Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          AYvtFfqgRWyOeNuq/WzCOZA/qha052wJ2sH44uWiyuY=
Subject key identifier:   BB:AE:9E:29:40:26:CF:FC:48:32:23:82:FB:D6:F0:77:92:CD:40:98
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          02C6
Signing time:             Mon 03 Nov 2025 01:20:10 +0000
Manifest this update:     Mon 03 Nov 2025 01:20:09 +0000
Manifest next update:     Mon 10 Nov 2025 01:20:09 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: YchQskD9ryjHC4bwM27AeiT9Y9PUNLat8X7npilApbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Nov  3 01:20:09 2025 GMT
            Not After : Nov 10 01:20:09 2025 GMT
        Subject: CN=69080349-c460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:3c:49:64:ca:05:ca:da:25:ea:f0:86:4a:
                    8c:41:df:ef:14:f6:e0:7b:48:ee:78:f7:22:c9:7d:
                    f3:10:e5:41:9c:d9:0f:1e:b9:83:25:92:39:81:ae:
                    25:e0:db:19:45:81:d6:47:56:50:d5:33:03:d4:d3:
                    cd:c1:86:0d:25:91:21:c9:38:73:e0:80:d5:a8:ba:
                    b9:91:5e:d5:ef:0f:2e:67:36:fa:8e:b8:43:55:04:
                    92:6c:a8:52:c2:8b:3f:29:fd:76:ec:04:cd:50:3a:
                    b6:bb:35:5f:63:e7:d4:15:d0:25:af:3e:8d:ce:11:
                    43:3b:77:62:14:1e:a5:9d:99:1f:8e:bd:55:f8:66:
                    d8:9c:30:7b:ed:7e:33:ce:d8:33:f8:24:31:89:7c:
                    e7:d8:48:37:26:e7:19:40:2d:ec:46:fc:04:f9:f3:
                    c7:ea:49:99:ed:62:f2:37:c1:c2:60:e2:9e:d4:ba:
                    29:00:c3:f9:d9:52:aa:f5:26:85:85:9d:a3:de:cf:
                    fe:03:b0:5f:ce:9c:7b:ed:4f:32:62:fd:03:66:82:
                    72:7a:42:43:87:77:67:12:3a:92:d7:20:64:95:26:
                    02:81:8d:bc:f9:1c:0d:cb:f5:fa:7d:ad:29:17:81:
                    01:8c:30:2e:f4:58:ff:53:46:37:ed:6f:16:da:1a:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AE:9E:29:40:26:CF:FC:48:32:23:82:FB:D6:F0:77:92:CD:40:98
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:a4:ca:3c:e6:00:ee:34:18:33:b8:3c:52:ec:8f:45:73:
         0c:c8:f2:e8:b5:58:db:bd:cc:59:78:d3:e8:95:44:24:03:05:
         7d:b2:85:82:4c:60:8e:49:17:8a:92:13:97:80:4b:35:40:75:
         b4:57:9a:ab:8b:cf:ce:1a:5e:6d:1a:3f:a5:80:81:b5:a3:22:
         19:a6:df:91:b2:cf:2f:90:98:74:52:c1:9e:26:fb:f6:ae:bd:
         66:ce:75:8a:e4:a1:42:08:73:ea:1b:b3:ec:17:05:36:43:51:
         9b:90:b7:0f:8b:62:fb:e2:7e:ca:05:b0:94:89:a4:a1:0f:68:
         04:bd:98:a2:fe:58:56:f0:56:1b:0b:33:99:ee:02:2b:a0:79:
         f6:ce:58:0d:0e:bb:d6:c4:4c:05:d2:3b:1b:70:81:0b:b6:f3:
         79:e4:3d:7a:27:88:15:f1:7a:bc:aa:99:49:4b:49:bd:4a:73:
         ec:d2:1b:e5:39:4c:ee:27:f0:cb:cd:4f:ce:48:32:2a:38:d9:
         e5:d5:8a:74:9b:52:b4:8f:7b:bd:e4:9b:60:44:69:a7:64:1b:
         0c:67:da:2c:e5:0d:22:75:75:cd:b3:b9:24:43:56:1e:53:e3:
         a0:a5:cc:87:45:55:59:2e:a4:bd:ad:e8:7d:17:f6:06:f7:72:
         32:1d:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:05 2025 by rpki-client