Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          CXOeKvMzIuIbV7wlG4k2bG//S/9tAsxWVig7molChA8=
Subject key identifier:   5E:40:30:22:90:67:1B:08:CB:07:41:6C:5C:80:54:76:68:84:66:52
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       34D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          34D5
Signing time:             Tue 04 Nov 2025 14:33:48 +0000
Manifest this update:     Tue 04 Nov 2025 14:33:48 +0000
Manifest next update:     Tue 11 Nov 2025 14:33:48 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: Cy6Rvx7eaPdLsaPDTkAtPbq/b9N6yf+IXQVk7PN4fkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13525 (0x34d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Nov  4 14:33:48 2025 GMT
            Not After : Nov 11 14:33:48 2025 GMT
        Subject: CN=690a0ecc-eeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:b6:20:84:64:50:04:88:40:2f:20:90:9d:
                    30:a7:d1:dc:7b:0e:21:27:75:44:06:cd:f3:ab:df:
                    e3:de:9c:1d:a2:b1:d2:57:c3:79:8a:2b:cb:00:f5:
                    27:64:3d:4a:c9:16:9a:08:4b:e7:9f:01:71:fe:8d:
                    91:68:3f:50:8d:46:cc:21:01:70:f3:38:4f:55:87:
                    c3:ba:24:b3:c5:3e:91:b4:00:85:b3:e3:1d:24:28:
                    fd:61:15:85:ad:5e:44:c0:82:fe:1c:1c:29:d7:b5:
                    49:5e:19:e8:b6:54:04:26:a0:e6:5c:95:be:2e:17:
                    5c:2f:2f:de:28:1a:8d:bf:8f:a0:20:85:21:55:fa:
                    a2:bf:f5:9f:cd:04:18:bb:57:10:30:ae:f0:ab:09:
                    d9:09:2f:e5:53:cd:6f:f6:33:35:86:54:3c:a6:65:
                    fe:45:b2:eb:7c:c9:b1:12:87:6c:45:cc:26:a1:66:
                    32:9f:15:97:37:a6:c2:7c:d6:91:28:79:f0:fc:de:
                    b2:cb:fc:d6:14:43:48:f3:20:29:70:51:d4:55:f8:
                    95:68:10:a5:71:cb:a7:de:ad:07:72:e5:62:bf:d0:
                    3f:9f:14:80:60:06:e3:b9:ce:2a:56:96:21:13:2d:
                    ed:81:7d:35:d8:fe:bb:81:1c:29:66:6a:92:4e:a1:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:30:22:90:67:1B:08:CB:07:41:6C:5C:80:54:76:68:84:66:52
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:6a:38:6f:c9:fd:1e:ef:0e:99:1d:e9:21:53:ff:74:73:
         85:68:0f:15:a1:35:ac:94:b8:35:65:35:49:f3:43:6a:bd:64:
         d6:0b:0a:57:cc:6a:06:68:b8:9d:2b:2a:5d:f3:9f:07:92:01:
         f7:83:64:6e:96:bd:c1:bd:21:d4:67:09:d1:b2:db:65:53:69:
         80:c7:f2:4f:51:1b:53:c3:b6:84:67:fa:fb:e6:d5:da:93:10:
         a2:30:24:41:c5:79:fc:c5:f4:2e:8b:72:4a:89:09:24:c3:4f:
         38:c1:de:41:19:0c:09:5b:f3:e1:a0:60:4f:cb:2e:dc:cd:dd:
         9c:3e:be:7f:d8:13:53:88:e5:91:2f:fa:a4:1d:5a:5d:56:f7:
         f9:64:1a:22:7b:4f:a5:5d:a7:c8:d8:25:de:7d:2a:f7:f0:e1:
         d5:7f:6e:3b:44:6f:b1:82:1e:ce:15:da:38:80:22:01:1b:4e:
         8d:8a:da:e1:b4:66:e8:92:51:58:4a:1c:cf:34:bb:d0:1c:41:
         d2:ac:68:10:16:36:d0:fb:52:5e:3b:50:2e:81:9c:2b:27:0d:
         40:f7:8c:2d:e7:61:ef:e0:64:82:46:a2:1b:93:a3:2e:45:a5:
         6a:ee:15:28:92:03:88:c2:ed:bf:8d:42:bf:32:80:4f:e4:4f:
         f7:d7:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:39 2025 by rpki-client