Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          j8VRzBju7X/O5varDmp00JpLwtc8tsiko3hn+wmHuFc=
Subject key identifier:   D2:CB:51:A1:55:ED:85:65:C1:36:DD:5B:BA:C9:02:CB:68:4C:5B:33
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0CE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          14B6
Signing time:             Tue 04 Nov 2025 18:12:52 +0000
Manifest this update:     Tue 04 Nov 2025 18:12:51 +0000
Manifest next update:     Tue 11 Nov 2025 18:12:51 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: UL6nNHVSEjs6adEQ0okSgSrSWRxpJJa7G5bz1+SI29Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3298 (0xce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Nov  4 18:12:51 2025 GMT
            Not After : Nov 11 18:12:51 2025 GMT
        Subject: CN=690a4223-8899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:1c:02:86:28:37:52:9b:f5:55:2c:f7:b4:
                    e4:1e:be:8b:4c:0d:b3:b8:4e:34:2f:76:8a:00:77:
                    58:f1:ee:d6:2b:00:c9:49:82:b9:44:8f:c5:38:e5:
                    ab:5e:18:c2:e6:11:d4:24:57:f4:4b:7c:34:72:94:
                    41:dc:4a:cf:4b:d7:3e:64:52:55:3a:3d:76:7c:f9:
                    17:a2:db:5d:d4:a8:6e:d6:92:12:ff:97:9b:4f:16:
                    04:c7:c1:19:10:e9:bb:86:eb:3f:72:82:7d:2b:82:
                    8a:98:b1:22:0b:d2:e5:cc:35:85:7d:58:9f:2e:83:
                    57:57:a3:50:c2:1e:b6:0d:19:db:90:b3:7f:24:c9:
                    3a:46:0b:5d:24:78:7b:82:6b:27:20:12:19:52:a5:
                    5d:df:c9:52:c7:4b:19:7b:46:ab:76:a4:42:41:af:
                    89:4b:bb:b8:c1:ff:98:d8:f3:a1:f1:9a:10:60:4f:
                    85:70:a3:ca:d7:4e:cb:7e:a8:64:ca:38:f7:c9:ec:
                    0d:67:44:96:f6:3c:c4:f0:39:6d:de:3e:0c:f1:79:
                    83:a8:61:e0:d5:2a:91:b0:2a:20:bd:9a:5a:db:06:
                    f9:27:2e:5d:a3:ff:0a:db:66:4c:f0:06:4f:ff:e4:
                    a3:62:6e:a5:4b:98:d2:ca:bd:ee:29:50:68:ce:32:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:51:A1:55:ED:85:65:C1:36:DD:5B:BA:C9:02:CB:68:4C:5B:33
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ed:f3:af:d3:71:bd:0c:99:36:2a:a9:3e:ea:36:42:fa:0c:
         7a:6b:ca:05:03:fd:fb:d2:67:54:89:91:5b:72:3b:a4:98:51:
         7b:8c:d2:12:0b:f0:40:03:93:00:d3:06:ec:19:97:4b:b4:8a:
         3b:01:8f:5f:a0:ad:34:58:9b:1d:ab:05:79:e3:e6:ea:f0:b3:
         ef:72:53:a7:9c:b6:34:7a:55:e9:41:02:a2:42:55:16:92:8f:
         45:46:a8:cc:bd:a7:12:1d:ed:7c:07:23:2a:2e:dd:d5:be:ec:
         8b:cd:a3:17:52:a2:5c:f3:a4:65:f1:18:73:0d:8e:80:6f:c3:
         90:8b:87:1c:a8:20:c6:04:f1:63:f7:ad:ef:1a:de:27:33:4d:
         35:16:9b:ec:13:ab:91:f5:b1:78:cb:84:6b:bc:e9:98:3f:23:
         72:df:d2:30:b3:b1:83:ec:74:0c:48:e3:a9:71:f3:e0:b5:f1:
         1a:b7:07:79:33:06:46:17:20:d5:1a:2f:2e:08:38:4a:76:72:
         3c:e5:c2:d1:44:dc:8b:7e:ad:cb:e7:fb:6f:f5:35:2c:08:40:
         3e:34:05:c7:f6:e2:0b:31:84:54:26:b8:b6:40:80:ba:84:c9:
         e2:6e:e4:93:e8:31:eb:79:10:2c:49:41:42:ee:ff:aa:5a:16:
         b6:45:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:28 2025 by rpki-client