Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File:                     h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier:          iNW8c+JO45Bljh0CqXMQq4RanWIYoOf4mtO6HHLSrrU=
Subject key identifier:   8D:79:38:9B:E4:A3:94:9C:93:3F:52:24:B3:59:D3:DB:08:3D:40:77
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer:       /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial:       0EA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number:          11F8
Signing time:             Sun 02 Nov 2025 17:41:49 +0000
Manifest this update:     Sun 02 Nov 2025 17:41:48 +0000
Manifest next update:     Sun 09 Nov 2025 17:41:48 +0000
Files and hashes:         1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: pzwPxbfUT/8TOY4ZAZDVd4O1ycznJOi8gRDXayk5VOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3746 (0xea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
        Validity
            Not Before: Nov  2 17:41:48 2025 GMT
            Not After : Nov  9 17:41:48 2025 GMT
        Subject: CN=690797dc-2a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:12:42:9b:ca:c2:2b:36:2c:ed:ce:ca:af:
                    b2:27:ad:8d:4b:7a:5c:8b:95:4a:3f:21:f1:05:7f:
                    a9:ec:55:82:21:bd:d1:05:dc:59:b5:c4:62:ae:07:
                    36:e1:80:ec:43:d6:2d:2f:d8:a6:8b:f1:f9:c1:20:
                    e5:f2:90:e4:5a:64:eb:b7:16:e3:8c:60:56:4b:50:
                    03:29:dc:4e:4f:65:60:17:29:4f:b0:a2:f5:20:76:
                    9c:1e:80:fa:20:c9:e7:e8:95:fc:57:24:83:7a:40:
                    ed:2c:98:e0:53:86:36:90:54:c5:f3:20:ed:2e:9a:
                    38:fc:73:c8:98:3c:94:10:68:c2:69:5b:3d:6e:fd:
                    09:a9:2c:c0:a8:ec:8e:b1:90:93:a6:5c:38:6f:40:
                    16:d1:81:f1:fc:a2:71:5a:4b:88:5e:35:f3:c0:4b:
                    d5:be:41:42:87:07:04:9c:f9:bd:4a:ec:2e:5d:2f:
                    b6:7c:36:e1:a9:b2:00:33:79:17:6b:8f:9d:f7:84:
                    b1:cb:7d:44:87:36:50:77:12:15:f1:f2:4d:4d:30:
                    23:b1:21:0d:31:b2:67:d3:f8:c7:7b:a1:c1:b4:c2:
                    4d:16:44:01:00:ba:b6:39:b3:02:17:2f:7f:c5:07:
                    82:bf:a7:2c:18:49:6f:b4:a3:70:3f:7b:97:6b:d7:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:38:9B:E4:A3:94:9C:93:3F:52:24:B3:59:D3:DB:08:3D:40:77
            X509v3 Authority Key Identifier:
                keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:13:62:52:43:23:49:b1:2e:4c:5c:60:4d:7a:de:71:75:38:
         de:52:75:54:54:db:42:09:2a:ea:c9:cc:b1:99:d2:c6:2c:99:
         8e:e5:e2:1d:cd:99:bb:30:0c:fb:1e:92:62:8e:29:2e:0b:6c:
         6f:62:ab:b4:fd:82:62:70:c2:c4:5e:13:d6:b9:aa:39:e8:fd:
         2a:e5:19:e0:ee:83:a1:a0:4c:4f:77:32:a8:ff:39:fb:46:d5:
         2f:9f:e2:4e:7d:60:4b:dd:78:6a:7d:d9:49:3c:d5:c4:17:79:
         be:5f:1a:25:e6:48:82:84:78:df:dc:c0:7a:86:c7:00:12:46:
         68:fb:4c:d4:64:50:d4:d1:9e:b6:8f:d8:d3:f7:a4:62:99:d6:
         1e:b5:6f:63:5d:54:60:ae:c4:62:1e:38:0f:2d:45:f4:45:76:
         ea:9a:08:9e:92:da:6f:06:37:8c:92:6e:1b:f6:b2:b9:1f:db:
         8c:7b:40:57:7e:98:4f:08:9e:05:8b:f9:bd:e1:23:b4:d0:e1:
         6d:82:b5:98:d3:06:dd:4c:5f:e5:15:39:c0:e9:1e:6d:79:9b:
         39:90:2e:87:df:8f:38:0a:c2:1c:86:ca:9a:55:1d:24:92:34:
         03:42:a0:8d:01:96:48:4c:e5:2a:b5:ca:fa:74:d0:ef:5f:3d:
         09:8b:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:38 2025 by rpki-client