Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File:                     rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier:          H5EinbywcuUn9UbeOMpXqAG470xh/Zz8wrLGMtWQUNE=
Subject key identifier:   D0:8B:75:69:DF:BB:4E:24:D7:84:D7:6B:25:73:89:83:92:7F:E3:DE
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer:       /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number:          0239
Signing time:             Mon 03 Nov 2025 01:48:01 +0000
Manifest this update:     Mon 03 Nov 2025 01:48:00 +0000
Manifest next update:     Mon 10 Nov 2025 01:48:00 +0000
Files and hashes:         1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 3KlK6k5iX++Ss1Xs9FlKaUCiQFs1cvliZH1cWkbjyzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Validity
            Not Before: Nov  3 01:48:00 2025 GMT
            Not After : Nov 10 01:48:00 2025 GMT
        Subject: CN=690809d1-0ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:06:78:9a:ae:dc:89:71:11:db:33:dd:31:
                    4f:2b:8e:fa:26:36:a7:d0:8c:b7:de:57:9e:18:59:
                    d1:40:1d:1d:a7:b2:33:52:39:50:17:7d:d7:56:ae:
                    4d:a0:a4:f5:e0:e0:a1:ed:bb:23:c3:c0:8d:ec:c2:
                    ed:30:dc:d7:34:2c:d5:24:a0:07:f4:31:de:e9:04:
                    54:c4:f2:06:ef:cc:ef:6b:37:88:41:d4:05:5e:07:
                    6c:c7:82:0d:5a:9c:f3:75:db:c6:c6:6d:81:4b:35:
                    48:e7:5d:19:18:ab:b0:41:c7:e3:81:6b:5b:6b:91:
                    22:3f:6d:6e:ef:06:f3:65:aa:21:7d:90:20:bc:6d:
                    ee:02:2d:fa:43:c3:bb:98:82:e8:9b:79:27:32:41:
                    fe:97:fe:9c:ea:1d:e5:d2:71:1f:ba:8a:52:1c:77:
                    5a:4c:b8:41:72:ce:eb:26:7b:8a:fd:ce:8b:5d:47:
                    43:0d:5f:6c:7d:ac:3c:f8:ca:19:b7:47:d6:f9:9e:
                    ae:be:0e:57:c5:e8:be:0c:99:ba:3b:42:20:c1:af:
                    c0:7f:fa:dd:66:b6:95:a5:2b:a1:a5:51:8c:31:7b:
                    6e:ec:30:f7:04:45:ea:5a:b5:69:34:d8:be:e3:6f:
                    99:66:15:8d:fe:c3:c0:c8:dd:aa:e6:2c:3f:e8:53:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:75:69:DF:BB:4E:24:D7:84:D7:6B:25:73:89:83:92:7F:E3:DE
            X509v3 Authority Key Identifier:
                keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:59:8e:a0:9d:c4:aa:96:a3:ec:4e:1c:e7:d7:c5:4d:5e:
         7d:02:6e:80:b4:8e:c2:66:76:25:db:44:fc:36:2f:3e:3a:95:
         a3:60:6a:90:3b:81:0a:76:ce:68:f2:f5:99:ed:ca:c0:ab:c9:
         0a:4d:62:06:8e:0b:b6:e2:ad:93:4d:d4:0a:9f:48:f1:34:58:
         06:36:5d:12:bc:4d:75:f6:fb:a5:6c:2f:4e:ce:d0:70:a4:98:
         4e:f7:68:68:0e:f6:a7:62:d2:73:33:0f:94:a6:49:15:f0:73:
         d9:1c:b6:3b:f3:57:e4:1b:52:91:a3:88:86:90:35:e0:74:13:
         df:4c:19:7f:d1:5a:fb:e0:45:12:c0:d8:52:2d:76:cc:a0:bc:
         8b:c0:96:c2:e7:0d:38:28:11:71:61:66:d4:f0:93:ba:fc:11:
         b8:80:ed:d5:da:88:a3:bd:a8:c3:2d:67:ee:32:97:f0:5b:08:
         04:b3:77:ac:c8:02:d5:31:0a:c5:fd:40:23:cd:5a:aa:ba:d4:
         db:f1:71:03:5a:15:d3:eb:32:ae:7d:b2:b6:11:eb:2d:33:09:
         e0:07:29:57:a1:2c:cf:fa:5a:63:29:d0:a9:5a:91:fc:dc:54:
         0a:e7:e0:0d:7b:77:78:55:4a:34:05:d7:5a:0c:fc:c1:b6:06:
         92:64:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:07 2025 by rpki-client