Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          oh4/i6+BHMaf4VnSJlJIZkw0HSYT+IGDj+E5ofucajs=
Subject key identifier:   00:D8:60:6D:4E:08:99:01:84:35:4A:71:70:78:D1:65:39:BC:55:6F
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       34D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          34D4
Signing time:             Sun 02 Nov 2025 14:30:37 +0000
Manifest this update:     Sun 02 Nov 2025 14:30:36 +0000
Manifest next update:     Sun 09 Nov 2025 14:30:36 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: nchrvlTRWeNloj96BA8uWtFqoyPPskUmgMx5Mu7d+ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13524 (0x34d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Nov  2 14:30:36 2025 GMT
            Not After : Nov  9 14:30:36 2025 GMT
        Subject: CN=69076b0c-b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:8e:e9:bb:c7:ca:8f:33:a7:a4:6e:14:c1:
                    19:0a:d9:83:1b:01:c7:66:92:38:5e:d4:79:9f:2b:
                    6c:1b:6c:e4:ad:71:d4:f3:a5:b7:4c:95:ac:49:db:
                    e9:b0:62:c5:80:bf:38:86:9e:76:ee:38:49:74:86:
                    f1:98:c1:40:01:4d:ae:9d:cb:3d:62:13:60:ca:dd:
                    38:6c:7b:43:d1:45:49:8a:1f:a3:b9:c5:0b:f3:a0:
                    c7:08:a0:c7:68:0f:94:b4:4e:e5:4f:67:d1:7e:3f:
                    41:6e:73:a7:f5:59:55:66:31:96:f9:b1:0d:8c:92:
                    73:94:34:ff:cf:43:da:57:93:cb:ec:9f:fa:cf:4d:
                    9d:c2:27:92:35:23:0b:bf:05:45:c7:0c:19:d7:77:
                    17:53:e0:12:90:6e:37:d0:4f:ed:81:6d:13:49:c4:
                    6b:1c:af:42:31:4a:65:05:87:0e:50:5e:7a:cc:35:
                    25:ce:e4:12:21:03:74:dc:28:71:b8:f0:9a:45:2b:
                    16:45:02:d5:e6:6d:02:29:e0:c7:80:11:d9:b6:29:
                    37:37:04:4a:45:6c:19:d4:46:56:23:e3:cd:c6:47:
                    22:d0:39:01:1a:99:9a:cd:a9:02:a0:e5:56:5d:ba:
                    d2:94:16:64:3c:b8:db:04:7e:a1:36:03:1b:36:d6:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:60:6D:4E:08:99:01:84:35:4A:71:70:78:D1:65:39:BC:55:6F
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:33:16:e9:a6:7b:ba:c9:8f:e3:06:83:e4:d7:9c:89:01:
         15:46:3e:d5:83:d4:3e:ab:8a:3b:59:40:ca:6a:78:87:a9:b4:
         be:a5:c6:fe:f6:44:c8:3d:67:ce:e5:b8:e1:98:95:fa:88:8a:
         1c:31:4f:ca:f1:bc:94:5c:59:2d:69:c3:bc:6d:36:aa:25:b4:
         9d:d8:7b:3b:8e:24:06:0c:73:3d:d4:65:f0:67:42:d5:7e:b0:
         b8:39:93:98:f9:e3:1f:12:88:2b:27:de:de:0b:2d:4f:dd:96:
         ee:6c:2a:63:af:1d:1f:4e:b6:80:3a:14:f0:c9:80:e2:59:6e:
         1e:ad:51:89:a1:7b:04:3d:7e:ed:26:d1:ee:a8:d1:96:c8:a4:
         27:98:11:50:85:b1:6d:63:11:16:1f:11:1c:25:9a:2a:c8:0a:
         0e:68:e6:31:01:a6:97:f9:c2:db:7b:72:d5:70:20:94:2c:aa:
         f6:96:1b:de:3c:07:dd:f3:07:2b:2b:55:79:ea:9b:56:ef:66:
         af:42:03:f4:dc:c0:96:4a:7d:4e:2b:64:00:6e:76:24:bf:cf:
         7a:92:a0:d1:e9:17:19:5a:ca:dc:21:65:09:50:7d:39:16:88:
         b4:c5:b9:24:ec:9b:10:c5:a0:60:11:82:f9:52:b4:55:a4:79:
         bf:59:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:28:09 2025 by rpki-client