Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          6odQqZt1NWcwAJeWbre70PGzGmcYF51Y03/KnKbHPzc=
Subject key identifier:   A8:21:98:CB:60:2B:44:74:C6:76:E1:C3:C1:28:CE:4B:AE:6B:E1:CC
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0C60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          1536
Signing time:             Sun 02 Nov 2025 18:32:00 +0000
Manifest this update:     Sun 02 Nov 2025 18:31:59 +0000
Manifest next update:     Sun 09 Nov 2025 18:31:59 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: ct9DUVeYHt687m/qjWWvxXzps+CQZjBZfLu5DTA7vI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Nov  2 18:31:59 2025 GMT
            Not After : Nov  9 18:31:59 2025 GMT
        Subject: CN=6907a39f-0e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:49:9a:24:dc:56:f1:85:a0:e3:a3:5a:b1:
                    0c:b5:98:be:c0:9b:b4:95:20:a9:bc:2c:48:78:f9:
                    68:9c:0a:1a:08:af:86:a9:57:0b:22:72:99:ea:39:
                    da:3c:dd:3c:15:9e:56:6d:dd:1c:eb:6b:de:bf:7f:
                    e8:37:6a:8d:d8:5a:d7:fb:07:89:76:4b:03:b9:f2:
                    81:67:e5:d3:ce:0c:4c:2c:b7:d9:e8:67:a3:38:90:
                    9b:7f:40:ba:36:69:ed:5d:69:77:bd:e8:af:27:e2:
                    b8:ee:e1:5d:ac:82:d9:58:bd:f0:8c:5f:7a:35:26:
                    7b:0e:1c:fd:06:a5:6f:c0:2a:98:47:13:b3:7d:93:
                    f6:fa:76:20:2f:57:87:e9:d7:64:d0:17:86:46:ec:
                    da:13:d7:cd:72:59:ca:e5:b3:de:0e:fa:e4:b2:a4:
                    ae:43:85:30:8b:8f:6b:56:df:dc:c2:b4:36:73:b4:
                    e9:c9:e3:80:a2:3c:5b:4b:34:2f:61:8e:a3:cd:58:
                    f5:45:ae:40:dc:a4:21:22:a3:5e:b4:c0:06:29:73:
                    b3:46:1f:1a:8c:9a:9e:e2:9f:61:ee:79:bb:c1:8e:
                    ea:8b:70:17:6f:e3:7b:e4:cd:38:80:83:0e:d2:e9:
                    e9:14:64:53:aa:7c:b6:1e:c9:8d:33:44:62:60:2f:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:98:CB:60:2B:44:74:C6:76:E1:C3:C1:28:CE:4B:AE:6B:E1:CC
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:09:d8:06:04:c3:fd:b5:b5:e4:41:7a:e3:51:12:09:2f:db:
         86:1f:e1:e3:ac:24:f0:da:6e:14:26:3e:79:94:96:6a:e7:ac:
         12:f0:6d:7a:c9:a0:87:6c:41:17:cd:1d:82:35:9c:d6:43:f6:
         33:e0:73:69:17:b9:cd:4d:22:16:a7:29:dc:cd:63:41:7c:d2:
         dc:01:e4:40:4b:b9:8a:82:de:3a:42:a8:63:18:ca:17:cb:8d:
         9c:70:81:8d:64:a2:9a:19:6c:12:32:41:ce:48:ea:d0:88:c9:
         29:58:af:25:8a:9f:d0:f8:1d:71:6e:78:19:58:ba:a7:d3:b9:
         40:cb:91:1e:c3:17:52:d5:4d:15:a9:8b:e3:35:99:67:6a:91:
         53:67:40:7b:73:b1:3f:b4:33:30:08:0e:68:57:e4:be:6a:f4:
         f7:7c:5b:62:42:30:42:26:9c:e4:ee:b2:51:99:34:0e:2a:c5:
         71:68:7f:61:f7:31:79:77:5f:1d:73:f4:50:4c:c2:c2:cb:34:
         6a:1c:0e:79:79:21:23:be:16:4e:42:d8:21:13:db:d6:9e:af:
         43:93:fa:d4:71:72:89:17:d5:75:23:45:5e:52:23:28:f8:b6:
         4f:4c:4f:0c:00:51:10:80:c0:a4:23:af:17:42:94:55:ec:15:
         f2:03:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:17 2025 by rpki-client