Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
File:                     6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json)
Hash identifier:          2r25zoPfd1T3xEMSW80c9T0nCBdHhx7ZLiO1L8uOKPA=
Subject key identifier:   0D:79:89:90:A8:3C:14:B4:F7:77:76:A1:4F:76:B1:2B:EF:7A:84:D7
Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7
Certificate issuer:       /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
Certificate serial:       34D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
Manifest number:          34D4
Signing time:             Tue 04 Nov 2025 15:16:55 +0000
Manifest this update:     Tue 04 Nov 2025 15:16:54 +0000
Manifest next update:     Tue 11 Nov 2025 15:16:54 +0000
Files and hashes:         1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: GM6tFUtJMlQm2U3clqbFF7oHSQC01EGWDAGIMQ9Fotg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl
                          rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13524 (0x34d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA790, serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
        Validity
            Not Before: Nov  4 15:16:54 2025 GMT
            Not After : Nov 11 15:16:54 2025 GMT
        Subject: CN=690a18e7-793c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:13:68:77:49:f5:d8:ad:a9:51:2e:24:0d:
                    5a:03:57:20:a5:92:a6:62:40:14:b3:c9:ca:32:b2:
                    64:fe:ed:ff:30:bd:3f:0f:15:29:7e:cb:cf:6c:c5:
                    5c:e0:0b:e4:c4:1b:5d:43:9a:47:cd:f9:6a:6a:5b:
                    45:f9:cb:d8:c6:7d:7d:00:ba:fa:15:d7:01:61:7c:
                    36:b8:00:d0:33:d5:59:31:6a:e8:d4:87:3b:e2:0e:
                    37:06:7d:e1:bf:47:ca:3d:fd:a1:69:fb:a7:44:d2:
                    1b:e2:a5:48:10:00:d3:9c:b3:ee:a2:9f:6d:a8:0f:
                    d8:16:8d:06:92:7d:d1:2b:8e:b8:9e:86:7a:a7:fb:
                    f1:f6:91:f8:d3:63:1c:4f:ae:9d:0d:be:bd:bf:3e:
                    e4:f4:a9:1c:ce:96:82:b3:fa:d3:7d:19:a8:17:ee:
                    5e:a7:57:78:1c:aa:7a:47:36:9a:bf:70:09:63:da:
                    6b:dc:44:51:2a:87:e6:de:33:42:08:73:14:90:58:
                    a5:82:ea:39:b1:92:0c:e2:39:48:9e:7d:ba:23:96:
                    50:26:0a:83:0d:86:c6:91:15:70:9b:ce:c7:89:ae:
                    e5:62:4a:a2:c0:e1:07:42:3e:a1:86:7e:40:59:0c:
                    a1:5b:53:86:f1:d2:2e:46:a7:f1:d1:ad:2c:41:7f:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:89:90:A8:3C:14:B4:F7:77:76:A1:4F:76:B1:2B:EF:7A:84:D7
            X509v3 Authority Key Identifier:
                keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:84:69:b9:bf:57:4f:16:93:8f:1b:b0:5f:3e:d4:7f:6c:
         84:73:5b:8d:99:e2:d8:68:9e:08:00:26:79:94:55:27:47:8a:
         0f:7c:d2:15:87:d8:4c:6f:f2:04:3b:b7:55:ef:d7:39:42:39:
         43:0c:be:29:bb:b1:a1:f4:77:7d:89:8a:b6:ed:f6:34:ba:c5:
         61:fc:df:93:a7:db:4f:15:99:ef:f5:85:c3:5e:78:db:aa:63:
         22:a2:c2:4c:34:41:f6:0b:52:cc:04:4a:ef:aa:78:07:9b:b4:
         8f:2d:93:33:04:a0:c7:b3:0e:f9:97:ab:2d:95:a5:31:a1:44:
         5b:3d:a4:6c:c7:7c:3c:27:df:8b:52:fa:71:ba:69:44:96:b0:
         67:0b:6f:82:93:96:7f:a9:41:d7:0c:92:2f:49:e6:a9:68:d7:
         2a:1a:73:55:82:d5:8b:cc:76:a4:b3:c2:69:ca:7d:d4:5e:f1:
         dd:a3:1c:5c:6e:b4:ad:18:ca:21:75:4d:5e:5b:53:4a:f2:32:
         e7:16:dc:71:c5:b9:e0:a9:44:f9:76:d7:de:7f:d9:2e:59:3f:
         6f:fb:c7:91:9d:2e:fc:ce:43:e4:ba:63:0f:52:2e:4b:be:6d:
         f7:a1:ee:e7:0e:7f:93:01:27:fa:87:ab:b0:d6:6c:5a:a5:40:
         62:05:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:45 2025 by rpki-client