Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          5T4nfSq5fE3Jff9cAatNEKPUndIXqtrFHXBOxdHqldo=
Subject key identifier:   A5:7D:38:DE:41:B1:60:8A:E6:04:9C:85:B6:62:7F:BC:4B:F4:8F:B8
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1A93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1A93
Signing time:             Thu 18 Sep 2025 16:26:02 +0000
Manifest this update:     Thu 18 Sep 2025 16:26:01 +0000
Manifest next update:     Thu 25 Sep 2025 16:26:01 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: mVIPDdXyWSVp8VrVxuLPZBmVBCt+ED2m2ETMJcuXg1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 16:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6803 (0x1a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Sep 18 16:26:01 2025 GMT
            Not After : Sep 25 16:26:01 2025 GMT
        Subject: CN=68cc329a-458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:f3:c9:56:3b:bc:6d:97:73:67:fc:04:e9:
                    16:e2:a6:ac:08:03:6d:09:50:03:fd:f3:2d:bb:61:
                    e3:96:5b:3c:b7:16:7b:80:18:3b:f5:1b:25:80:29:
                    be:3c:64:35:dd:93:c0:58:29:7c:0f:c4:06:73:45:
                    3c:2e:b2:58:86:c2:83:28:fb:3e:a0:cd:de:5b:a7:
                    85:19:84:57:2a:c0:d9:7b:0d:e6:06:08:d8:c7:82:
                    13:23:03:af:61:94:ef:b4:5a:58:d8:ef:ec:fc:c7:
                    f2:71:d1:42:5d:f5:31:b0:52:80:70:6d:7a:d7:3f:
                    60:cd:22:f7:0a:15:b9:9f:ce:96:b2:5c:18:78:65:
                    e7:41:52:f7:e6:49:4e:63:3f:d2:90:18:68:dc:5b:
                    4e:4a:de:f4:df:a6:46:e6:94:fc:3e:ff:49:a9:fb:
                    6e:a6:7e:64:92:89:04:50:f9:56:e6:7f:19:fe:68:
                    90:91:ff:30:1c:2d:fe:b5:f2:30:a1:73:48:22:4c:
                    06:a6:ab:63:49:6c:96:51:89:e0:93:ac:9a:de:24:
                    87:d8:d4:6b:f6:5c:4d:45:85:a5:6f:31:8e:8e:29:
                    23:6b:5d:64:c1:36:c7:a6:5d:cb:1d:25:3a:4c:ec:
                    9b:62:f4:07:67:cf:2b:5b:1f:7c:ce:1b:25:14:4a:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:38:DE:41:B1:60:8A:E6:04:9C:85:B6:62:7F:BC:4B:F4:8F:B8
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:7b:12:02:5f:23:7c:5d:c4:ae:d3:f8:3c:37:f9:1c:67:
         a9:83:d5:e0:0c:7f:e3:58:a4:7d:0e:ba:1d:bc:0f:6f:43:8c:
         ba:38:3c:75:ab:5a:47:4c:ce:ed:fe:9f:16:6d:36:ab:b7:da:
         47:02:fc:8f:6a:59:9e:0a:f6:5f:a1:42:4a:e0:bc:d2:f9:e9:
         e9:97:af:de:6b:f2:c7:59:ee:7d:44:14:a8:17:c7:cc:e3:26:
         ad:91:c3:d0:5d:0c:c8:20:20:09:ac:1c:87:44:3b:64:30:68:
         8c:d2:e4:a3:ed:2c:c3:af:14:3c:11:6c:c7:71:15:bf:3d:0b:
         0e:56:d7:52:cd:bd:d9:c9:e8:49:e9:4b:7b:33:29:a4:55:fa:
         3a:ca:bc:0e:6a:4e:32:a9:49:e6:9f:65:20:67:f9:b0:00:2f:
         6a:e0:8f:90:44:44:66:ab:11:88:b4:5a:21:9d:c5:46:61:77:
         89:d9:45:e3:fe:af:f7:09:64:bd:66:6e:2b:f2:f9:ea:2e:23:
         ee:ca:6d:06:04:d3:25:7e:15:3e:c0:b1:e4:57:bb:69:c0:8c:
         75:00:1c:a2:65:86:f2:1c:73:76:ff:37:f4:a9:1b:2f:4e:bb:
         45:a8:6d:08:67:53:22:fc:77:43:d3:2e:c2:d1:76:ce:95:f2:
         0d:e7:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:41 2025 by rpki-client