Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          QVYj0CYm0+0sXBlwAYAGTC5qO2agdC1KOGg5yO7+smE=
Subject key identifier:   9E:05:B7:8C:32:C5:3B:86:50:A0:E2:57:78:C1:32:24:58:A5:33:27
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          0126
Signing time:             Mon 03 Nov 2025 04:37:41 +0000
Manifest this update:     Mon 03 Nov 2025 04:37:41 +0000
Manifest next update:     Mon 10 Nov 2025 04:37:41 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: H4evOmVVxuLYdnz5mzriX+kjkzQOJEaf7r26Ji4XnbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Nov  3 04:37:41 2025 GMT
            Not After : Nov 10 04:37:41 2025 GMT
        Subject: CN=69083195-5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:1b:cb:57:04:d3:81:f6:a4:c2:5e:24:fc:
                    ec:97:4d:cf:0f:66:bc:5b:b8:f9:fe:ec:d4:ab:17:
                    a4:ce:6b:9a:32:82:30:e1:e3:3f:34:2b:48:ed:ec:
                    47:af:80:82:3d:42:c0:24:73:f6:c0:65:4b:03:c6:
                    96:3b:84:63:eb:f3:6a:2e:f9:1e:38:5b:66:05:d3:
                    67:e7:0d:75:42:2e:9f:fa:70:c8:42:ca:d0:5b:40:
                    51:c6:c6:3b:47:cc:d6:23:6c:8d:33:97:e6:bf:70:
                    c1:79:c4:8c:b1:cf:bc:74:3b:30:93:71:7e:c7:32:
                    6f:92:5c:5d:07:66:80:37:1b:f2:41:0d:9d:f8:00:
                    7d:61:9d:1b:db:61:a0:81:f4:ea:6f:33:97:e6:4f:
                    e2:5f:11:a7:43:0b:d5:dc:dc:9f:84:e5:85:55:2e:
                    d8:2f:1e:57:c7:d6:b4:de:db:76:46:4c:06:68:78:
                    e4:46:f2:d9:1d:a8:63:da:20:71:df:32:a9:b2:32:
                    8b:4d:8d:d7:cf:34:0a:42:2e:5d:49:6c:82:8c:41:
                    3e:d7:33:58:1e:00:4b:2c:fb:cb:da:5b:d0:4a:23:
                    a6:ef:f8:28:4d:18:b3:18:c0:29:7b:5b:29:71:b7:
                    8a:f4:1d:49:9f:1e:f5:d6:00:85:de:47:a6:b4:b8:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:B7:8C:32:C5:3B:86:50:A0:E2:57:78:C1:32:24:58:A5:33:27
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:ed:de:a2:7f:52:07:b4:ee:1f:ef:0a:bc:f3:44:b4:ba:
         66:52:ce:35:f3:11:0e:76:54:49:19:a0:66:24:88:c6:0c:ca:
         eb:13:8c:8c:76:bb:16:f9:dd:12:b8:15:11:a0:ba:2f:b9:59:
         ac:a0:55:80:77:a2:2f:65:4c:96:33:e5:17:f7:82:a1:90:82:
         f4:cb:fa:2e:25:ab:dc:9e:5b:d5:43:f6:86:79:e0:d6:0c:36:
         f9:6d:43:92:80:9a:1e:dc:d7:7b:ce:c6:f2:c8:3b:ae:eb:18:
         37:1d:c5:b3:dc:22:3c:02:d7:a8:86:84:69:c4:67:d9:7b:8c:
         4c:a9:f2:27:c1:e2:af:6f:ac:18:26:6f:0e:97:0e:4c:d2:dc:
         06:c4:d4:bb:b8:f0:34:a5:d3:68:6d:c0:fe:b2:ac:bd:b2:a7:
         7d:1c:71:4f:cc:da:a2:57:9b:6c:2b:6c:90:01:68:5a:aa:dc:
         46:c6:da:12:de:82:8c:f5:43:dd:5f:62:3f:e7:77:5f:38:2a:
         e3:28:1e:08:7e:02:21:b0:d9:d9:46:65:68:12:e1:e6:a7:db:
         fc:3e:a2:8d:05:6d:28:a9:78:3c:d4:6c:6a:3d:68:5f:96:a3:
         c5:5f:e0:cf:2a:86:2d:2c:dd:17:0d:02:1a:85:a6:df:d1:89:
         aa:94:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:37 2025 by rpki-client