Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
File:                     6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft (raw, json)
Hash identifier:          OOvG9v502MlT15Fl78vxjx4DonyxfUkNOH/9yUvvIXI=
Subject key identifier:   33:77:D2:BD:24:D4:F1:F8:24:D9:0B:3C:18:BD:AD:57:C6:3F:06:90
Authority key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Certificate issuer:       /CN=A91452AC/serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
Manifest number:          07C1
Signing time:             Tue 04 Nov 2025 20:26:36 +0000
Manifest this update:     Tue 04 Nov 2025 20:26:35 +0000
Manifest next update:     Tue 11 Nov 2025 20:26:35 +0000
Files and hashes:         1: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl (hash: C+opcgYMycSl1VVXuaTwIUg72USlwvmSh9U7LSZtjwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
        Validity
            Not Before: Nov  4 20:26:35 2025 GMT
            Not After : Nov 11 20:26:35 2025 GMT
        Subject: CN=690a617c-8b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:24:44:3d:0c:fb:07:26:53:d2:86:1a:f3:d7:
                    54:f2:d6:72:72:ce:0c:5e:9c:d9:a9:93:f7:fa:83:
                    43:ec:d2:d1:6d:ff:e7:8c:92:b8:4b:db:7e:46:e4:
                    e1:5a:60:61:9c:f1:85:81:47:bd:8d:d3:d3:94:91:
                    a6:16:b0:68:5b:67:5d:13:f0:66:1f:9d:9c:58:6c:
                    be:96:8d:04:b3:9b:e1:54:5e:67:7b:54:40:59:ed:
                    13:93:61:ec:95:cb:f3:34:9f:2d:de:c7:c6:2b:95:
                    2b:f4:ce:76:b9:d1:7c:0f:05:7d:ac:f0:46:90:1d:
                    5a:e7:38:76:58:29:d4:6f:99:c2:5f:fc:50:1c:f3:
                    06:a6:f1:91:e4:cb:0d:5a:b4:03:77:0f:75:aa:6b:
                    35:1b:bb:dd:78:7a:21:ec:a2:35:4e:ea:d9:9f:6a:
                    45:65:d4:0f:6f:7a:92:d0:17:d0:f5:bc:12:55:2a:
                    0f:73:b8:52:d0:4c:20:62:ea:2e:b6:57:78:07:df:
                    6a:a0:05:15:d4:0a:cc:e8:0c:d2:50:e9:60:8d:86:
                    48:79:72:32:80:31:68:3e:02:37:e4:67:1a:00:ce:
                    6d:cc:e4:00:34:6f:1c:3b:16:7e:3e:43:8c:c0:52:
                    66:9f:62:2f:b6:60:46:53:86:17:e8:0d:cc:91:d2:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:D2:BD:24:D4:F1:F8:24:D9:0B:3C:18:BD:AD:57:C6:3F:06:90
            X509v3 Authority Key Identifier:
                keyid:EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:62:2f:c5:35:5c:57:9e:2b:43:96:84:56:03:c8:35:c0:e4:
         e4:36:d8:91:b7:38:ae:e9:33:31:9c:ae:1b:75:e6:bc:13:66:
         31:31:5d:cd:49:a3:e0:23:57:22:b2:4f:c4:ae:2f:fe:df:76:
         be:7c:64:85:b4:16:91:0a:a2:16:09:6f:ff:9c:e3:13:46:7b:
         0a:9f:84:54:70:d9:e0:5f:1a:f6:76:21:3b:17:bf:d8:d4:6a:
         5a:2b:c0:5d:2e:6c:e5:81:e7:90:73:46:9b:2f:a9:7e:80:20:
         8a:e6:87:49:a6:02:17:62:06:c4:d7:49:c2:85:75:35:21:f3:
         85:2d:9b:22:9c:a5:06:50:ee:3e:f9:30:bb:ef:07:de:de:89:
         b4:a8:6e:46:f8:f3:fe:ff:86:26:f8:15:93:56:35:b0:c2:10:
         2b:22:78:f8:c4:85:38:93:22:54:aa:de:f2:ec:8c:dc:95:a5:
         b9:6e:a2:8c:c8:4e:42:79:0b:c8:ef:30:f3:ab:34:78:ed:02:
         60:1b:da:8b:8a:e1:b4:21:7a:23:74:d6:a7:ec:da:ff:e3:46:
         84:c1:81:66:31:51:1c:d2:c3:fc:64:96:7b:91:ea:88:dd:9c:
         b1:b9:dd:a2:2d:b8:e9:87:ec:ee:55:c1:5e:f7:c7:b8:01:93:
         62:42:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:26:54 2025 by rpki-client