Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          g0Tr4g4I053/MyY/1ocL+mMnj65ELBigEvVJMRke7IU=
Subject key identifier:   12:9D:5A:92:D1:F6:33:CE:74:F8:B8:06:27:B5:59:AB:10:20:87:63
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       07FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          07FB
Signing time:             Tue 04 Nov 2025 21:07:10 +0000
Manifest this update:     Tue 04 Nov 2025 21:07:09 +0000
Manifest next update:     Tue 11 Nov 2025 21:07:09 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: kkm2qFS03zuV75YNukyA/xNoS/JGvfEmW2QDEYSgT+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Nov  4 21:07:09 2025 GMT
            Not After : Nov 11 21:07:09 2025 GMT
        Subject: CN=690a6afe-c881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:42:85:e0:bf:7d:47:c9:5a:b3:8c:a0:21:
                    a6:35:18:88:9e:30:8c:d2:39:ad:7c:25:44:90:2d:
                    6d:ee:ae:c3:e2:10:d4:25:e6:fa:a7:b4:32:2a:a9:
                    93:46:c7:27:cd:d6:0c:e7:d5:ea:e3:ca:9b:82:16:
                    47:64:09:c6:12:95:63:f3:0c:cd:05:c1:87:2f:a5:
                    61:af:41:21:02:b9:78:f6:d0:d5:c4:06:09:11:7c:
                    19:7a:8f:a3:ab:1d:79:f6:f9:f6:1f:db:d5:23:5d:
                    b2:3e:c7:c3:3c:73:a7:1c:05:2b:9a:89:f6:f7:58:
                    a6:ce:e3:65:20:49:86:13:81:c6:82:bc:a1:56:10:
                    58:58:49:17:d0:54:5b:c6:b3:cc:a4:16:c2:c2:08:
                    21:5e:b3:86:81:83:29:d8:6e:ce:61:ab:84:85:6a:
                    cd:de:20:a2:6b:e4:e7:0d:f8:e1:1d:93:76:2c:07:
                    09:f0:93:c2:72:a7:e8:57:2e:4d:06:ce:b3:10:a8:
                    8e:49:58:19:9f:4b:9b:ce:0b:67:07:fb:cb:7e:7f:
                    cb:d0:47:c7:a8:e7:c6:4e:8e:e2:6b:b6:61:f8:b0:
                    23:83:74:fa:2a:df:77:dd:26:cf:df:5e:e1:fe:5a:
                    8b:6d:af:7c:52:8e:09:64:ac:cb:d3:c5:f5:b5:5b:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9D:5A:92:D1:F6:33:CE:74:F8:B8:06:27:B5:59:AB:10:20:87:63
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:16:0a:83:9f:de:cd:8d:14:7f:2c:de:54:72:6d:64:b7:cd:
         07:f5:5f:75:18:19:69:da:4d:83:59:40:e7:83:0d:5c:0d:83:
         f2:dc:c7:a7:65:11:30:04:c7:4d:73:89:1d:c9:3f:05:c0:62:
         1b:74:54:18:ff:a5:eb:2c:b5:10:f8:f6:9d:00:04:da:7d:69:
         23:e8:c9:a2:5a:6d:02:c4:95:f3:e0:9a:43:61:80:c4:84:13:
         9a:5a:fc:07:fb:80:5c:ef:5f:85:8b:d9:57:c4:0f:4c:f5:54:
         74:73:fc:56:c0:01:24:f8:b5:21:20:c9:10:05:d4:89:b0:ab:
         7e:df:71:be:20:54:bc:54:de:a3:05:de:19:d9:52:aa:02:35:
         2e:b0:d0:88:6e:50:81:1a:1b:1a:8c:ad:13:50:c4:41:c4:57:
         9b:d4:a3:45:25:36:68:04:d9:f9:5b:d3:fe:60:0f:51:8f:6c:
         b9:a4:7a:f9:cf:80:5e:c6:a4:f2:0f:be:03:94:86:e2:6a:b0:
         86:2c:5e:3d:83:8e:de:e2:72:0a:e7:8f:c7:28:b7:93:94:da:
         2e:e7:06:0c:d0:ac:53:f4:56:26:ee:b6:09:25:a1:79:1c:5a:
         4e:86:0c:da:bb:be:a3:8f:a1:4c:92:ba:b1:f8:41:25:74:ab:
         ff:ff:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:22 2025 by rpki-client