Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          A+RCd2njG/Wxqx7u+9Ax5VUWk/3/jAAtkvFipogheBk=
Subject key identifier:   D2:72:1F:C7:B9:24:91:A5:36:D0:FC:4E:D8:E0:08:49:DE:62:03:39
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          0185
Signing time:             Wed 05 Nov 2025 03:44:00 +0000
Manifest this update:     Wed 05 Nov 2025 03:43:59 +0000
Manifest next update:     Wed 12 Nov 2025 03:43:59 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: PROfyfKTuvXmNvWXUDf9MCBGBysRGUCdMNMzr8Z8NO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Nov  5 03:43:59 2025 GMT
            Not After : Nov 12 03:43:59 2025 GMT
        Subject: CN=690ac800-f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:56:bb:60:1a:88:76:f9:ef:86:0f:27:d4:
                    fa:75:23:5a:55:6f:9b:e7:a2:0f:5a:58:5c:f5:cf:
                    93:86:b2:a9:4e:d3:87:15:9e:3f:da:a5:06:b9:6c:
                    a9:6e:cc:15:a9:f1:82:f9:05:cb:d9:a0:3a:c7:f7:
                    08:fd:49:2c:c0:fb:2c:a3:0f:55:ff:0e:18:d5:84:
                    a7:92:b7:bf:45:c4:49:3c:02:f9:7d:f6:21:77:61:
                    d2:1a:08:b6:26:fc:8a:69:9b:21:b1:9a:76:44:d9:
                    8f:00:04:18:6e:52:90:c0:b3:7a:06:ff:85:66:5c:
                    d6:12:bd:21:f5:d9:78:3e:9c:d0:b3:b4:c9:f7:e2:
                    72:7f:fc:4c:24:fb:d7:80:c9:d0:8c:b0:78:d2:00:
                    50:c7:46:01:af:7f:93:31:17:3c:fb:95:ff:21:82:
                    ff:d5:92:1f:f3:68:88:1c:89:de:e2:23:97:46:75:
                    38:d5:83:2d:34:ed:86:39:24:0f:bb:ce:1b:51:99:
                    48:9b:ff:ba:ae:85:24:bd:75:7f:da:91:a5:3e:2d:
                    47:39:99:27:2c:a0:40:ec:c6:b0:ee:0d:a0:9e:cb:
                    6e:b8:7b:e6:7f:42:ce:40:4a:0f:6b:79:ae:db:59:
                    6a:6b:f6:69:b9:81:25:aa:49:0b:ff:ab:fb:87:55:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:72:1F:C7:B9:24:91:A5:36:D0:FC:4E:D8:E0:08:49:DE:62:03:39
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:d1:d6:43:8b:2f:cf:0d:49:17:68:56:86:99:3e:f5:f9:
         ea:ae:5c:cc:db:94:5c:e5:95:ac:6a:0a:83:08:4c:cd:a1:e3:
         86:0e:e2:c6:11:84:49:f5:21:d0:70:1a:ee:80:b4:de:eb:8d:
         7b:05:cc:e0:26:ff:d4:15:d4:60:65:0d:59:33:78:69:1e:f9:
         71:35:38:dd:91:4a:a2:44:21:15:d6:f7:c9:61:2c:06:70:ff:
         78:a9:ea:a3:8d:0f:b1:18:7f:8a:38:e6:4d:fd:ff:3f:66:11:
         ee:bc:70:b8:c4:13:ef:50:e5:7b:99:f8:71:30:ae:04:b8:1d:
         60:a8:21:47:2d:e4:76:37:84:6d:9c:32:f8:9a:a1:cb:2b:0a:
         40:59:b7:39:3b:a6:cf:54:f8:a3:6f:87:e9:d6:27:99:44:1f:
         1c:c5:87:e3:65:f4:bb:cb:d5:6c:cb:a3:91:7c:e7:51:ee:da:
         00:04:d0:f1:a8:1a:d3:d4:39:6d:a6:66:9c:3f:b3:c7:ab:27:
         1d:74:2b:7e:d3:30:1b:9f:99:1a:57:c3:ef:39:a2:46:ed:57:
         b1:d0:ba:d5:da:b7:56:75:41:09:4a:52:8d:27:a1:a4:e4:db:
         d9:41:ea:94:69:b3:a2:2d:35:0d:94:6c:27:39:e4:31:8e:24:
         a9:d7:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:35 2025 by rpki-client