Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File:                     7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier:          llEYqEX7CUEN0SUzZ/58QGS/vf4Zz5363lORQhqw+vg=
Subject key identifier:   C0:08:4C:D4:C7:EF:48:20:2F:00:F8:74:F2:C1:85:AB:A1:0D:2E:41
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer:       /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial:       34D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number:          34D4
Signing time:             Tue 04 Nov 2025 14:39:17 +0000
Manifest this update:     Tue 04 Nov 2025 14:39:17 +0000
Manifest next update:     Tue 11 Nov 2025 14:39:17 +0000
Files and hashes:         1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: d3Bc8crZxyVxdHdQnIhCWiL3+hKeZS4mnXsCgOrK+y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
                          rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13524 (0x34d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
        Validity
            Not Before: Nov  4 14:39:17 2025 GMT
            Not After : Nov 11 14:39:17 2025 GMT
        Subject: CN=690a1015-671c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:5a:38:9a:b0:11:f0:1b:ee:60:2f:fd:31:
                    8f:a8:62:fc:7d:82:6e:d2:cd:c2:e3:88:74:a6:d8:
                    6c:37:96:e1:52:b9:dd:47:bd:40:e3:6a:0f:71:52:
                    3e:4e:9e:fe:45:99:2e:7e:8f:32:76:b4:40:83:46:
                    2f:46:40:04:0d:fb:f0:c2:de:88:58:92:42:85:d7:
                    ea:94:a3:04:8c:89:b3:5c:93:ed:2e:bd:b4:0a:38:
                    e6:2b:9e:83:e0:3a:85:8d:87:7d:27:93:00:6d:a4:
                    fa:87:59:ac:68:03:0f:a4:b9:b8:46:c4:fd:7f:66:
                    0d:02:2a:eb:97:55:d0:db:20:4b:a7:4b:81:f1:62:
                    90:a3:c6:1d:bf:e6:ec:d4:e1:77:c2:3a:0d:d6:17:
                    f3:b0:bf:30:4f:c8:68:fd:dc:5a:b3:cf:46:ec:5e:
                    22:df:85:5e:bd:14:6e:66:94:27:14:38:4b:55:db:
                    cc:26:17:04:e2:9d:3d:24:10:9e:e6:73:27:67:a8:
                    2c:a2:06:f0:7e:2d:a8:14:4f:c8:3f:88:df:3b:20:
                    bc:cb:d4:02:0c:06:48:63:13:d1:6a:a8:ed:00:d8:
                    a4:5b:4e:47:6c:c1:2e:bc:d9:8a:72:22:20:a9:e6:
                    29:25:c9:80:fb:a5:77:16:2d:e3:11:ff:dd:19:c7:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:4C:D4:C7:EF:48:20:2F:00:F8:74:F2:C1:85:AB:A1:0D:2E:41
            X509v3 Authority Key Identifier:
                keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:47:49:19:d8:82:61:9d:e3:f6:ba:86:77:97:15:2b:89:
         fb:15:ab:2b:8f:11:b1:6b:18:40:96:a1:ab:b3:b1:31:d3:91:
         c5:26:6e:dd:10:46:02:7d:5a:38:7b:28:0e:b6:61:67:4a:e5:
         3e:79:fb:73:82:6e:9e:5b:ae:23:c0:0a:29:68:15:6c:09:81:
         f2:34:35:d5:91:41:63:46:dd:3d:47:d5:a1:ae:5c:45:a8:be:
         91:12:13:d6:c9:f2:f4:27:ae:55:ac:1a:dc:2a:2f:f7:fa:51:
         29:6f:ad:7b:d4:a6:55:43:30:67:ae:86:98:7a:ad:54:14:be:
         9b:08:e5:47:3b:34:cb:21:e7:d7:52:5e:22:12:33:33:5e:66:
         76:4a:a3:a8:40:b5:97:be:99:9b:44:aa:01:0f:d6:2b:fa:c7:
         b6:23:3f:99:fb:35:4f:b7:5e:5b:f6:29:22:68:84:5a:f3:44:
         46:78:64:05:09:04:b9:01:86:7c:ce:c2:eb:9c:f3:9f:19:e7:
         2c:73:fa:60:04:63:47:ce:b9:d3:c7:06:0f:10:55:d5:2c:52:
         12:7a:6e:3f:a9:8a:d0:15:ee:19:14:be:47:03:29:63:de:49:
         58:7d:3e:7b:fa:5f:21:22:c6:d5:03:e9:9c:ea:af:32:75:e4:
         0d:22:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:23 2025 by rpki-client