Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
File:                     g_H_6dM06H_0zXVY3e81L-bfIGk.mft (raw, json)
Hash identifier:          KEE+PzBZyg92DC2YCBXPC+r/ARNHC551jod3JdUUdic=
Subject key identifier:   BF:F3:AC:B2:F2:70:E6:DB:B8:78:C8:95:80:9E:56:B3:EB:A9:39:29
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Certificate issuer:       /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
Manifest number:          0894
Signing time:             Tue 04 Nov 2025 20:40:43 +0000
Manifest this update:     Tue 04 Nov 2025 20:40:43 +0000
Manifest next update:     Tue 11 Nov 2025 20:40:43 +0000
Files and hashes:         1: g_H_6dM06H_0zXVY3e81L-bfIGk.crl (hash: XUInHx1xB4TX23e3QCEm3NVNSUfM+SDpk5IvdN4TKJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
                          rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFFA, serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
        Validity
            Not Before: Nov  4 20:40:43 2025 GMT
            Not After : Nov 11 20:40:43 2025 GMT
        Subject: CN=690a64cb-2b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:f5:03:41:67:a9:0f:7c:32:a6:0d:63:d7:
                    b3:36:94:22:d8:c5:69:39:f0:0b:53:77:e8:04:d9:
                    58:43:8c:82:e7:e5:01:34:77:49:4d:13:bf:7c:7f:
                    23:90:36:04:0a:0b:49:b1:8d:0b:43:e7:61:07:3d:
                    09:a1:8b:8e:88:c4:12:78:1a:86:dd:cd:eb:9f:fc:
                    08:e3:16:c3:ec:9e:98:fa:02:6a:94:b6:5e:ef:5e:
                    0f:5d:1f:49:19:a5:68:c1:a3:a5:0d:45:53:25:dc:
                    2a:38:7d:16:50:e9:38:53:4b:cd:21:28:3b:98:ca:
                    a1:62:ff:ad:c3:ee:59:7c:e1:f8:af:90:4b:d7:3c:
                    b4:49:3b:1a:fa:b9:33:e6:67:d8:13:e2:2e:a2:59:
                    3d:21:d3:a4:1c:88:77:af:8d:ae:51:44:b0:7f:b3:
                    57:9e:f5:fe:ac:26:68:f6:61:b2:ce:8e:20:6d:70:
                    b7:da:50:7e:03:9f:a8:29:4a:ed:e2:fd:32:23:a6:
                    e8:ee:d5:e2:46:9c:ae:02:ff:03:1e:0a:82:ea:03:
                    c1:e1:4f:de:59:a2:20:ca:41:0e:ed:17:aa:e0:e2:
                    dd:f5:9c:f4:03:89:93:c0:9e:72:64:c2:0e:a8:3d:
                    cc:e4:d6:00:bd:99:60:8e:5b:3b:4a:a2:79:c5:ee:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:AC:B2:F2:70:E6:DB:B8:78:C8:95:80:9E:56:B3:EB:A9:39:29
            X509v3 Authority Key Identifier:
                keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a9:6f:4c:c9:7f:4b:d8:f5:88:c3:3f:56:89:69:01:8b:cf:
         2f:b9:0f:6e:39:00:a1:dd:a1:f0:ca:c8:ab:e3:9f:9a:54:d2:
         f6:cf:7f:d3:b2:25:eb:ee:04:69:53:86:55:0b:e7:ad:6d:68:
         a8:b4:ce:a9:94:87:14:d1:2d:9d:e5:27:9a:cf:6d:f8:3f:d8:
         ca:41:2a:91:30:b7:51:3b:96:6f:d7:b2:ea:24:bc:a1:63:2e:
         b4:7f:64:a3:e0:01:06:07:75:b9:4a:da:62:fa:fe:bb:7c:59:
         d6:7f:57:bc:ba:b1:e1:a0:4e:99:0c:e3:43:9b:af:f3:79:5d:
         89:eb:a6:38:94:06:99:78:8b:ef:b8:50:4b:fa:f7:4e:79:5f:
         f7:0c:42:f8:f3:55:a7:07:57:88:3e:45:76:11:55:3b:6a:ed:
         8f:36:f6:a7:cb:d6:a6:04:7b:88:ba:58:6b:35:2c:10:f3:3b:
         81:84:c7:9e:f7:21:54:0b:9c:e0:de:6d:52:bd:76:43:82:a9:
         5f:da:d9:88:c5:3f:9a:9f:ab:44:c1:dd:bd:0b:23:55:75:83:
         35:87:a7:72:de:1a:df:b3:31:59:48:8e:40:6a:24:e5:61:e6:
         0c:34:f1:16:1e:5f:48:d4:61:02:82:bd:82:8e:3a:b0:fe:44:
         f9:9a:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:55:57 2025 by rpki-client