Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          qATv41zz4P/cJY1TP4gInsNDxPGf+TYqv9aoy+5OMDw=
Subject key identifier:   31:6E:CE:98:EB:0A:6B:E6:3C:66:14:09:66:EB:18:FE:E6:CF:67:70
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          046A
Signing time:             Wed 05 Nov 2025 00:29:10 +0000
Manifest this update:     Wed 05 Nov 2025 00:29:10 +0000
Manifest next update:     Wed 12 Nov 2025 00:29:10 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: axc/8QlsxLGrDijGw3sWciatDs5/pRcB8egzeoWNzYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Nov  5 00:29:10 2025 GMT
            Not After : Nov 12 00:29:10 2025 GMT
        Subject: CN=690a9a56-d64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:8d:d7:df:b1:fb:9a:f0:08:27:55:b5:ae:
                    cd:51:41:24:25:e2:12:d9:94:e7:a3:be:6d:5c:43:
                    a4:63:c2:9e:9d:c7:0e:85:ca:b9:eb:04:2c:36:d4:
                    07:ce:db:23:ab:ca:ac:8a:1f:9a:ac:2c:b4:4e:16:
                    34:23:0f:39:d1:3b:16:aa:fa:de:a0:06:07:a8:33:
                    a6:41:6c:99:a2:49:ce:4d:bd:4e:4b:7c:db:67:8e:
                    96:e1:02:f5:6b:aa:30:57:7c:b7:32:40:61:c7:fa:
                    a1:4d:fd:a7:c8:3b:bf:9e:2e:11:b8:d0:b6:d3:9c:
                    a8:00:9b:a6:4a:27:bd:4d:4d:da:04:8a:c2:ba:6d:
                    28:39:89:8a:d6:3a:81:5c:dd:ee:92:90:1d:8e:67:
                    3c:61:10:1d:50:93:03:c1:74:59:08:de:38:b6:0e:
                    b5:63:c6:d2:9e:96:b0:79:07:a5:16:64:d1:93:50:
                    99:88:d9:2e:aa:72:c9:6f:7e:bc:40:ac:14:71:57:
                    0e:4c:32:6c:c2:6b:9a:42:ca:77:46:20:29:d8:3f:
                    ad:d1:b2:74:50:86:3b:0b:f0:06:71:6f:c6:bb:39:
                    32:0c:04:29:19:98:2d:dd:6e:4c:d8:b5:24:de:39:
                    93:b8:18:8e:2a:58:03:cb:fc:ea:69:11:22:c6:9d:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:CE:98:EB:0A:6B:E6:3C:66:14:09:66:EB:18:FE:E6:CF:67:70
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:82:ca:95:5c:fd:16:5d:b2:9b:dc:fe:a0:57:cf:27:b0:eb:
         a9:ac:8c:b1:35:75:fe:2a:a4:82:39:4c:2c:1a:c9:83:2b:09:
         2a:c6:89:64:3b:48:84:4a:bd:8c:df:d6:d9:0f:d0:9a:0d:84:
         76:0e:79:f9:ac:e5:c1:ae:e9:41:ee:c5:18:0a:07:84:ca:28:
         38:0a:83:62:aa:9b:99:a1:76:33:b9:12:65:75:3d:89:3b:c1:
         bb:6d:5f:08:91:19:05:50:33:47:9f:8b:b8:18:d6:99:53:17:
         34:85:26:35:a2:80:73:1c:50:de:d0:7a:b7:6e:8f:90:e9:70:
         cb:ae:18:4d:09:88:14:09:95:52:75:0a:b6:fb:00:ae:86:32:
         7d:a8:f0:58:33:39:df:90:45:58:a7:23:ab:be:20:ee:9c:29:
         62:14:a5:9a:f3:26:eb:22:78:f6:f1:86:89:86:e1:e8:f8:8e:
         05:26:3d:69:fe:fc:69:9e:79:01:fa:1c:9f:cc:c7:3c:63:cd:
         50:c4:5f:bd:75:d1:3e:22:bf:43:5c:60:f5:e5:ff:c9:b5:28:
         ba:c9:49:39:f1:3d:e8:2e:f8:de:70:67:2d:59:fb:48:c2:5c:
         9e:ed:ce:90:0e:1d:93:2c:2a:d6:31:b9:e6:ef:5d:e9:45:15:
         aa:ec:67:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlBOUYxMTAvBgNVBAUTKEY3OUJBNEJCQkVBRDNERUFEQzlBRDQ1NjRCRkE5RUYx
MEE2QUEyQjIwHhcNMjUxMTA1MDAyOTEwWhcNMjUxMTEyMDAyOTEwWjAYMRYwFAYD
VQQDEw02OTBhOWE1Ni1kNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrON19+x+5rwCCdVta7NUUEkJeIS2ZTno75tXEOkY8KenccOhcq56wQsNtQH
ztsjq8qsih+arCy0ThY0Iw850TsWqvreoAYHqDOmQWyZoknOTb1OS3zbZ46W4QL1
a6owV3y3MkBhx/qhTf2nyDu/ni4RuNC205yoAJumSie9TU3aBIrCum0oOYmK1jqB
XN3ukpAdjmc8YRAdUJMDwXRZCN44tg61Y8bSnpaweQelFmTRk1CZiNkuqnLJb368
QKwUcVcOTDJswmuaQsp3RiAp2D+t0bJ0UIY7C/AGcW/GuzkyDAQpGZgt3W5M2LUk
3jmTuBiOKlgDy/zqaREixp0g5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFuzpjr
CmvmPGYUCWbrGP7mz2dwMB8GA1UdIwQYMBaAFPebpLu+rT3q3JrUVkv6nvEKaqKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB
OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBlcmNtdFJXU19xZThRcHFv
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk1dWt1NzZ0UGVyY210UldTX3FlOFFwcW9ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBl
cmNtdFJXU19xZThRcHFvckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLgsqVXP0WXbKb3P6gV88nsOuprIyxNXX+KqSCOUwsGsmDKwkqxolk
O0iESr2M39bZD9CaDYR2Dnn5rOXBrulB7sUYCgeEyig4CoNiqpuZoXYzuRJldT2J
O8G7bV8IkRkFUDNHn4u4GNaZUxc0hSY1ooBzHFDe0Hq3bo+Q6XDLrhhNCYgUCZVS
dQq2+wCuhjJ9qPBYMznfkEVYpyOrviDunCliFKWa8ybrInj28YaJhuHo+I4FJj1p
/vxpnnkB+hyfzMc8Y81QxF+9ddE+Ir9DXGD15f/JtSi6yUk58T3oLvjecGctWftI
wlye7c6QDh2TLCrWMbnm713pRRWq7Gcm
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:07 2025 by rpki-client