Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          wr2s4AvH0ogxPVJdQhN+rHPZ9EghFi/cD45Z1O6jcWY=
Subject key identifier:   5D:90:9E:D9:2E:1B:F1:C0:57:E0:B1:8D:CB:78:1C:64:40:FC:9C:C7
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       178D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          2037
Signing time:             Tue 04 Nov 2025 16:40:11 +0000
Manifest this update:     Tue 04 Nov 2025 16:40:10 +0000
Manifest next update:     Tue 11 Nov 2025 16:40:10 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: OYoBdD2cSoLaYriueJp+blpwIdbE4NzrYxcIrd0UPkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6029 (0x178d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
        Validity
            Not Before: Nov  4 16:40:10 2025 GMT
            Not After : Nov 11 16:40:10 2025 GMT
        Subject: CN=690a2c6b-cec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:c7:a6:20:a4:6a:a1:0d:79:47:3b:5f:40:
                    76:60:16:df:45:4b:31:6c:58:fc:62:ee:75:37:6d:
                    f9:d6:d5:39:13:80:8a:1c:b6:56:32:1b:0e:7c:87:
                    b1:0f:a1:96:f0:e2:c5:c3:8e:f7:1b:91:ff:12:f2:
                    06:9e:7a:a9:ff:a4:8c:7f:df:ae:8a:0a:82:9c:fd:
                    38:9d:8e:e4:e3:5f:ab:a0:a8:a8:92:0c:53:81:b3:
                    79:8b:88:30:27:1f:88:5e:5b:be:59:29:9d:a0:15:
                    ae:ca:97:0f:53:7a:ca:7c:5e:f7:63:69:8c:d4:58:
                    35:74:3d:6f:14:5d:39:fe:e8:b8:f7:bd:5a:3c:e1:
                    3c:e2:14:f6:7d:d8:28:53:b8:ec:9e:c1:5f:cb:b5:
                    69:10:07:69:65:17:77:d4:28:37:08:38:5e:c2:91:
                    88:50:cc:d7:88:9f:1a:bc:31:4b:87:4f:c6:1f:5d:
                    2f:b2:dd:84:03:d7:0f:23:19:77:d3:ac:f7:35:05:
                    db:c1:29:e0:e8:95:4f:a9:1e:b4:25:10:12:09:17:
                    91:3c:05:70:14:09:ea:d4:11:4c:38:0f:4c:35:f6:
                    0d:59:91:fc:51:91:b4:b6:28:e7:c4:ea:09:2e:1a:
                    1b:da:af:14:a9:62:d5:8c:9a:05:50:d2:4d:eb:8d:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:9E:D9:2E:1B:F1:C0:57:E0:B1:8D:CB:78:1C:64:40:FC:9C:C7
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:de:7d:e9:5e:7a:54:30:62:4c:02:d5:ba:42:7c:b6:e7:3f:
         a0:bf:21:d7:86:79:5e:68:e8:c5:9b:b1:89:da:33:2d:32:63:
         09:22:f8:af:9f:5c:cb:0d:38:b3:9c:96:2d:ad:79:78:cb:d1:
         2c:b8:51:2a:ed:79:19:cc:1a:20:56:37:ae:94:f6:06:3e:bb:
         51:c6:b4:f5:ab:a7:5e:97:be:58:89:f5:35:c7:38:49:c5:38:
         72:66:a0:12:c5:8d:67:02:de:0d:53:e4:a7:c8:76:59:3c:19:
         13:e1:08:07:51:8d:17:24:d5:88:0f:92:99:2c:53:4e:1d:21:
         34:df:5c:c4:c6:6d:56:1d:93:dd:3c:1f:42:f6:29:1f:b5:f5:
         f0:b1:da:08:8e:8e:be:35:54:fb:a7:e3:99:f3:68:ed:ba:b3:
         28:4f:72:2a:67:e1:c4:bc:ff:37:2e:72:d6:b1:42:50:be:52:
         52:de:76:d1:68:a9:e5:22:31:bb:18:1c:08:57:5d:6e:d6:50:
         5c:56:5f:d2:d8:43:a2:ec:f8:8e:7d:09:95:e0:49:84:88:c6:
         51:50:eb:55:c6:1e:c6:c7:a0:6e:92:f7:e4:11:40:a5:9d:e0:
         42:12:62:7e:17:33:5e:bd:cb:f8:53:38:8a:7e:8a:5f:39:ea:
         db:49:6c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:37 2025 by rpki-client