Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          o6jpXanHngLrrx0j6G8zjHrlELO5HvWeLQyKu2oCzrs=
Subject key identifier:   B3:2B:4B:D3:0F:E7:38:1A:00:69:C6:5D:59:AC:27:8D:9F:5C:8C:72
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          0613
Signing time:             Sun 02 Nov 2025 22:49:41 +0000
Manifest this update:     Sun 02 Nov 2025 22:49:40 +0000
Manifest next update:     Sun 09 Nov 2025 22:49:40 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: dG+Ua/QfVv731/mhh5kxvT1X+/aLmvsQpg2r9NLwVS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Nov  2 22:49:40 2025 GMT
            Not After : Nov  9 22:49:40 2025 GMT
        Subject: CN=6907e004-0e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:5a:78:9c:47:a3:2d:4f:ad:cf:6c:7f:a0:
                    eb:b8:0f:e4:70:ad:6e:01:d6:5d:45:80:1c:49:47:
                    f2:c5:8c:bd:48:56:6c:40:b5:33:00:ce:73:51:c8:
                    af:d2:ad:71:80:1a:80:5d:35:22:ea:2c:eb:a7:0b:
                    08:c8:56:fa:f5:fe:c6:98:a9:89:a8:dd:d6:f8:49:
                    54:48:ad:a6:d8:25:59:0f:80:b7:eb:4f:5c:03:a8:
                    cd:dc:cd:c4:52:c9:df:4c:bd:10:2e:1c:ba:92:53:
                    dc:81:f1:fa:3e:7b:c6:b1:24:2c:b3:d6:47:f1:07:
                    2d:05:87:a2:f5:9e:5f:b1:c4:98:5e:ce:39:71:0e:
                    2d:92:8c:d2:db:ed:12:4e:46:f8:6d:20:04:02:e3:
                    92:29:36:57:74:0b:27:24:13:f7:93:69:4d:e3:81:
                    25:3c:12:11:1b:4c:a3:bf:cb:ed:41:df:ab:b7:57:
                    e3:28:70:ee:d8:25:61:57:d3:30:e1:ae:16:68:d0:
                    71:1d:8c:45:40:2a:83:6e:6e:db:d8:c0:a1:70:15:
                    a9:fe:11:02:ab:1b:a8:74:72:f9:39:2a:5f:f1:fd:
                    5a:16:15:be:f8:32:fb:c5:06:7f:d5:72:7b:09:6e:
                    1e:86:11:19:4c:a2:19:cf:ab:40:b0:0e:e1:4e:da:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:4B:D3:0F:E7:38:1A:00:69:C6:5D:59:AC:27:8D:9F:5C:8C:72
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:de:d2:ef:23:8a:29:3b:d4:f5:fc:71:e4:21:d9:7f:29:
         b9:3b:33:96:9b:03:9b:b8:b4:fd:a4:01:34:98:ab:72:3b:22:
         c3:69:c6:5e:87:ae:09:ff:68:92:31:f5:62:04:d9:e2:ee:d4:
         49:18:a5:b8:ae:8b:41:82:b0:2b:93:38:83:62:6c:ed:f8:92:
         56:33:47:bc:a2:af:04:d4:d5:26:d1:e8:cc:14:2b:d5:64:4b:
         92:ec:49:2c:bc:b3:1b:bc:0d:d5:9c:90:9e:66:af:d9:c9:58:
         cd:db:6d:4d:27:88:15:8c:11:4d:28:0d:50:d5:d1:ce:f4:b9:
         40:af:2a:a5:96:9f:fa:72:33:f0:f4:be:52:7d:4f:ff:19:0a:
         0e:ea:eb:83:a7:0d:97:1b:11:72:11:14:e9:d1:03:58:30:80:
         fa:31:bc:7a:c8:5f:55:e6:6d:8b:cd:74:cd:53:2c:e9:32:ad:
         89:24:bd:ec:0c:4e:1a:3d:de:05:9f:71:6b:2d:e6:b5:27:76:
         32:e5:8f:85:04:26:be:a4:35:62:97:ee:cb:75:40:a8:be:d6:
         04:24:71:b2:b6:f3:af:21:1c:b8:bd:c2:0b:1a:9d:a1:3f:de:
         11:41:e4:45:4b:58:e2:c5:a4:e8:48:af:80:66:f6:58:16:53:
         bf:05:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:15:06 2025 by rpki-client