Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          ni+lkh9IhX85e4OF4ikWNyJQ0MC3gZ+iWvdiscOSqhc=
Subject key identifier:   9B:A9:C3:AC:CC:C8:16:38:01:FB:2C:B5:DE:94:AF:53:A6:4E:41:DD
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       34D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          34D7
Signing time:             Tue 04 Nov 2025 14:58:52 +0000
Manifest this update:     Tue 04 Nov 2025 14:58:52 +0000
Manifest next update:     Tue 11 Nov 2025 14:58:52 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: LfLIy3+zuEVoJnA8VSTY3nggQTufa2YeoiF3KCGqJlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13527 (0x34d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: Nov  4 14:58:52 2025 GMT
            Not After : Nov 11 14:58:52 2025 GMT
        Subject: CN=690a14ac-f97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:a2:79:b4:eb:12:58:fc:7e:84:b7:b5:aa:
                    4c:48:92:6f:77:71:0a:e7:1e:11:97:13:f8:d4:c1:
                    84:83:c2:6a:0d:3f:40:de:5f:5b:21:81:df:4b:19:
                    55:77:88:09:51:bc:f9:ca:43:af:e5:9e:de:c5:13:
                    76:1b:70:6b:e3:f4:5f:16:30:bf:e2:93:c5:2a:71:
                    97:0b:8d:50:56:6d:aa:b1:c5:45:a5:13:73:f0:2e:
                    b0:8d:14:35:55:80:ff:e4:9a:5b:60:fa:85:0f:16:
                    c9:30:66:c8:49:ec:9f:8a:4a:99:88:f5:e6:0b:b7:
                    f6:7a:82:a6:75:ef:c1:b8:50:7f:7c:ef:84:b5:6c:
                    10:52:79:91:52:a1:8f:ed:20:60:44:a2:f4:bd:41:
                    e0:d4:63:c5:f1:7f:d1:e4:b8:7b:c2:a7:41:01:88:
                    2a:4c:91:13:b5:f3:8b:15:2d:dd:24:4d:93:22:d0:
                    6c:94:1a:6d:a7:82:62:d6:5b:ad:ba:d8:64:88:65:
                    36:af:e8:31:c2:67:26:d4:af:9a:fb:80:7c:07:46:
                    38:80:1d:b3:fc:75:7f:7d:d9:a9:51:db:92:62:6d:
                    b9:58:1a:3b:d9:10:9b:41:6e:bc:95:f9:62:22:5f:
                    c1:6f:d0:1b:f6:2c:87:f7:81:51:dd:f6:10:94:06:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:C3:AC:CC:C8:16:38:01:FB:2C:B5:DE:94:AF:53:A6:4E:41:DD
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:43:64:33:48:71:40:a3:51:57:43:72:0a:18:da:8e:44:
         2a:c2:c7:87:12:e1:99:b7:ce:6c:a2:b6:5c:3c:50:d4:35:64:
         de:8f:27:87:e4:3b:ce:8b:7b:a0:a2:fc:e3:d5:6d:1e:b2:f9:
         97:36:d3:3d:af:18:7c:84:c1:0e:7d:ea:ce:5e:cb:c4:9e:ec:
         f3:07:9c:db:89:cf:78:8a:98:4b:69:71:10:44:de:b1:c7:bd:
         a3:ff:9e:43:16:d8:5a:6f:ff:56:6e:eb:55:f0:f7:b4:b1:af:
         fd:8d:bf:c7:93:3a:89:c1:14:21:bb:b6:87:38:d9:45:44:e3:
         8f:8f:ad:aa:2d:d8:6e:74:59:f0:14:23:2b:e5:1b:9f:c9:62:
         d1:a1:57:eb:82:b6:b0:57:c0:c9:2b:c3:65:3d:84:a3:f1:34:
         20:95:a7:24:52:15:a6:fd:9a:fc:44:96:aa:9c:c7:c2:a4:15:
         86:2a:a6:55:1a:c8:41:f3:0a:1d:0a:7c:12:03:de:2e:dc:3e:
         b3:a1:7d:ba:b3:57:1d:70:90:db:03:aa:ea:78:67:4b:37:84:
         ff:dd:60:c9:eb:06:3e:e0:49:62:ca:82:0a:56:a2:86:77:e5:
         56:68:fe:f8:e2:21:57:82:ae:0b:1b:50:b6:bb:6e:64:26:7a:
         80:97:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:09:04 2025 by rpki-client