Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json)
Hash identifier:          n3FOQ/mJ+KbZDCTVLBxle7WyHTOVsShQbnrlW4/HPGE=
Subject key identifier:   AB:B8:C2:6D:5F:E2:E2:1D:10:6A:4A:50:0A:CE:19:76:D4:E6:1E:BD
Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Certificate issuer:       /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
Manifest number:          018F
Signing time:             Mon 03 Nov 2025 03:25:49 +0000
Manifest this update:     Mon 03 Nov 2025 03:25:48 +0000
Manifest next update:     Mon 10 Nov 2025 03:25:48 +0000
Files and hashes:         1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: h99zfJI3/ZDyPvrUivZTT4JEQ+gDMvS84FNFC77+bjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
                          rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Validity
            Not Before: Nov  3 03:25:48 2025 GMT
            Not After : Nov 10 03:25:48 2025 GMT
        Subject: CN=690820bd-7a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:52:88:01:34:3e:b8:b1:37:24:73:69:ec:
                    0e:af:17:ca:90:b7:e8:75:22:c4:9f:fc:37:66:44:
                    b8:6c:19:78:db:c3:57:c2:1d:c4:89:ca:bf:a2:7d:
                    5f:c6:6d:b3:8a:02:01:44:fb:c9:ac:aa:44:84:c8:
                    68:59:e1:30:9c:24:f2:68:f9:3b:5d:34:d7:18:84:
                    8d:61:c5:16:63:c8:ca:55:1b:12:e4:3f:b2:60:d6:
                    c4:0a:e4:d1:9e:53:97:88:ae:71:00:3f:42:ae:46:
                    df:50:0e:45:95:78:cc:42:7e:bb:7e:18:58:bf:b8:
                    ca:b6:cf:a2:a2:6e:e0:83:38:9d:28:08:aa:c9:12:
                    02:38:15:dd:b5:90:ee:46:bd:33:c0:27:be:91:d5:
                    78:91:e3:00:30:b7:d5:85:e8:b5:81:57:a5:a4:6c:
                    8d:a5:94:e6:ac:3d:d9:eb:e2:e7:00:de:ed:50:4d:
                    5a:ca:d0:40:df:a9:c2:15:dc:ae:16:bd:9f:94:6d:
                    a4:83:1b:25:fa:26:77:cf:69:75:a5:c2:7b:d6:39:
                    a1:8a:60:07:b6:e7:19:15:2b:9d:3c:bc:13:73:67:
                    0c:3e:92:47:01:7d:99:7d:7f:dc:12:5c:c6:d1:de:
                    98:96:e1:a4:ba:c7:26:47:9a:c1:f3:b4:c4:6e:12:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B8:C2:6D:5F:E2:E2:1D:10:6A:4A:50:0A:CE:19:76:D4:E6:1E:BD
            X509v3 Authority Key Identifier:
                keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:56:d3:b5:90:f7:f1:55:51:bb:1f:7f:ec:80:3d:67:e0:
         78:10:88:cd:e0:09:5f:b8:fa:4d:cb:85:2b:db:b6:a5:f1:13:
         bb:fe:cf:35:e0:b6:58:9a:de:99:1b:b2:20:d8:8c:7a:a2:49:
         6b:77:e9:e9:96:15:33:45:d6:e1:80:4a:26:24:e7:6a:93:a7:
         bc:19:6d:75:7b:b7:a0:8e:7a:57:db:d6:5f:ab:16:45:a9:3b:
         a5:78:f5:11:ed:0c:0d:5b:20:45:c7:6d:fc:cd:b3:80:f8:18:
         94:87:fe:7b:33:80:6c:38:e0:45:59:ca:87:48:cb:9d:5a:99:
         aa:15:59:5d:ae:56:1e:59:73:63:08:c2:e4:4c:b4:74:e2:21:
         9e:8a:59:33:08:01:f8:fc:e7:03:30:15:ad:7b:0a:cf:30:32:
         51:02:a6:3b:88:fd:6a:8e:66:58:06:68:10:d4:8c:c8:57:ca:
         9b:33:6e:a5:83:fc:e2:bf:44:ab:da:80:93:39:8f:8d:3f:06:
         bf:f9:fa:03:ac:4f:53:9b:69:63:06:b8:77:93:a0:fe:c0:91:
         e4:37:6c:ce:2e:c6:b1:23:8f:3c:b8:0c:e1:36:bb:65:9d:58:
         6c:50:00:e7:47:bb:d5:a9:7c:ce:5e:99:06:4e:f2:a9:ec:8f:
         76:4f:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:11:54 2025 by rpki-client