Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
File:                     g_H_6dM06H_0zXVY3e81L-bfIGk.mft (raw, json)
Hash identifier:          RpwTdNfLBjAK/n90KkJjSKnw31AaK8eUDXjJoJ77+Lw=
Subject key identifier:   AB:24:90:0C:81:D2:A2:F3:E7:C7:55:1D:E0:35:7E:80:58:17:6B:12
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Certificate issuer:       /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial:       08AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
Manifest number:          0893
Signing time:             Sun 02 Nov 2025 20:34:01 +0000
Manifest this update:     Sun 02 Nov 2025 20:34:01 +0000
Manifest next update:     Sun 09 Nov 2025 20:34:01 +0000
Files and hashes:         1: g_H_6dM06H_0zXVY3e81L-bfIGk.crl (hash: NeXO0nDM48paU1SzpQlu37HNnLWGj/dyNbFKSkXaqDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
                          rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219 (0x8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFFA, serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
        Validity
            Not Before: Nov  2 20:34:01 2025 GMT
            Not After : Nov  9 20:34:01 2025 GMT
        Subject: CN=6907c039-beb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:d9:da:91:3a:60:82:96:fc:97:14:ef:f9:
                    8c:f3:72:dd:b8:5d:09:93:28:e9:42:70:85:38:04:
                    9d:dc:d6:05:96:fd:f6:a0:3e:b5:9e:b7:0d:b4:ad:
                    71:d9:1f:22:a9:88:70:f5:05:73:b2:b3:63:eb:15:
                    54:2f:91:36:7e:44:6e:0f:c6:c4:b4:22:a1:c5:da:
                    71:32:db:42:3e:64:2e:36:f5:ea:45:e8:4f:97:89:
                    2f:6a:5c:1f:76:66:d6:0f:47:45:04:b7:ea:04:89:
                    b7:b9:92:e4:a9:e6:1f:19:ee:80:66:44:7a:58:71:
                    40:b4:5c:49:58:db:6c:2d:06:64:f8:27:07:c3:a2:
                    cf:b0:d1:8f:2f:9a:46:2f:fc:f0:2d:b6:d4:fc:65:
                    3c:3c:82:15:6f:08:46:df:96:14:71:3f:e9:f5:3c:
                    ce:84:53:34:31:4b:8c:65:ec:3e:44:52:51:20:72:
                    1e:80:64:5d:03:b2:2c:5b:c8:3f:6a:69:af:9e:67:
                    b3:d8:7c:91:dc:ad:e2:9e:66:4e:cd:bd:89:a6:7b:
                    fe:dd:89:f2:b7:a6:22:2c:71:f8:ed:f5:b4:56:95:
                    9b:44:b3:31:1a:a1:fd:b8:2f:b7:94:99:d7:3c:77:
                    1f:2f:f1:aa:2e:eb:b5:a9:1d:ad:e2:30:29:53:10:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:90:0C:81:D2:A2:F3:E7:C7:55:1D:E0:35:7E:80:58:17:6B:12
            X509v3 Authority Key Identifier:
                keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:78:f9:d9:da:c1:b4:8e:9c:d8:6a:2b:18:6c:f6:ff:20:d5:
         48:ca:9f:3c:60:67:54:66:c4:9f:fb:1d:49:d5:e4:eb:9d:f2:
         66:a8:74:17:a5:48:59:b7:db:6a:38:1c:b0:4a:5d:11:75:81:
         e7:85:37:db:cf:96:06:cf:ac:32:35:1b:01:7b:37:55:14:6e:
         fb:89:dc:33:17:9a:37:43:3e:65:cc:2b:10:c1:c7:c4:82:9f:
         d4:84:62:f2:28:e0:2a:d3:42:81:3f:02:6a:e1:24:6d:94:02:
         b6:67:7b:d9:d9:73:80:b9:4c:b7:b6:cf:6b:44:ff:69:a8:e4:
         11:2d:ec:c5:31:cf:86:be:78:5d:7b:0c:f5:92:fe:7c:37:6f:
         8f:ce:a2:f7:86:46:4a:f4:07:66:c8:1c:2f:93:58:cd:26:57:
         fe:56:65:e5:d9:c4:6d:d1:f7:d5:d1:f1:20:4e:ff:80:13:a6:
         f2:57:ae:57:e5:40:b3:0c:85:0b:80:3b:4a:b0:30:b5:92:5f:
         7f:10:d9:37:2d:52:c3:f6:d2:f6:7e:50:a6:53:a8:61:ee:46:
         4d:09:b9:ae:38:06:61:18:4b:99:ef:1f:7a:81:3e:a1:d6:6f:
         28:93:7a:45:a5:c5:3a:8d:2b:c9:90:76:d4:e1:be:51:58:fb:
         ac:b7:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:42 2025 by rpki-client