Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
File:                     -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json)
Hash identifier:          QgzxgDahZpriOZH4x1YqLkTei9eRgg8whxID0AZoamE=
Subject key identifier:   74:51:71:22:51:91:4A:FE:DB:4E:15:0B:8A:DF:4A:09:36:73:AC:15
Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06
Certificate issuer:       /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
Manifest number:          08D0
Signing time:             Sun 02 Nov 2025 21:43:48 +0000
Manifest this update:     Sun 02 Nov 2025 21:43:47 +0000
Manifest next update:     Sun 09 Nov 2025 21:43:47 +0000
Files and hashes:         1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: 6WwXm168HVLCQHJjvWSirbgj77sr0boMyzoKYpIfOns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06
        Validity
            Not Before: Nov  2 21:43:47 2025 GMT
            Not After : Nov  9 21:43:47 2025 GMT
        Subject: CN=6907d093-c8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:35:6f:dd:15:ba:ab:06:2d:02:22:8a:66:
                    ac:0c:4b:8e:b3:14:e8:aa:88:d1:87:b7:e8:46:8d:
                    41:65:48:55:cd:9f:de:fb:b7:68:a4:86:10:5f:25:
                    91:d5:04:f1:c4:4f:62:be:4e:f4:8f:c4:71:ae:5a:
                    05:9e:f1:a5:c6:7c:00:5e:c9:81:24:69:68:cd:ca:
                    65:a4:aa:a4:da:3a:63:33:6d:84:f6:61:52:49:c5:
                    6c:f9:39:8f:1c:23:d6:fc:61:bf:5f:3b:2f:a1:cc:
                    a1:a6:8d:a3:ad:1e:d2:ad:81:9f:cb:6d:d9:e6:da:
                    4b:b0:37:24:79:bc:d9:41:08:ad:14:be:6b:f4:6c:
                    bb:09:c4:18:60:48:a1:e3:49:4f:5b:43:ff:75:07:
                    7d:85:6e:ea:ad:d9:cd:00:90:2a:c4:5d:46:a4:29:
                    0e:bc:b3:e8:90:31:fe:84:16:7a:2d:02:43:65:ae:
                    f0:c5:79:06:55:8e:14:27:f9:de:6d:14:e5:5b:b3:
                    f6:1f:23:66:e2:4c:91:cb:75:ac:48:42:2a:3a:4a:
                    fb:e4:dd:45:f7:6b:c6:4f:de:f7:d4:72:e5:29:8f:
                    52:67:a7:26:2c:07:db:09:c9:0b:5b:86:6d:f9:22:
                    d6:0c:2a:59:89:2f:84:cb:93:a0:24:97:a9:bd:53:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:71:22:51:91:4A:FE:DB:4E:15:0B:8A:DF:4A:09:36:73:AC:15
            X509v3 Authority Key Identifier:
                keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:f4:30:59:14:31:6a:d3:dd:62:42:51:81:80:da:77:ef:
         00:8d:21:f5:22:fb:ef:92:28:a1:f5:d3:e9:be:d1:6c:9b:8b:
         2f:a3:0c:de:75:9f:fe:d4:a8:7b:22:14:77:f3:90:b8:41:79:
         ad:64:0b:c3:db:b2:b3:22:a3:de:97:96:94:c9:8c:21:61:1e:
         41:5b:6f:37:d0:b3:77:e0:43:a3:3b:b5:17:e7:75:c1:bd:e0:
         e4:c0:38:03:17:bd:f8:2e:32:d4:1f:d2:d9:fa:66:70:32:b7:
         ff:20:12:fa:59:e8:d8:96:19:48:f7:ca:49:dd:83:e6:d9:21:
         fe:f8:6b:a1:c9:f1:7d:fd:22:f1:1c:00:59:54:6c:76:b2:9b:
         71:64:db:2c:99:90:fc:1f:67:f5:6c:4c:fc:96:b3:72:0d:a4:
         18:f2:11:bf:07:54:fb:c2:69:b2:36:0d:dd:0e:0d:8a:47:24:
         e7:46:5b:eb:fe:65:6c:9e:1f:32:e9:10:13:7c:f4:ba:09:ca:
         c9:db:14:74:ee:c2:8f:e9:b3:16:2c:7a:4a:cd:c0:78:24:46:
         28:71:30:34:5f:c0:8f:b8:77:a3:4f:c3:f8:aa:7c:24:d7:be:
         9a:57:34:0d:5c:95:08:96:b3:5e:19:f8:44:f3:5d:e3:85:b2:
         b2:93:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:01 2025 by rpki-client