Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          /d5oCW7ZNXE0Z+I/FQu+I9OWsUz4QB1bz+in67cSoB4=
Subject key identifier:   CF:D9:40:D5:29:4B:1A:98:B9:E8:C8:0F:4A:5B:06:1B:0B:A6:B2:E7
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          0108
Signing time:             Mon 03 Nov 2025 04:58:34 +0000
Manifest this update:     Mon 03 Nov 2025 04:58:33 +0000
Manifest next update:     Mon 10 Nov 2025 04:58:33 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: snB0/qvyH98hWzEqsrjN9QB+YaqTXwGjGhJPGRP2Mrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Nov  3 04:58:33 2025 GMT
            Not After : Nov 10 04:58:33 2025 GMT
        Subject: CN=69083679-5be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:95:dd:f5:9d:a3:4b:1c:e8:bb:e8:89:04:
                    2b:9c:4c:f0:e1:60:b2:ca:8c:e5:bc:14:0c:6c:57:
                    3e:05:2b:20:f7:00:49:63:db:51:75:db:8b:fa:f3:
                    f6:d2:f2:2e:6a:34:b2:d6:78:f8:48:46:94:75:3e:
                    a1:73:15:7d:c2:6a:58:7b:d7:67:21:ee:6a:ea:01:
                    ea:b8:93:ae:68:5f:1a:5a:3b:b7:ea:78:85:56:d7:
                    79:ed:65:a8:dc:3f:04:a4:c7:16:ad:df:8e:dc:53:
                    c6:e7:33:a1:09:a6:49:08:27:54:73:73:ee:88:91:
                    8c:9d:6d:f2:e9:da:ba:98:5b:78:31:dc:0e:50:a2:
                    db:e5:70:76:07:59:b7:85:dc:e4:48:a4:06:7b:4e:
                    b2:e9:4d:72:0c:ca:58:3c:dd:4a:04:b6:33:ab:33:
                    ed:66:51:3f:7d:6d:02:c2:3d:d8:3c:30:b1:4e:36:
                    26:17:2c:b5:b4:23:ad:24:ef:c5:46:58:b7:af:44:
                    ff:26:f0:71:d2:b5:3b:13:88:dd:9c:7d:b8:d6:25:
                    85:b3:db:95:0d:fe:7a:b3:71:c5:50:d6:14:83:b4:
                    ef:4b:a4:0f:ca:92:71:d1:77:f5:0f:10:e2:eb:85:
                    19:ca:67:5f:08:f0:20:61:f9:41:19:67:d4:9e:c0:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:40:D5:29:4B:1A:98:B9:E8:C8:0F:4A:5B:06:1B:0B:A6:B2:E7
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:d1:2c:78:8f:3f:9e:61:88:73:c3:5b:2c:76:dd:79:be:
         08:c0:18:19:e6:61:90:a1:bd:30:a1:07:5e:e1:8c:b5:25:35:
         74:cf:8a:92:14:e7:cf:fd:6b:80:a2:cb:23:a7:75:5a:84:ad:
         e7:f9:45:6c:b2:83:98:bb:e4:8a:ae:f6:46:82:3a:7d:e3:f4:
         bd:b5:3b:f7:14:b3:39:e3:77:bb:cb:78:e4:11:d6:00:fa:6b:
         5c:66:8a:cd:bd:81:0a:8a:42:d5:b6:b5:a5:5b:35:63:c7:5b:
         c1:4e:bc:aa:48:7c:3c:a5:1c:37:56:9c:ac:b4:72:75:66:dd:
         87:3f:ac:00:57:c9:b3:31:ed:a4:2c:d2:d4:b0:0b:ad:94:45:
         ed:0b:e7:3d:24:de:44:76:88:90:dc:0a:15:0e:2e:2a:2d:06:
         08:22:ae:d5:ce:df:98:b7:34:c6:ee:a1:d2:d2:06:0f:f1:6b:
         28:84:94:56:4c:87:d2:ae:b6:a8:ba:2d:7f:be:b2:40:d4:9b:
         35:d8:99:72:4b:3c:6e:38:04:7a:c3:d9:60:d6:cd:17:f8:5b:
         ed:28:f4:32:9d:04:7a:dd:ba:5e:cb:c7:62:8a:fa:b9:25:c4:
         cd:21:d2:de:79:bb:5c:1b:19:fb:f9:2c:37:6f:83:37:e2:ef:
         e4:18:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:26 2025 by rpki-client