:f6:45:
         14:e2:a4:8d:7d:9f:97:5d:c1:15:a6:3f:ae:ac:38:a0:30:40:
         04:80:5f:d2:42:57:d5:73:6c:e5:b0:ea:cf:a4:f6:4b:9c:e2:
         88:e7:23:7c:d8:f9:1e:ad:cf:4a:67:d1:69:b2:3a:6a:02:9e:
         42:dc:36:80:30:94:28:3f:19:9c:b8:ea:72:c8:31:d9:64:8d:
         f1:32:d3:a6:c8:40:b1:72:47:b5:ef:f9:65:84:ff:61:e1:42:
         57:51:9d:46:46:7c:d7:8a:b5:84:c3:e6:c7:a9:51:c4:fb:49:
         4d:f3:2f:66:bb:43:cb:a9:12:88:b4:8c:51:81:d7:d3:8d:7e:
         a5:f6:e2:fe:b0:cc:8f:7e:a4:a7:c2:99:63:ba:b1:51:7c:5c:
         ac:4b:de:2f:5a:9f:39:cc:f0:4f:e2:9d:21:7f:ec:59:b4:96:
         cb:59:c8:4f:d8:e3:f5:de:61:77:48:1c:9d:77:20:f8:2a:66:
         43:f3:1d:79:43:7e:e4:d7:73:a5:a6:f2:69:ed:8d:97:ff:56:
         a9:f2:eb:52:42:4f:a3:3d:ab:32:80:a7:6c:8a:9e:ef:a6:c3:
         1b:56:47:4e:b0:7e:0a:e5:d5:26:b9:53:4d:0d:c4:cc:c7:0d:
         d0:b9:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:15 2025 by rpki-client