Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
File:                     6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json)
Hash identifier:          0LiV0RfEpTZFlWeAQHtYZ7S9KXitw0rrm9sDMsNle/s=
Subject key identifier:   70:9E:D5:F1:88:BB:A9:0B:5B:C3:06:5A:7E:BB:58:44:AA:91:45:94
Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7
Certificate issuer:       /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
Certificate serial:       34D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
Manifest number:          34D3
Signing time:             Sun 02 Nov 2025 15:14:56 +0000
Manifest this update:     Sun 02 Nov 2025 15:14:55 +0000
Manifest next update:     Sun 09 Nov 2025 15:14:55 +0000
Files and hashes:         1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: R0w1rA5tgi1JrCNkZBsNq6TjGCfAmmuzv95f9POBfvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl
                          rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13523 (0x34d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA790, serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
        Validity
            Not Before: Nov  2 15:14:55 2025 GMT
            Not After : Nov  9 15:14:55 2025 GMT
        Subject: CN=69077570-c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:8a:44:6d:9b:17:09:f6:1b:0d:69:9b:16:
                    80:4d:e6:ec:43:88:fb:12:40:4b:f0:c1:05:a2:1e:
                    19:42:80:7e:c4:d3:2a:53:e9:f9:57:aa:c4:93:c6:
                    5d:c2:43:7a:71:ac:64:3e:fb:21:ab:99:e7:f1:3f:
                    65:9d:96:22:7d:2f:0c:ac:d1:45:f9:98:f2:4d:cd:
                    1a:8f:32:72:e1:46:d3:77:8b:13:5e:4d:56:1f:e0:
                    c1:c6:54:fd:89:09:ca:89:1f:56:c1:07:41:31:70:
                    05:7b:29:bb:bc:ac:06:ce:cd:02:ca:be:27:6b:e6:
                    52:3b:06:d2:71:5b:4f:e4:52:f6:ee:48:ab:e7:20:
                    71:96:69:12:c3:7f:a0:bc:ca:5a:68:c2:eb:99:90:
                    ca:b2:e3:cb:5a:1a:96:c7:19:4f:00:9c:e3:b5:0c:
                    ba:09:30:fa:4e:da:36:af:d2:23:40:57:5a:53:59:
                    85:47:0b:b5:0d:f1:20:b7:de:39:75:ad:35:3d:32:
                    2f:14:a2:5b:8d:03:b8:3a:71:06:87:e4:63:e4:d0:
                    57:7e:9d:20:0a:77:cf:e0:0c:a2:a2:0f:ba:ed:a2:
                    52:bc:21:8e:ca:47:7f:48:f3:90:85:c6:2a:3b:68:
                    12:9f:1a:64:e2:ab:da:06:a3:d9:cb:fc:3c:c5:c8:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9E:D5:F1:88:BB:A9:0B:5B:C3:06:5A:7E:BB:58:44:AA:91:45:94
            X509v3 Authority Key Identifier:
                keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:d9:03:01:9f:3e:ea:6b:d0:81:c4:e9:c3:9c:63:b3:cf:
         fd:11:bb:8b:71:e1:f8:eb:89:87:fd:54:29:9b:47:42:b9:f0:
         f5:83:da:29:1c:d8:14:10:f5:00:c2:ea:2d:cd:08:e8:d8:9a:
         45:31:35:30:da:62:81:2f:f0:85:07:61:a1:1e:9b:6e:58:2b:
         53:43:a0:f2:61:39:b3:ae:fa:ec:fa:cd:d4:53:65:a6:02:dc:
         8c:cd:ca:50:ba:c4:e8:f5:5f:0a:71:03:ad:5f:5d:93:fe:23:
         2a:9c:64:2c:de:11:ed:22:e3:d9:27:f9:46:cb:2a:ce:37:27:
         59:1f:66:13:55:3d:ee:8f:7f:31:c0:67:9d:02:46:06:c9:f9:
         4a:11:82:f8:6f:5f:1d:4a:ac:da:e9:fc:90:65:c9:2c:f1:93:
         87:8c:96:38:d4:f4:aa:be:09:12:86:65:12:38:ab:fe:6c:a4:
         eb:ed:78:1c:78:d6:76:68:94:e7:f2:6d:c6:a8:27:c6:84:cf:
         a9:ba:f8:84:01:7a:da:56:bc:bf:ad:82:2d:f9:b5:ba:c9:ec:
         3f:9d:bf:ac:e6:34:d1:c8:96:3a:b9:b8:2b:ef:8c:7d:14:58:
         be:d9:30:e6:44:7c:41:30:c9:4d:b1:48:93:16:62:da:69:32:
         68:c1:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:39:22 2025 by rpki-client