Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File:                     RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier:          IsYdclnS7f1pLMe0OyuIMMkghzNOwjicU78vaXjPSbo=
Subject key identifier:   BC:FA:75:A7:FD:CD:31:74:C6:F3:41:6E:60:18:C2:80:22:0C:00:EA
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer:       /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial:       0C65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number:          0C64
Signing time:             Sun 02 Nov 2025 18:30:12 +0000
Manifest this update:     Sun 02 Nov 2025 18:30:12 +0000
Manifest next update:     Sun 09 Nov 2025 18:30:12 +0000
Files and hashes:         1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: Iit9xYwxgxkCjx2XTgsQCttsCQsHqWoccOvdBi3WazI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
        Validity
            Not Before: Nov  2 18:30:12 2025 GMT
            Not After : Nov  9 18:30:12 2025 GMT
        Subject: CN=6907a334-b59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:01:7e:0d:04:99:8f:4b:0e:92:0e:5d:95:
                    3e:0e:38:79:e7:c1:ee:15:51:e1:5d:63:33:99:a8:
                    23:82:81:07:7c:8b:e0:a5:9f:28:48:84:a5:a6:21:
                    d1:30:7c:8a:fc:e3:60:7d:37:14:fa:ec:45:cd:30:
                    3a:98:05:98:b1:9c:5a:a6:bc:2d:cd:11:13:7e:79:
                    a0:e9:1f:91:f8:5e:4e:25:a6:24:b9:8e:29:da:5f:
                    58:40:14:ba:59:ae:87:92:ac:8f:2f:72:6d:cf:36:
                    65:3e:3f:95:ec:79:10:fa:fc:18:f1:9f:f0:48:b8:
                    7a:f2:d4:d5:94:79:2e:eb:81:c2:54:f6:51:14:13:
                    39:68:34:e1:18:47:51:a7:ef:b8:2a:b6:ad:a1:3e:
                    0f:e7:78:63:31:cd:cb:a8:57:03:d0:39:97:2c:e3:
                    88:6f:95:94:8b:b9:f9:f1:92:48:6d:d9:36:5f:a7:
                    e0:6b:5b:a8:0a:b8:4c:29:03:2d:7a:75:6f:44:2b:
                    c2:e5:aa:d0:74:87:e3:2d:cd:9a:6e:d0:b3:77:f5:
                    5f:d3:ef:12:b3:b0:eb:4e:ec:69:a1:b5:a4:64:3d:
                    11:1a:ec:70:8e:3e:bf:38:1d:f7:97:54:5c:f5:5f:
                    3c:df:9f:33:53:65:57:22:a5:27:22:9f:65:c4:9d:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:75:A7:FD:CD:31:74:C6:F3:41:6E:60:18:C2:80:22:0C:00:EA
            X509v3 Authority Key Identifier:
                keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:74:33:ed:77:13:34:3c:51:55:cc:55:70:39:ea:c0:58:
         2f:13:68:a3:6d:45:71:47:ae:d6:bb:18:8c:43:00:a8:d2:30:
         68:27:63:17:55:04:ff:e0:1b:62:87:c6:d5:f9:ee:cf:c2:9a:
         5d:e0:3e:33:09:f3:2d:ab:c2:e1:e9:70:b8:40:e2:c5:90:5b:
         c5:fa:7e:5d:78:e4:95:f7:0f:b0:bf:1c:9e:7e:f9:53:07:45:
         a1:84:83:99:65:b6:fe:1f:4b:99:65:3c:53:01:66:2a:4b:ec:
         a5:11:72:8d:78:c6:87:a6:b1:9a:c6:9c:8e:4d:59:be:06:7c:
         1f:ac:01:04:07:8d:3e:4a:53:c4:e4:5b:84:aa:7e:31:1d:fb:
         a3:ae:79:db:c7:8b:4d:7a:a7:71:66:d6:d8:5a:fa:30:95:7c:
         d2:c3:00:d6:8f:4c:23:cf:3d:e4:31:e0:02:23:eb:bb:04:15:
         6c:d7:00:41:eb:78:61:18:78:92:d1:77:e2:5d:77:50:ee:97:
         8e:b9:6e:1f:1d:e6:8a:01:8c:dc:4e:c4:da:ac:c7:47:c9:73:
         c1:6e:9b:14:4f:0e:ad:d5:31:c7:3e:60:04:f2:c1:36:ba:0f:
         a6:c9:88:8d:c4:dd:64:fe:0d:c8:ee:b3:a6:bc:02:11:0d:8b:
         e8:da:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:33:43 2025 by rpki-client