Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          bViZzjk5aekenf9ZLMd0wS1A6EkQk35YVhQ4xRvTrgk=
Subject key identifier:   17:F7:28:9E:24:C8:67:7E:73:46:C7:27:9D:E1:E4:3D:C4:CB:BF:99
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          B9
Signing time:             Mon 03 Nov 2025 06:00:46 +0000
Manifest this update:     Mon 03 Nov 2025 06:00:46 +0000
Manifest next update:     Mon 10 Nov 2025 06:00:46 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: JO0eTJLyz3HwUztj7Qv7wyF8RrygClTKlZSoyOFYOn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Nov  3 06:00:46 2025 GMT
            Not After : Nov 10 06:00:46 2025 GMT
        Subject: CN=6908450e-c1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:e8:21:e7:11:04:73:f7:04:ba:83:3f:1c:
                    4f:40:8f:00:88:7f:5a:87:bc:44:d2:22:c4:41:f8:
                    ea:59:34:74:c5:3f:5b:84:1a:4f:af:97:dd:fe:5e:
                    be:85:8f:81:e3:ec:c6:79:8e:3e:03:aa:65:ed:79:
                    52:2a:dd:0c:56:89:60:e4:6a:a3:d9:b1:c9:3d:61:
                    b5:d9:a8:7a:85:30:98:32:79:a6:f3:1d:c7:0b:39:
                    16:49:ae:ad:ae:18:43:69:60:0a:20:97:3a:3f:5f:
                    89:f5:dc:c5:e1:d8:2c:0b:8c:d7:1c:c6:1f:6a:a7:
                    09:87:64:64:6c:71:d3:92:cd:43:1e:f0:e9:3d:4a:
                    b2:66:1b:94:a9:52:c8:a7:8a:be:f4:b1:ad:f0:b2:
                    b1:2f:bc:da:2b:ed:51:86:fe:96:0c:ff:df:5f:90:
                    76:91:3d:ce:02:5d:14:d4:d3:12:43:38:db:a6:b3:
                    1a:6d:1c:5e:31:ec:d3:d9:ab:21:1a:5c:e5:d7:08:
                    0e:bf:b4:b5:65:8e:f9:f6:f7:11:55:f5:57:31:da:
                    f7:78:ad:7e:8c:ec:e3:50:1e:19:35:1b:9c:12:9e:
                    df:00:be:a4:18:df:9e:2c:3f:43:16:b0:f7:6a:35:
                    82:20:33:30:fb:98:01:2e:c2:d8:0f:51:52:7e:a4:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F7:28:9E:24:C8:67:7E:73:46:C7:27:9D:E1:E4:3D:C4:CB:BF:99
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:eb:3d:2a:3c:a6:36:13:b1:40:7f:60:33:56:8e:b2:89:
         78:bf:40:a1:f8:fc:cc:f2:a1:6c:28:da:11:4e:9a:33:37:27:
         02:c6:c5:86:0f:5e:f2:da:d6:76:8c:03:5c:89:72:5c:65:09:
         3f:2d:a5:52:85:37:3d:4f:2c:00:96:68:8d:57:3e:6e:10:c4:
         3a:09:db:b0:b1:a5:46:63:95:ff:38:4b:79:cf:45:8b:e3:fd:
         7b:89:e9:7e:94:8c:e7:45:75:23:0b:57:e6:eb:bb:43:55:a9:
         52:21:fa:0a:5b:81:84:96:48:72:40:ed:32:23:07:b9:41:9e:
         8f:32:75:eb:bc:33:5c:be:53:12:78:f8:aa:33:dc:13:38:d5:
         1a:0b:37:33:40:bb:25:5c:17:0f:91:8e:cb:98:33:8c:c6:3a:
         fe:65:5e:2e:47:65:45:ea:a9:9c:30:55:a5:18:4e:6b:5c:35:
         b1:4a:b0:d5:e1:a1:af:91:e0:43:9d:b0:2d:55:a5:94:73:d2:
         3c:18:a9:5e:e9:84:70:5f:06:61:1f:9b:11:1b:4b:b6:b6:57:
         de:73:ca:68:3a:2b:c3:a4:35:82:61:64:e6:75:63:64:0b:f4:
         68:47:60:6f:9c:da:91:3b:a8:a5:c8:2f:11:77:bc:a0:4a:17:
         23:86:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:44:31 2025 by rpki-client