Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          7RkSwog22DNg4/Nx+E1JxdjAIRgCwNwrnEqrUC5iock=
Subject key identifier:   7D:F3:FF:1D:79:71:0E:69:A3:49:8D:09:71:75:F7:5D:CC:E4:8A:10
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          0696
Signing time:             Sat 18 Oct 2025 14:52:46 +0000
Manifest this update:     Sat 18 Oct 2025 14:52:46 +0000
Manifest next update:     Sat 25 Oct 2025 14:52:46 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: ebyJHr+NT4ofR26ebe1rJu0uKybY+qpyr91hGPPKZr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Oct 18 14:52:46 2025 GMT
            Not After : Oct 25 14:52:46 2025 GMT
        Subject: CN=68f3a9be-2cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:7f:d7:8e:92:c6:da:49:80:0d:e3:65:c9:
                    20:0c:31:60:79:02:7b:21:7e:b2:2f:90:b5:9a:3d:
                    e0:85:9e:67:8b:d5:9b:4f:89:7a:16:15:00:18:5c:
                    af:e8:2e:64:b2:5b:58:93:fd:e2:33:a0:f9:70:34:
                    ef:6c:8b:2a:b5:36:05:fe:b5:95:0b:7f:a9:53:ab:
                    17:9f:44:0f:ad:37:8f:a6:8a:b0:27:25:06:2b:1f:
                    50:be:a4:3a:3e:1f:14:d9:18:74:95:85:58:83:29:
                    dd:59:b2:92:91:a8:fc:84:b8:fe:6f:89:a5:91:f3:
                    d9:e3:4d:90:67:57:89:c8:e6:89:36:ee:c5:08:1f:
                    ca:35:9b:32:3a:f4:57:05:5f:f6:7f:1f:91:b3:4b:
                    4c:82:02:ad:56:5e:8b:2f:a5:57:f2:b8:d6:26:d7:
                    79:63:66:7b:14:aa:43:70:04:8d:5e:1a:5f:1f:a8:
                    84:c3:c5:52:c1:85:ef:78:8f:fe:b5:79:97:e5:2a:
                    82:7c:34:17:b1:6a:0e:68:e8:5c:f7:62:e5:e9:91:
                    62:1a:89:b6:d1:95:ed:c1:69:d0:dc:f0:aa:3d:03:
                    62:99:e8:34:02:06:81:7f:5c:77:c0:dd:cc:0b:b2:
                    eb:f5:a6:ae:9d:3a:e7:cc:3c:cf:4f:97:ca:2d:0a:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F3:FF:1D:79:71:0E:69:A3:49:8D:09:71:75:F7:5D:CC:E4:8A:10
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:fc:a0:6a:a2:ad:37:00:ac:db:c1:72:89:2f:31:3d:8e:
         c5:a8:2f:c5:c0:af:f5:84:74:80:6b:ac:e3:b9:61:27:3a:32:
         52:e8:df:8f:5a:bc:ef:2a:e5:43:eb:82:c2:a5:66:62:f5:d4:
         06:95:42:d4:ed:21:aa:4e:a8:ab:0d:b8:ce:f7:53:98:83:cb:
         9c:fe:3b:9a:32:f9:c5:76:af:2c:97:fb:43:64:ce:c5:63:14:
         0d:03:c7:59:46:d2:39:93:42:8e:9e:7a:f3:a5:47:13:83:dc:
         a6:f2:09:b7:90:f0:b2:1b:b0:84:00:10:f3:36:53:1c:c3:9d:
         f8:95:7a:bb:0d:6a:38:8c:05:e7:63:f2:f8:dc:12:11:16:9a:
         29:7c:b4:4e:95:02:d1:f2:51:2a:6c:92:e9:d3:05:3e:79:2b:
         f9:63:a8:84:53:15:b8:46:73:c4:ee:ef:9b:0a:73:7f:28:de:
         b4:d9:93:a8:b7:33:8c:6a:24:ef:b4:f4:9d:2f:51:1b:b0:1d:
         a0:89:a8:8b:dd:2c:83:43:8a:9f:09:0f:83:1a:a8:1e:0f:d4:
         e5:2d:33:cc:1f:4a:4f:c4:6e:6a:c8:cc:02:25:aa:6e:ee:c1:
         68:e3:2a:66:af:a2:65:15:a8:50:dd:2d:fb:69:f9:30:fc:13:
         8e:45:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:13 2025 by rpki-client