Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File:                     s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier:          0UIoxktHxCRnntCOSJOVZ1DXt5sTrCFoXERU2NoXiA8=
Subject key identifier:   03:6D:CE:75:E0:CB:6B:26:AA:2C:26:A7:D8:CC:1E:64:75:B2:18:BD
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer:       /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial:       0B75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number:          12F8
Signing time:             Tue 04 Nov 2025 19:09:24 +0000
Manifest this update:     Tue 04 Nov 2025 19:09:24 +0000
Manifest next update:     Tue 11 Nov 2025 19:09:24 +0000
Files and hashes:         1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: f9O3NW0qyp+jCooSByNeJePdcxaAWQD4zg1SQT35I38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
        Validity
            Not Before: Nov  4 19:09:24 2025 GMT
            Not After : Nov 11 19:09:24 2025 GMT
        Subject: CN=690a4f64-e801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:e2:02:00:ce:ae:9f:ed:e6:75:1e:32:e8:
                    4d:49:2f:73:12:2a:a4:cd:7d:76:d5:7e:a8:4f:74:
                    97:91:b9:ff:5f:59:3b:1e:bc:6c:37:09:fa:33:35:
                    f4:e6:cf:a9:89:ef:73:77:1d:37:0f:1c:eb:fa:59:
                    c8:64:62:e3:a5:9e:c6:2b:f8:7b:60:df:f8:0a:fb:
                    c7:4f:71:85:38:41:68:af:88:01:9b:0a:89:3e:5b:
                    ab:f6:27:77:96:85:92:c6:3f:fe:f7:1d:c6:09:06:
                    4a:77:4e:08:90:20:ca:18:ee:85:a6:65:64:54:fa:
                    0c:b5:f7:04:2c:e2:ed:72:b1:67:43:8e:fc:fb:c8:
                    de:95:8c:88:34:64:08:67:d9:0b:d3:36:0e:fc:b8:
                    34:d3:0f:df:39:f8:40:21:92:a3:f0:c9:88:76:66:
                    0e:50:52:eb:cf:73:85:bb:b3:96:10:85:40:28:80:
                    4c:10:9d:1a:11:24:25:e7:98:62:4a:87:37:45:bd:
                    f8:4b:2e:d6:95:be:d6:5e:e1:9b:7a:a1:b6:b7:62:
                    f8:41:83:7b:e1:be:3c:8a:e7:65:e1:db:a1:05:11:
                    98:5d:3f:f0:cf:76:8b:5c:fa:59:77:f2:9b:09:3f:
                    35:07:3f:2e:d7:79:d2:ac:0f:04:5c:4c:58:30:38:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:CE:75:E0:CB:6B:26:AA:2C:26:A7:D8:CC:1E:64:75:B2:18:BD
            X509v3 Authority Key Identifier:
                keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:4b:26:f5:c7:59:2b:72:7f:b5:0d:28:f2:47:c8:24:67:
         b7:e5:75:bc:61:86:ec:46:29:9b:0c:1f:9b:df:8a:41:40:90:
         fe:32:dc:d4:d2:47:be:1e:02:28:0d:2f:29:c5:d2:f6:a5:84:
         f8:39:3c:b5:83:93:71:b3:e4:c6:59:17:0d:f4:c1:54:42:9a:
         c1:cc:ec:c0:a1:57:45:2c:f9:65:1c:0b:e2:f3:70:26:9d:60:
         de:b8:75:f0:67:8d:43:75:71:a1:a9:11:23:80:1e:b3:8a:3f:
         a0:26:f4:e2:de:e3:0a:71:69:be:16:e3:4e:2f:f1:9b:56:c9:
         e1:14:c6:65:20:11:09:3f:54:f9:38:7f:56:4d:21:e5:3f:65:
         9b:2b:ef:e4:d2:60:42:41:ae:df:39:4d:ce:26:82:4f:be:63:
         6e:c8:82:9a:a1:9a:df:0a:f5:a5:d7:54:40:ca:c7:87:4b:f7:
         29:18:7e:90:70:97:5a:b8:18:a4:09:76:26:3f:24:30:e4:64:
         6d:22:d5:8c:63:27:60:8b:21:b3:b0:c0:b4:1e:97:21:4b:ff:
         66:c7:92:ae:bc:ae:aa:f2:e3:95:93:e1:fc:89:e7:59:1a:cb:
         dd:e9:66:02:a7:4c:de:f4:51:0f:64:4d:43:f7:a3:fd:b5:d2:
         72:18:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:56 2025 by rpki-client