Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          9fjePiYgKRfPBUQGSpE2aq8sVd6LuF5AxncqyglhOSg=
Subject key identifier:   11:27:5F:BB:A0:6C:2E:87:9F:EB:40:5B:9A:8C:E6:4A:36:CC:98:E7
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       34DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          6123
Signing time:             Sun 02 Nov 2025 14:15:21 +0000
Manifest this update:     Sun 02 Nov 2025 14:15:21 +0000
Manifest next update:     Sun 09 Nov 2025 14:15:21 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 8zfU2v9jfXeU0/gwBzFsp762tOv0FkM2XZn1SohnqC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13532 (0x34dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Nov  2 14:15:21 2025 GMT
            Not After : Nov  9 14:15:21 2025 GMT
        Subject: CN=69076779-3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:95:ea:58:e1:5e:84:e9:2e:c5:4b:22:5d:a1:
                    fa:3e:22:58:09:59:9a:39:93:3e:cb:8e:03:85:d0:
                    36:fd:26:70:03:ee:6a:be:64:4f:41:5f:ae:30:6c:
                    e4:ad:c2:c3:47:c2:7e:96:b1:0f:67:ee:e3:55:40:
                    e9:38:49:af:d2:20:6c:ad:fe:1a:d4:7f:3d:29:ba:
                    fb:bb:ff:4f:66:57:36:dd:ee:44:55:16:94:af:1a:
                    72:e8:fb:72:dd:f4:47:a5:e4:35:78:7b:7b:08:4b:
                    b1:c7:9b:10:14:10:51:53:44:a9:8b:a8:0b:d8:e5:
                    91:47:31:2b:76:ca:88:e2:3f:c7:a0:a4:c6:32:d9:
                    dc:41:d3:cc:16:a6:59:54:ff:fb:3e:5b:30:89:51:
                    44:38:75:77:8a:f2:51:f2:c1:d5:76:13:c1:72:9f:
                    63:d4:57:f3:09:4c:d8:6f:46:e9:9c:3a:2c:97:0e:
                    32:9f:6e:e5:73:38:ac:ee:36:73:85:d5:6d:80:de:
                    dd:03:11:de:2c:27:33:61:00:6d:66:e6:78:22:7d:
                    a5:4c:21:6c:fe:4b:e3:c0:d9:3a:ed:a9:0e:5b:fb:
                    f0:19:26:b7:58:8e:cb:9a:69:dd:b1:e3:60:37:80:
                    fb:37:1a:08:3d:2f:b8:26:be:b0:f5:b1:40:42:c0:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:5F:BB:A0:6C:2E:87:9F:EB:40:5B:9A:8C:E6:4A:36:CC:98:E7
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:a2:45:f3:1d:8b:ca:60:2b:06:b4:72:f9:91:cd:8e:76:
         2a:4b:cf:05:d2:12:96:53:9d:c4:ae:71:2f:3b:2c:55:54:df:
         58:a3:89:ac:5d:75:3c:1a:c6:c2:53:09:10:38:83:9a:a5:39:
         8f:3f:7d:29:d5:06:00:b1:b9:5b:21:93:6d:69:3e:36:89:37:
         17:ef:70:f2:95:c3:34:fb:4b:a0:c5:f4:41:71:48:03:36:4c:
         19:1c:ea:f6:43:65:53:52:9c:54:b4:81:c9:5c:60:7a:32:e3:
         8f:7b:b1:ca:49:24:d5:eb:99:50:de:ce:f3:56:7a:54:41:bb:
         e2:28:07:30:2c:71:ec:bf:3d:1b:e3:0b:1b:94:bb:47:ad:60:
         d5:79:03:b1:07:81:cd:f1:85:52:86:48:35:12:00:3d:ef:7f:
         00:da:d4:d3:2f:00:a5:5c:63:00:02:7f:05:aa:f9:0c:c4:6d:
         f6:60:ba:7c:9e:49:06:3e:9d:53:68:d7:9e:73:b9:ed:55:3b:
         55:a8:c6:bb:14:26:40:ef:a4:f9:92:8c:07:5c:d7:7c:d2:87:
         e0:88:56:87:78:3e:fc:4c:9a:02:a8:f6:7d:15:c7:85:fe:11:
         5b:29:62:bb:14:a7:57:fa:2f:a8:6a:1d:3e:d3:49:81:c4:87:
         44:67:cf:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB
MzlENkNCMzcwHhcNMjUxMTAyMTQxNTIxWhcNMjUxMTA5MTQxNTIxWjAYMRYwFAYD
VQQDEw02OTA3Njc3OS0zMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/JXqWOFehOkuxUsiXaH6PiJYCVmaOZM+y44DhdA2/SZwA+5qvmRPQV+uMGzk
rcLDR8J+lrEPZ+7jVUDpOEmv0iBsrf4a1H89Kbr7u/9PZlc23e5EVRaUrxpy6Pty
3fRHpeQ1eHt7CEuxx5sQFBBRU0Spi6gL2OWRRzErdsqI4j/HoKTGMtncQdPMFqZZ
VP/7PlswiVFEOHV3ivJR8sHVdhPBcp9j1FfzCUzYb0bpnDoslw4yn27lczis7jZz
hdVtgN7dAxHeLCczYQBtZuZ4In2lTCFs/kvjwNk67akOW/vwGSa3WI7LmmndseNg
N4D7NxoIPS+4Jr6w9bFAQsDCIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEnX7ug
bC6Hn+tAW5qM5ko2zJjnMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto
cnFUT0M0UkpVcVNqbld5emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0zqJF8x2LymArBrRy+ZHNjnYqS88F0hKWU53ErnEvOyxVVN9Yo4ms
XXU8GsbCUwkQOIOapTmPP30p1QYAsblbIZNtaT42iTcX73DylcM0+0ugxfRBcUgD
NkwZHOr2Q2VTUpxUtIHJXGB6MuOPe7HKSSTV65lQ3s7zVnpUQbviKAcwLHHsvz0b
4wsblLtHrWDVeQOxB4HN8YVShkg1EgA9738A2tTTLwClXGMAAn8FqvkMxG32YLp8
nkkGPp1TaNeec7ntVTtVqMa7FCZA76T5kowHXNd80ofgiFaHeD78TJoCqPZ9FceF
/hFbKWK7FKdX+i+oah0+00mBxIdEZ89J
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:23 2025 by rpki-client