Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
File:                     UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json)
Hash identifier:          CSU928qqKFwJSAOJtQZazyT0lvKPwSW3H0HtzNDjbj4=
Subject key identifier:   29:24:06:86:F6:D4:6E:22:25:5F:B4:9F:EF:E2:6C:FA:F7:C7:18:A4
Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
Certificate issuer:       /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Certificate serial:       0BF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
Manifest number:          0BF9
Signing time:             Sun 02 Nov 2025 18:47:50 +0000
Manifest this update:     Sun 02 Nov 2025 18:47:49 +0000
Manifest next update:     Sun 09 Nov 2025 18:47:49 +0000
Files and hashes:         1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: TBnzlMYwmQWBnBMyxLPkbLA/JpfhhJCRs7wjSQIxWUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
                          rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3065 (0xbf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
        Validity
            Not Before: Nov  2 18:47:49 2025 GMT
            Not After : Nov  9 18:47:49 2025 GMT
        Subject: CN=6907a756-f526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:2b:36:c6:b0:1e:ce:73:76:b9:33:e4:09:
                    06:5d:76:2c:4f:22:6c:15:c8:c2:44:b3:b2:e8:3d:
                    6c:77:93:ed:47:35:3d:b0:b0:f9:c5:10:ed:23:92:
                    d7:ec:4d:db:d8:fa:58:c7:a5:7a:62:2d:01:39:ac:
                    a5:32:ab:0e:01:03:e8:29:9c:07:f2:21:04:3e:7f:
                    f2:fc:a9:80:b0:b4:be:1b:38:b2:a5:d4:00:7b:54:
                    60:e6:bb:50:8a:bd:74:16:83:ed:21:1d:06:d5:00:
                    45:d6:4f:92:57:1b:93:ef:94:6c:9a:da:7c:c5:b7:
                    61:2a:02:d7:f0:47:ea:56:fa:cc:f6:ad:bc:99:de:
                    91:7d:40:ce:60:46:5e:fe:1f:05:52:b0:28:b7:da:
                    d6:1a:9f:51:a0:d8:de:d2:90:52:fc:3b:85:56:ec:
                    d5:c0:d3:83:b6:eb:51:fb:fc:c3:3c:7e:1b:45:93:
                    91:bc:c1:20:ec:0b:c6:54:67:17:08:ec:7e:b1:2a:
                    79:5f:94:c7:48:98:45:0a:a9:e1:fd:9e:ff:e3:10:
                    a4:3a:ca:96:48:87:42:93:91:9f:68:59:37:91:02:
                    47:93:02:02:6e:59:7e:16:36:45:eb:d2:d8:a1:1e:
                    bb:65:fb:7b:16:1f:87:4e:e0:53:11:a3:04:06:e4:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:06:86:F6:D4:6E:22:25:5F:B4:9F:EF:E2:6C:FA:F7:C7:18:A4
            X509v3 Authority Key Identifier:
                keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:c5:b7:4f:85:8a:2a:7a:99:6e:cc:0c:99:2c:38:82:70:
         f5:7a:e1:4c:6b:47:13:57:7c:f9:b4:d5:0a:8b:a3:17:d3:ef:
         71:eb:6c:83:9c:41:5f:d4:eb:20:04:0f:fa:32:f3:9c:01:36:
         28:17:4e:e3:67:12:ba:12:ab:75:33:cd:09:a6:e6:6b:60:4e:
         dd:61:5d:ec:af:ba:d0:5a:d7:07:83:11:30:78:a2:98:c2:99:
         f1:eb:17:a6:36:96:1e:8a:cd:d5:fb:b8:88:97:27:5f:41:90:
         15:08:37:1c:5b:fc:0d:eb:44:75:3f:05:fe:1c:1f:9e:80:44:
         46:7f:54:32:a1:05:25:2a:80:55:e1:19:f6:f7:29:22:7b:28:
         2d:04:c0:d2:e0:72:5e:90:89:20:a1:83:9f:c3:16:b8:e0:da:
         4f:cb:64:e7:73:27:fd:8f:9c:47:19:fb:d8:76:4e:47:eb:5e:
         4a:b7:e7:5e:df:20:61:3b:70:41:f3:33:56:e0:5e:d4:af:a2:
         43:95:db:a6:90:83:87:d8:43:85:a3:95:14:35:0d:41:e1:bc:
         d3:2a:46:c0:35:87:0d:18:0b:32:a1:f8:5b:fc:74:c3:88:4e:
         95:2f:ff:41:07:7c:18:85:ff:30:00:e3:08:d1:f7:a8:02:38:
         ce:6e:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:19:00 2025 by rpki-client