Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
File:                     j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json)
Hash identifier:          zF53eHkJNxpI4PcoPvcCdsNgLpeDiak7FyxUUAcz7lk=
Subject key identifier:   D3:44:25:62:98:1B:8A:0E:35:98:6F:48:0E:DD:24:26:E2:2A:1C:A9
Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41
Certificate issuer:       /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
Manifest number:          58
Signing time:             Wed 05 Nov 2025 07:21:41 +0000
Manifest this update:     Wed 05 Nov 2025 07:21:40 +0000
Manifest next update:     Wed 12 Nov 2025 07:21:40 +0000
Files and hashes:         1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: pUjmEsZVvzy0YtjT7NEi1+N/IpZdr3MHHVIHJpWthoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl
                          rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
        Validity
            Not Before: Nov  5 07:21:40 2025 GMT
            Not After : Nov 12 07:21:40 2025 GMT
        Subject: CN=690afb04-e129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:61:5f:7e:44:62:64:4e:01:46:f6:01:7c:
                    1b:54:2d:85:8e:c9:78:c1:71:d5:8e:b2:62:4b:5a:
                    d1:b4:ea:b1:57:c5:0f:51:b0:9d:7e:fa:de:31:2c:
                    b7:e5:d1:ea:f7:79:ed:8b:a1:c1:a7:49:6a:f6:aa:
                    72:65:6b:93:15:3d:6f:26:c4:7b:a3:99:f7:3d:b6:
                    cd:06:fd:39:ce:02:79:4f:0d:a5:ea:5b:ee:c7:63:
                    2e:e1:33:91:5a:a4:5a:b5:01:90:74:7e:6c:6e:3d:
                    cf:0b:0a:c7:c3:e0:00:2c:1d:7e:73:e3:04:ff:3b:
                    91:b4:76:c6:58:cf:fa:c5:b8:db:3f:ce:52:f8:6b:
                    97:16:7e:6a:70:02:b4:fb:3f:c4:3e:46:d1:92:ec:
                    81:26:9c:c1:4a:05:1c:13:82:50:9d:74:50:b4:7d:
                    16:b6:49:f2:64:a0:57:9c:08:e8:29:60:51:33:51:
                    9f:6a:25:fc:b5:1a:bd:c6:42:96:08:41:71:88:5f:
                    25:e1:b5:73:3e:af:8f:7d:cb:6e:de:41:42:a3:b6:
                    74:ef:9d:80:5f:4c:32:31:ce:b6:7f:9c:ea:3d:1f:
                    72:4b:ac:58:5e:eb:13:db:5f:e2:62:af:75:3c:99:
                    23:d7:2b:68:8e:b9:0e:89:9b:07:e2:06:3a:61:1b:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:25:62:98:1B:8A:0E:35:98:6F:48:0E:DD:24:26:E2:2A:1C:A9
            X509v3 Authority Key Identifier:
                keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:79:0d:cc:bb:a8:37:25:97:82:2c:e7:3e:ca:68:28:94:e9:
         f6:34:7f:31:5a:62:c2:1d:44:0e:30:15:12:55:ce:3f:fd:48:
         a7:e1:f8:c0:d6:98:ce:72:28:9b:fa:0e:9d:ab:3d:fb:4c:26:
         16:bb:d4:cb:d9:8b:92:f7:f7:40:2b:8e:f1:b7:5b:90:be:d0:
         e1:57:1c:b1:73:b2:1f:c6:5e:4c:f6:f7:d5:11:d6:b3:6b:63:
         d6:41:97:e0:29:2c:eb:e1:8d:0b:8b:1e:4f:8d:1a:24:c6:99:
         61:a5:9a:8f:1c:7e:c5:6e:2f:93:4b:94:10:0e:af:21:d3:95:
         15:8e:98:37:d5:e8:9d:b9:34:63:64:5f:ae:f1:c2:05:9d:e7:
         0b:2c:81:cb:12:ba:bf:68:89:5b:ee:03:6f:3c:02:2b:f6:80:
         12:49:2e:b8:ef:bc:be:58:01:18:9e:52:b4:00:34:0e:d0:c8:
         cc:c1:93:a1:48:81:d8:ad:61:f7:d6:8c:e7:16:9c:64:71:61:
         6c:f7:6c:25:ee:fa:a6:36:d8:ff:32:c4:59:29:07:26:49:66:
         b4:01:d7:b7:93:c5:e9:a5:e8:2d:05:6e:51:c7:15:08:06:75:
         71:59:b5:4c:1d:6f:b1:fa:7e:59:ac:c2:02:69:b8:fb:ca:7e:
         62:38:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:44 2025 by rpki-client