Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File:                     dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier:          993qL3XubxRmw8TZLu3jpMU19gjGnR0cHmncTgLRSWo=
Subject key identifier:   2E:0E:62:12:C7:A5:D0:9E:F7:1F:7E:2B:D7:B5:61:0A:8E:EB:6F:75
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer:       /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial:       0782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number:          0949
Signing time:             Sun 02 Nov 2025 21:33:51 +0000
Manifest this update:     Sun 02 Nov 2025 21:33:51 +0000
Manifest next update:     Sun 09 Nov 2025 21:33:51 +0000
Files and hashes:         1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: Duf8Os7wRAsksB6jEd+AnSgfYWPAcM9AmyTrJLipdwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
        Validity
            Not Before: Nov  2 21:33:51 2025 GMT
            Not After : Nov  9 21:33:51 2025 GMT
        Subject: CN=6907ce3f-f508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:61:66:b1:fc:d0:8f:0e:86:51:d5:91:3a:
                    fd:c9:a2:49:16:bf:a5:9f:d7:dd:a0:66:43:6c:d0:
                    93:aa:eb:35:84:ab:c5:47:ee:d9:6a:ff:e4:17:d9:
                    3c:4c:d2:56:9f:a6:70:06:b3:06:54:b4:c6:5c:f8:
                    71:f1:4e:0e:15:8f:6b:33:8a:03:38:a2:f7:d8:43:
                    da:18:ad:c4:9b:e2:fb:36:08:59:df:70:a3:41:98:
                    4c:1a:d4:7b:1f:01:b7:39:cc:9e:60:45:d5:a7:32:
                    46:dc:b9:15:63:bb:74:45:2d:18:f8:ba:24:a9:82:
                    8d:b1:e9:77:38:80:21:16:67:55:21:d8:c2:fb:fa:
                    52:4c:a6:aa:b1:8d:a7:9c:a5:b4:e7:ca:e2:15:a0:
                    d5:d6:a0:70:24:ab:06:e5:4f:03:90:1b:31:60:ce:
                    f1:ab:8c:41:49:ea:54:a6:ee:05:ff:b6:62:c5:5e:
                    17:11:f8:2b:01:88:16:36:d8:90:a1:e1:21:15:99:
                    55:1e:c7:d6:73:9a:fd:4f:4d:f9:1a:db:ca:c5:8d:
                    42:09:6d:b9:98:53:4e:32:ef:e2:7a:c1:58:d7:bb:
                    5d:98:3f:13:2e:a3:c6:df:00:cd:6f:50:97:78:98:
                    08:4f:a7:85:1b:ea:19:64:75:7b:eb:52:52:dd:77:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:62:12:C7:A5:D0:9E:F7:1F:7E:2B:D7:B5:61:0A:8E:EB:6F:75
            X509v3 Authority Key Identifier:
                keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:e2:95:64:df:33:1c:90:3c:14:d1:4e:28:be:86:00:64:
         59:18:95:eb:61:57:67:9d:34:ae:5e:ae:3a:0f:42:16:18:2e:
         12:7f:0c:dc:56:68:6e:94:ed:5a:49:d8:7a:fc:e5:76:14:19:
         19:68:20:94:14:40:c5:48:4e:d3:99:a6:4d:25:32:a3:14:06:
         07:fa:42:b2:0f:c4:f6:83:01:92:60:37:d0:e1:e6:ac:9c:fe:
         6c:6c:5e:14:d0:94:9f:2c:f6:36:7c:bb:e3:bd:30:ea:74:fc:
         fa:02:b5:3c:4d:b6:e0:56:ea:79:38:b4:ff:ee:ea:98:df:c5:
         34:f8:e2:4b:6e:56:d4:32:02:c6:ad:bb:a7:12:47:82:08:46:
         1e:87:d5:1c:8f:53:75:2c:78:d5:be:0d:44:13:c5:6a:ba:09:
         6b:1e:60:3c:64:6d:36:62:a2:54:2a:a5:53:ed:8c:c5:d4:e9:
         c5:61:3d:05:fe:20:60:07:52:0b:74:fb:79:eb:b0:3e:1b:dd:
         21:72:dc:49:b2:8b:65:2d:20:54:24:22:59:b4:92:56:ee:97:
         5e:c3:16:65:47:08:91:15:c8:2c:44:45:6b:23:00:c8:7a:de:
         3f:ae:b9:f6:27:ee:97:23:05:1c:bf:44:e3:9c:b4:d6:ff:e6:
         c4:6d:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:08 2025 by rpki-client