Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          0LghBkN9qi+zstXFDms2Hsh6aSYMJUe0ry6nNIUGQ/I=
Subject key identifier:   11:13:54:CE:3B:CE:F1:86:9C:F7:FB:40:F2:45:66:A7:A8:CB:16:88
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          E2
Signing time:             Mon 03 Nov 2025 05:26:49 +0000
Manifest this update:     Mon 03 Nov 2025 05:26:49 +0000
Manifest next update:     Mon 10 Nov 2025 05:26:48 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: ughHjRqUMJ3edNr70vqboBgjr+mlm25JnbIVpFBoclY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Nov  3 05:26:49 2025 GMT
            Not After : Nov 10 05:26:48 2025 GMT
        Subject: CN=69083d19-0c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:0c:5c:f7:3f:fa:84:8e:e6:9e:87:0c:0c:
                    2e:98:7e:ca:3b:92:12:90:ee:0e:44:d5:13:f6:70:
                    dc:42:4a:55:55:4d:22:a9:9c:5a:6a:86:27:ca:c3:
                    2d:f3:99:02:63:5f:71:0e:1d:be:3f:16:cb:9c:97:
                    fd:76:6d:2e:68:36:57:7c:56:ce:e2:47:ad:0a:c9:
                    63:cb:91:f1:54:80:82:35:df:f1:ef:e2:60:9e:0b:
                    cf:1c:4e:4d:b7:5e:03:17:4e:c3:21:1d:0e:f2:77:
                    0c:f5:02:89:0c:15:a4:2e:fb:5c:1c:58:9c:dd:54:
                    d9:a6:25:1c:a4:35:14:50:66:09:7e:f1:bc:26:b8:
                    a7:52:8b:13:42:2b:ae:dc:da:9c:32:02:22:64:b8:
                    f3:fa:1e:3c:78:d0:b6:0e:a9:55:6b:6d:87:cd:cf:
                    9c:1e:89:b5:1a:b5:16:6b:b0:89:e4:89:ae:f3:18:
                    a1:29:c3:59:a3:60:ec:10:4f:c9:05:bc:cb:10:e3:
                    b3:e3:bb:18:6d:3a:af:e5:b3:f8:ea:79:4a:2d:d2:
                    71:a5:b4:13:de:3c:d1:b3:12:99:d4:f8:27:bd:1d:
                    db:6d:75:ef:82:0f:5c:0b:69:a6:57:5f:8c:01:bc:
                    29:c1:e7:22:05:ff:f8:cc:13:16:2b:7d:89:e3:84:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:54:CE:3B:CE:F1:86:9C:F7:FB:40:F2:45:66:A7:A8:CB:16:88
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:f4:7c:00:ae:2b:a6:28:94:69:f3:c6:0e:a5:58:62:30:
         4d:32:9f:0d:50:4a:9d:99:88:3e:fb:2f:47:dc:6a:e7:c8:e8:
         6e:c6:21:23:6a:38:73:1f:62:8f:6f:dd:cd:ee:3f:49:f2:86:
         31:bb:e6:28:49:50:1c:90:0c:9d:2c:ac:99:97:16:39:3b:86:
         2f:6b:d6:36:2a:5a:09:a2:23:c5:0c:50:17:f1:2f:77:98:43:
         96:b5:f6:9e:6f:9a:c0:0e:46:f4:f0:5e:03:29:3d:5d:21:7f:
         91:27:3d:15:53:dd:25:5c:e9:3f:4b:95:ed:99:d8:ca:a1:02:
         f8:52:7b:a9:0b:f5:28:c7:b9:18:f2:91:13:06:99:70:1c:08:
         04:1a:e1:96:97:a2:a5:d7:7f:0d:c4:bb:eb:ca:66:0c:5a:70:
         6f:ca:04:7a:2e:67:6a:00:03:53:76:f4:30:dc:54:89:da:93:
         f3:4f:28:4f:2a:f5:80:93:b2:de:91:9a:e7:55:ca:38:45:ad:
         a4:62:e7:7c:8b:f5:56:f1:3d:a1:c2:15:e4:33:1b:d8:89:5f:
         70:91:7c:42:73:a2:71:23:a4:13:b8:57:28:e5:5b:b1:f2:5b:
         ff:ec:06:c2:42:4b:3e:dc:5d:53:b3:82:f6:9c:1c:60:b1:ad:
         7d:5f:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:08 2025 by rpki-client