Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          hQU1Kuv7CtQwVB4vxPHaubXZUqVYDjStNHvyIrt+Mz8=
Subject key identifier:   30:32:FC:9B:25:12:80:80:AA:79:C9:81:49:1C:3E:CE:F9:98:94:DF
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          A8
Signing time:             Mon 03 Nov 2025 06:15:17 +0000
Manifest this update:     Mon 03 Nov 2025 06:15:16 +0000
Manifest next update:     Mon 10 Nov 2025 06:15:16 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: hwC5/944fRp++JiE2cXooa2qOwLLNHb3K3nXgHk7jCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Nov  3 06:15:16 2025 GMT
            Not After : Nov 10 06:15:16 2025 GMT
        Subject: CN=69084874-7b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:f4:33:0f:8c:01:97:fe:ca:3a:cc:3c:59:
                    fb:e7:9c:a1:1b:95:c2:49:96:cc:dc:a6:53:0b:24:
                    ea:8b:b8:60:9e:b9:d4:ac:7a:8e:f8:b1:38:3c:ba:
                    50:b2:fa:42:af:f6:fb:3e:94:56:ff:2c:70:75:6d:
                    6c:99:aa:46:f6:a4:5f:50:06:55:ca:34:85:1f:e9:
                    29:33:ff:45:c5:06:15:09:71:d7:1a:5e:f8:7f:4a:
                    33:15:9f:a5:8a:ba:3f:fd:3b:21:4e:48:66:8c:8e:
                    de:dc:90:4e:3a:0d:1b:e4:31:a8:70:57:e1:56:c2:
                    b3:75:6b:f3:ff:24:bf:c3:e5:82:c7:a6:fb:37:17:
                    09:41:aa:80:65:98:fc:1a:b2:61:d0:25:f9:0a:91:
                    a0:15:42:8b:cc:9b:a8:18:fa:1c:14:72:95:b8:27:
                    77:37:f3:82:45:98:a7:20:57:d7:17:83:66:9f:95:
                    99:d6:15:b3:80:e3:8d:dd:4a:37:51:e1:36:78:6f:
                    c7:b3:b2:06:0b:cf:63:42:5c:3c:da:55:ef:69:41:
                    8d:1c:0e:ec:68:e0:4e:9a:6f:e0:58:a1:8c:e4:d8:
                    a9:c9:4f:fa:44:1a:29:ed:1f:7e:f4:0d:e4:12:e7:
                    2f:3f:3f:5d:f9:14:20:94:23:7c:da:03:4b:9f:3c:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:FC:9B:25:12:80:80:AA:79:C9:81:49:1C:3E:CE:F9:98:94:DF
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:37:50:67:da:27:d3:63:b4:cc:fa:cd:19:16:ff:2d:87:78:
         43:d7:88:bb:c9:43:01:cb:31:7f:14:d4:8e:04:a9:fa:b3:69:
         5a:0a:17:32:dc:fa:ed:19:cc:c3:e3:b5:e1:d7:a8:ca:2a:8f:
         77:41:df:14:a9:0b:4c:14:aa:e5:7e:e5:50:2a:4e:a2:b7:db:
         e7:02:51:ff:be:0b:40:99:7c:6d:a7:dc:ea:4d:9c:97:87:76:
         10:17:ee:74:f8:e8:25:e6:81:83:50:d5:81:b4:e5:2b:14:08:
         b9:25:c5:3f:82:75:41:1e:12:20:61:7d:b6:87:17:a0:70:4b:
         03:31:25:52:10:05:f9:de:a6:49:51:56:b8:ec:2b:0c:e6:14:
         fe:ca:10:0c:45:eb:62:81:a1:f0:f6:98:1d:52:3b:13:ea:39:
         b7:f0:4f:d5:79:17:cd:67:e0:09:40:6f:f6:12:78:8e:02:2b:
         32:b7:9a:ee:71:e9:db:0d:48:a0:e9:e5:09:2a:aa:fe:79:8c:
         aa:b7:fd:fe:2a:66:4e:8b:ee:fd:d9:ed:45:6f:8c:0b:a0:88:
         07:71:14:17:cb:f9:9f:33:7d:81:ff:e4:03:86:8b:01:ef:f1:
         f8:06:ca:64:ef:51:82:bb:f4:4b:c1:8d:03:20:7c:d7:a7:c1:
         88:cc:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:40 2025 by rpki-client