Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
File:                     AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json)
Hash identifier:          TRjtIVJIBsxlAAdMZ7qHBy1r+nsHwAAaXj6zp+FkLFY=
Subject key identifier:   90:43:97:94:F8:1E:A7:A8:A4:F9:6E:AD:66:D6:7F:86:58:B5:9A:9B
Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
Certificate issuer:       /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Certificate serial:       05C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
Manifest number:          05C0
Signing time:             Tue 04 Nov 2025 23:10:32 +0000
Manifest this update:     Tue 04 Nov 2025 23:10:32 +0000
Manifest next update:     Tue 11 Nov 2025 23:10:32 +0000
Files and hashes:         1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: Lpz2x2f3+hpKuOhPLyOySajeLK9YPNiSHmnbDBeXF+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl
                          rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297
        Validity
            Not Before: Nov  4 23:10:32 2025 GMT
            Not After : Nov 11 23:10:32 2025 GMT
        Subject: CN=690a87e8-2528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:18:fe:db:95:89:2c:a6:44:43:0c:cb:8d:
                    f0:95:c6:2c:3c:ac:91:c5:f4:2b:6d:00:bf:0d:dc:
                    47:63:24:36:66:7b:18:07:15:0d:6a:f9:0d:f5:f2:
                    73:37:40:82:f9:3f:31:0f:15:80:d8:3e:f5:0b:69:
                    41:fb:67:57:0f:cb:4c:1e:31:41:32:33:e2:f3:e2:
                    64:f6:45:06:b7:7d:fc:09:d3:ef:bc:f8:15:dd:fc:
                    41:aa:5d:fc:39:73:a4:a1:a3:0f:09:a3:42:61:57:
                    a9:83:d2:5a:89:3e:7c:8c:e1:9f:45:34:2a:8e:3d:
                    40:a5:62:9d:18:f6:6b:cd:ec:37:75:7f:fc:27:57:
                    53:1e:0a:0d:1d:8d:11:f8:98:cf:dc:05:f6:ab:cb:
                    ee:fd:e9:7d:e6:90:4c:30:9e:25:6b:85:f4:4d:34:
                    73:71:c1:01:90:4d:23:48:20:28:44:29:8d:c5:4e:
                    c0:1a:71:b0:62:4b:0f:68:04:28:82:a5:18:b3:68:
                    62:db:76:cd:4d:b6:e6:5a:97:9a:80:b4:11:fc:4f:
                    51:24:97:56:11:60:2b:85:7d:78:c9:2b:34:18:d1:
                    d8:d5:c6:2a:21:92:29:ec:ae:2c:d9:44:8f:c3:40:
                    ee:83:94:e8:cb:36:14:7c:57:90:fd:10:78:d2:86:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:97:94:F8:1E:A7:A8:A4:F9:6E:AD:66:D6:7F:86:58:B5:9A:9B
            X509v3 Authority Key Identifier:
                keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:eb:73:53:a6:b4:05:40:38:67:a2:3f:4b:d4:f0:8f:34:
         8e:47:ce:bc:2c:6e:73:e5:f3:4d:3a:ce:99:62:2d:9c:0b:d2:
         25:a5:c4:6f:0f:28:d0:2e:d0:bd:90:81:74:8b:c8:d4:15:61:
         1a:7c:ae:88:0d:6f:03:b4:a5:4a:bd:43:d8:84:c1:1a:2d:a5:
         17:3a:55:f5:e5:9b:38:08:7f:9b:e6:8b:71:74:82:b7:0c:bd:
         e3:b0:f2:60:05:c1:1f:26:86:51:de:a3:b4:56:70:fc:70:d5:
         32:ff:56:e1:13:b4:c2:02:94:8c:e5:a1:50:3a:bb:50:c4:4b:
         0e:c3:e5:c3:a5:d9:85:d5:2f:8a:29:ec:3e:5b:8d:9d:5a:3f:
         e2:a1:70:e7:64:ea:a7:d3:cb:82:fe:b7:5b:4f:ec:62:37:88:
         2d:28:53:16:70:26:53:c9:2a:1a:f5:ae:47:b3:92:da:cb:c4:
         ba:e3:11:03:74:ba:01:8a:52:dc:bc:6d:d6:48:7c:9b:fb:58:
         39:01:2d:5a:89:41:c5:9c:d8:2b:e0:e4:1a:45:70:25:c6:ac:
         de:34:d9:0b:c4:bd:5c:6b:5b:0f:e3:69:02:16:48:65:40:bd:
         c2:14:0c:89:0e:80:96:ed:b9:75:2d:de:88:2d:c3:c4:e1:b6:
         7c:17:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:32 2025 by rpki-client