Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          2SVl/dZNnj5ujm71GPKaHQE/XMw+EhoZXcQeBfiQhsY=
Subject key identifier:   67:D4:7F:97:4A:E9:4E:9F:35:4E:0F:88:CA:1A:6E:16:EE:2F:4D:F8
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          91
Signing time:             Mon 03 Nov 2025 06:30:05 +0000
Manifest this update:     Mon 03 Nov 2025 06:30:05 +0000
Manifest next update:     Mon 10 Nov 2025 06:30:05 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: e287SVMyvxnx01mPRvoiZKUvMcSAl1wbK54ZqE1mA4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Nov  3 06:30:05 2025 GMT
            Not After : Nov 10 06:30:05 2025 GMT
        Subject: CN=69084bed-99d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:ca:11:de:42:9d:62:db:bb:9e:15:53:aa:
                    89:9e:db:8a:b2:31:2a:41:27:e4:75:fc:62:69:df:
                    80:22:0a:1f:26:79:40:9d:d2:87:b9:9a:30:ff:a9:
                    2f:02:90:b8:83:43:9a:f6:5c:33:3b:8f:00:a5:50:
                    82:a3:4a:f1:cc:f0:85:9a:87:ad:8c:69:3a:ff:a3:
                    aa:74:ce:c5:02:af:94:71:a5:53:68:fb:ca:f7:c3:
                    c7:c7:cf:c6:f0:39:94:bc:0d:db:7c:27:d0:53:32:
                    4d:0e:4e:74:08:4a:5f:aa:10:9c:12:d8:38:d3:2e:
                    ff:04:40:6a:a3:b8:62:33:4c:5e:85:ed:0b:b3:90:
                    0f:eb:6c:9b:e1:a9:39:c1:60:2a:1d:93:77:da:6b:
                    c4:46:b9:16:84:fa:1a:96:2c:6f:28:85:12:4e:1b:
                    d2:7d:09:54:6e:e4:d7:66:4f:99:b6:6a:27:7e:a0:
                    de:fb:7e:5a:ef:a1:2d:78:66:28:20:7d:cb:a5:81:
                    89:09:9f:ea:e6:b8:bc:9f:d0:a7:61:02:9f:1f:53:
                    0d:20:a9:dd:78:c8:9e:e4:af:56:c4:68:41:e2:61:
                    23:fc:04:d5:4e:02:ac:e6:1d:7d:20:ec:c0:d0:1d:
                    ff:d7:35:e9:16:fb:de:fd:61:e7:ba:ab:80:3b:01:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D4:7F:97:4A:E9:4E:9F:35:4E:0F:88:CA:1A:6E:16:EE:2F:4D:F8
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:1a:f3:71:f1:41:3e:08:41:06:5a:0c:c8:a7:4a:80:95:
         a9:06:48:de:44:0b:37:24:b1:24:82:db:8d:b1:c3:7c:af:ee:
         68:ce:f2:40:ba:9c:fc:d1:72:7a:a1:cc:58:6b:d5:bd:79:4e:
         20:71:d6:2c:06:6b:68:b2:87:3e:71:b1:ce:d9:51:65:59:8c:
         a5:06:fd:35:5b:f6:c9:57:30:fb:e8:d5:1e:13:c6:46:c8:6e:
         48:c7:61:d4:ea:65:da:7b:48:71:76:0a:ba:28:2b:0c:9c:a7:
         ad:52:46:19:94:d5:5f:29:d9:27:51:f5:21:73:20:7e:90:f1:
         c6:87:18:9f:8d:94:61:58:6e:aa:0e:90:61:5a:3b:51:fc:fb:
         68:64:8a:95:01:90:45:28:0e:2a:27:80:70:46:76:17:74:e8:
         2b:53:1a:ac:73:86:19:06:bc:91:04:04:c6:96:31:69:eb:4c:
         a1:f7:a2:f9:cc:66:ad:d8:82:74:17:1e:c0:31:0d:68:67:c4:
         56:09:dd:a8:66:13:38:34:5b:c1:4c:3e:31:97:33:25:cf:a7:
         44:27:35:25:6c:89:58:d5:d2:9e:1c:62:b3:fd:57:09:da:bd:
         da:31:df:1b:b0:59:ea:7a:ac:ba:f6:44:fd:67:8c:40:f1:76:
         9b:60:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:32 2025 by rpki-client