Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
File:                     pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json)
Hash identifier:          HkFFMQ119oLk5Xrz2niFZsBC1weH99pjPURlgtL7Qks=
Subject key identifier:   E9:B2:F4:09:08:96:A2:E3:54:24:DF:CA:33:C0:F4:74:51:90:CD:F8
Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
Certificate issuer:       /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
Manifest number:          46
Signing time:             Wed 05 Nov 2025 07:33:48 +0000
Manifest this update:     Wed 05 Nov 2025 07:33:47 +0000
Manifest next update:     Wed 12 Nov 2025 07:33:47 +0000
Files and hashes:         1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: Quo7fCLvg/0GaMpPd//oU7JPv70rg91glwWIy1cgl1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
        Validity
            Not Before: Nov  5 07:33:47 2025 GMT
            Not After : Nov 12 07:33:47 2025 GMT
        Subject: CN=690afddb-f513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:e4:4d:b2:f7:d2:87:2d:4c:64:b6:20:c7:
                    6a:1a:6e:2f:e2:40:45:a6:31:bc:eb:df:4e:5f:8e:
                    ca:f7:78:7d:1f:ab:93:ed:be:a9:16:e1:4d:27:b5:
                    b6:23:ef:59:94:19:63:91:41:93:0a:b2:1f:49:24:
                    ce:cf:34:44:82:81:e7:b7:7e:d1:8b:a8:30:d5:49:
                    00:25:95:65:81:c1:20:20:62:75:3f:cf:c4:53:ef:
                    e1:49:d9:ce:96:6a:a3:49:45:9c:e5:c4:b8:61:3a:
                    fa:2c:4c:eb:14:b8:2a:5c:36:79:28:38:3b:8e:1a:
                    66:d5:a8:d6:2a:de:9c:16:50:87:81:28:04:8c:6e:
                    3b:49:02:d6:64:bc:6e:c7:c8:0f:a2:9b:f4:18:36:
                    13:0e:a3:97:a9:af:0f:96:74:36:ad:73:a2:d4:30:
                    6a:bb:64:1c:18:a9:38:9c:60:6f:84:f5:34:a3:0d:
                    39:b5:4e:d0:0b:a1:c2:de:f5:6f:c5:3f:64:92:e1:
                    79:df:9c:1f:3e:61:eb:9e:63:ea:13:a9:b7:55:dd:
                    4a:ec:ee:46:da:f0:2f:de:6f:d7:08:66:79:a7:f6:
                    a5:4e:4d:52:5b:97:8c:5e:14:0d:1f:95:2f:19:dd:
                    c5:11:98:ee:db:1f:61:0e:b8:c2:2f:63:ff:40:b9:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B2:F4:09:08:96:A2:E3:54:24:DF:CA:33:C0:F4:74:51:90:CD:F8
            X509v3 Authority Key Identifier:
                keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:20:5d:45:e3:a2:75:2e:65:30:03:b6:c8:d2:88:99:2b:
         f0:3a:91:e4:35:46:fd:13:2e:36:45:c7:b7:07:8b:93:25:bf:
         8a:88:79:02:a7:60:92:4b:f3:c3:a5:37:21:03:af:70:c8:86:
         30:74:9c:73:ca:29:f5:65:05:02:85:e5:97:e0:6c:a3:99:e7:
         47:c3:8a:bf:c4:52:51:3e:6c:eb:11:cb:3f:0d:3a:9c:d8:1b:
         0a:ef:99:22:d2:ba:e4:5d:32:9d:7f:46:a6:5d:fb:7f:f9:70:
         4e:ab:ee:5d:60:ce:c3:20:d6:d6:e1:c6:45:37:71:04:43:3a:
         5d:74:91:c0:bc:82:22:09:ef:24:44:84:a3:4c:e8:6d:16:c2:
         32:cf:ae:33:89:e7:c6:8f:8f:ea:5a:bf:01:70:21:14:e6:04:
         b2:36:54:a8:5f:70:f1:07:9b:26:4e:e5:21:00:36:d8:4f:50:
         18:17:0d:40:aa:77:68:e0:45:cc:ac:ee:02:06:7b:69:e1:2d:
         83:3f:c1:32:08:00:fc:e7:8b:9d:b2:81:a2:8f:23:f7:3a:c0:
         a6:fd:51:60:2f:dc:80:9f:23:31:1e:ad:27:c1:f4:59:67:8a:
         e7:0e:72:4c:be:61:3c:59:c4:3f:3e:b2:b8:72:c2:d6:37:86:
         f2:d9:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:34 2025 by rpki-client