Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          +qjX+KeRZ0LdGjLgSFspRV8Zd0B1mzaKTnsfc+mIwo4=
Subject key identifier:   C8:A1:17:47:95:82:A0:92:9C:40:07:CE:67:6C:AE:B9:C9:EE:00:D5
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          5B
Signing time:             Wed 17 Sep 2025 07:53:32 +0000
Manifest this update:     Wed 17 Sep 2025 07:53:32 +0000
Manifest next update:     Wed 24 Sep 2025 07:53:32 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: mrf79ORebjidzz83qiSqxCm1mVoaQfP/f+R64O66uA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Sep 17 07:53:32 2025 GMT
            Not After : Sep 24 07:53:32 2025 GMT
        Subject: CN=68ca68fc-7da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:c5:d7:94:47:65:34:b7:b8:02:0a:8d:8e:
                    9f:f0:e6:68:e2:50:38:d4:f1:cc:ce:8a:f9:db:f9:
                    c9:76:e0:46:b3:3a:e1:e8:9b:49:a4:25:49:a0:1b:
                    f5:ef:0b:4f:89:56:de:9c:c4:f1:95:3d:76:70:95:
                    c0:e4:ac:2b:40:86:c7:97:b0:89:ee:01:fb:b7:a7:
                    31:e9:3b:c3:cb:d9:85:14:9e:78:c1:68:3b:54:40:
                    bd:b4:42:4d:83:c6:bf:62:60:f2:8a:06:62:04:ac:
                    6c:34:72:49:29:f7:b0:fe:46:9f:9a:32:db:39:cd:
                    7c:42:e6:cd:4f:f8:30:d8:a3:9a:44:11:14:05:ea:
                    47:bd:ef:6b:e6:d9:d0:64:56:38:9d:81:a9:e6:d0:
                    69:83:8b:29:04:a0:88:e7:16:b9:eb:dd:97:cd:95:
                    22:83:aa:a9:32:41:69:d9:bf:c6:6c:87:3b:af:bf:
                    c9:2f:17:62:41:56:f1:13:4d:df:69:5d:f7:c3:bc:
                    c4:57:75:db:ef:30:91:b1:3b:35:54:1c:7e:71:33:
                    97:a4:38:73:02:5c:24:09:35:a6:61:c4:b2:c9:2e:
                    0c:14:9b:17:a6:87:16:92:9d:17:7d:47:e0:f9:c7:
                    ea:86:32:13:9d:aa:1e:d7:97:3d:a5:b5:95:df:da:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:17:47:95:82:A0:92:9C:40:07:CE:67:6C:AE:B9:C9:EE:00:D5
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:ff:db:36:c2:80:ec:08:4d:2b:fc:ec:29:04:89:93:19:
         9e:8f:0a:57:84:d0:6a:5c:87:b0:75:d9:1c:bc:db:67:04:bd:
         1f:f9:2e:d8:52:12:0c:21:43:a0:b5:a4:32:14:86:85:7d:1e:
         0b:b9:f9:2f:c0:35:a8:18:4e:e3:2b:a8:bb:46:c5:78:de:11:
         3c:2e:38:37:7f:f4:94:0c:ff:b2:19:4e:e5:d8:e2:f1:b4:2a:
         03:44:4a:a7:79:4d:d0:90:4f:de:f9:9b:be:5e:68:a5:75:48:
         da:d2:4e:8c:28:74:97:a5:8d:3e:88:20:a9:51:a1:bb:18:68:
         9b:61:9f:36:33:7e:d3:ed:09:6a:1f:f3:fc:4b:44:0f:76:b2:
         4b:f3:e3:46:b4:fa:69:e5:29:e5:73:bd:54:be:77:28:75:5a:
         82:da:bf:b4:e5:8f:2a:ae:b0:1d:18:11:3d:bd:5e:38:85:17:
         a5:a8:31:18:0e:62:31:9c:5d:97:02:80:e5:17:1f:69:d7:aa:
         81:50:b8:db:ec:28:de:3b:ac:99:5e:a1:5c:ab:ac:58:a8:af:
         9e:3f:60:8d:3a:e7:d7:47:23:d5:91:6f:e5:1d:3a:41:a2:b0:
         a7:af:32:d8:50:35:f1:ee:b2:75:b4:4e:ab:86:15:cb:13:d5:
         d9:cb:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:53 2025 by rpki-client