Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
File:                     Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json)
Hash identifier:          7mKIrg//orsZWqeYy5u+rUW+gCSmCk9dUwSVUJKCVRE=
Subject key identifier:   6F:46:5B:E5:F2:BC:8E:5F:ED:04:33:C3:F8:2D:A9:1F:4D:06:C2:39
Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E
Certificate issuer:       /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
Manifest number:          0142
Signing time:             Mon 03 Nov 2025 04:20:16 +0000
Manifest this update:     Mon 03 Nov 2025 04:20:16 +0000
Manifest next update:     Mon 10 Nov 2025 04:20:16 +0000
Files and hashes:         1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: v3c0SmT5WFBSXAZlSzY+ZYiBAHTW4k3JuBilEWOFJR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl
                          rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E
        Validity
            Not Before: Nov  3 04:20:16 2025 GMT
            Not After : Nov 10 04:20:16 2025 GMT
        Subject: CN=69082d80-1ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:83:1c:89:c9:37:5c:56:45:44:f8:97:00:
                    e8:fe:6d:42:6a:43:a8:ba:e8:2e:2b:81:42:de:9b:
                    d9:db:5a:66:eb:35:06:84:e1:7a:e7:7b:cf:be:f7:
                    f5:18:aa:f1:31:1f:5c:00:be:d4:d0:8b:26:db:db:
                    b8:b6:d1:6c:59:ea:a8:26:95:49:80:f6:36:26:09:
                    5f:15:b9:97:71:de:0d:bd:70:ed:33:99:43:73:6b:
                    1d:35:3a:7b:76:7a:b4:21:90:12:d8:34:f6:4e:2a:
                    c4:70:67:a1:8b:0f:9c:e2:34:a5:6e:4c:e0:55:d5:
                    2a:32:7c:5b:97:5a:7c:64:90:d7:65:cd:99:c7:aa:
                    ca:32:49:67:d8:89:d8:16:16:5c:90:0a:c4:9b:34:
                    cb:75:3d:b2:7e:59:19:2f:b4:02:fd:5b:c4:2a:8f:
                    fa:4d:34:bc:9e:13:14:2b:75:9e:be:9a:34:94:44:
                    8b:8c:53:d9:e4:11:21:8f:af:7a:dd:98:3a:e9:38:
                    bd:70:55:40:c1:1a:c1:99:ed:bc:d1:d5:05:c1:ec:
                    2e:34:19:e7:ca:37:0f:cf:fd:13:56:e5:00:07:cf:
                    89:cf:d4:65:d3:a0:4c:07:1e:b1:69:1f:ff:45:51:
                    90:21:7e:45:1d:6c:74:6d:25:13:fa:bf:ff:c7:87:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:5B:E5:F2:BC:8E:5F:ED:04:33:C3:F8:2D:A9:1F:4D:06:C2:39
            X509v3 Authority Key Identifier:
                keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:e7:f4:f1:5e:41:a5:2b:a3:3a:f5:1f:70:8b:08:90:7a:
         3b:9b:b1:c6:53:0d:a5:36:f4:2e:26:dd:aa:7b:ba:84:b0:b4:
         e7:a1:89:72:f4:f4:f9:ad:05:03:2d:9b:fc:44:ad:c0:12:d0:
         90:29:dc:21:87:73:d4:e1:a1:79:ba:f8:dc:5c:ad:a7:c7:5d:
         14:12:fd:ca:95:c5:71:99:1f:1a:2a:96:24:07:2c:4d:99:77:
         5e:c5:33:d5:2f:3f:6b:d8:f4:55:fc:86:f9:a5:59:8c:9f:09:
         d0:fa:6a:9f:b6:c0:c7:df:ea:e9:8d:2c:b5:7c:83:a2:57:4c:
         9d:4c:06:e7:59:f0:72:38:de:fa:bf:a1:6c:c9:98:52:66:ae:
         49:8a:40:df:28:8c:ea:68:88:0d:8a:26:06:5f:83:d1:57:48:
         a0:24:5e:36:07:30:f7:f5:5e:38:e2:02:40:4f:5d:c4:97:f2:
         e2:17:a0:25:67:cc:47:cd:7c:a5:8e:c4:ad:e1:cf:61:53:e1:
         9e:88:8b:68:1e:ac:2b:03:43:cb:7c:93:d1:87:f1:0d:01:d1:
         d6:5d:ff:32:65:52:d0:be:15:2c:fb:8b:96:84:ab:9d:41:e1:
         d6:06:75:b1:c4:5b:cc:9f:4a:95:32:37:23:17:9f:68:16:4f:
         37:8c:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:35 2025 by rpki-client