Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          YxKziMSSJif0S8c7/5KunDxycWjjlBSDrgtS3deOkcM=
Subject key identifier:   D6:EB:A4:43:0D:6D:E7:D2:25:03:E4:87:08:6F:CE:BB:89:D4:7F:7D
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       07F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          07F3
Signing time:             Sat 18 Oct 2025 22:18:36 +0000
Manifest this update:     Sat 18 Oct 2025 22:18:35 +0000
Manifest next update:     Sat 25 Oct 2025 22:18:35 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: Sq0g7y+hqUh6cVqFhV3ebpcfi5SAVxRZvV3pQL4090k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2035 (0x7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Oct 18 22:18:35 2025 GMT
            Not After : Oct 25 22:18:35 2025 GMT
        Subject: CN=68f4123b-38e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:36:19:7d:0a:7a:0c:99:c4:1e:dd:b7:7d:
                    2e:30:74:e6:97:26:43:1d:3f:15:0f:3a:89:fe:5f:
                    c5:50:d3:c6:d8:4d:aa:d0:31:02:ef:6f:2f:e7:98:
                    d9:f1:9c:2a:be:ed:32:e6:37:a9:a3:3a:2c:29:70:
                    8a:2b:eb:1d:1c:0f:17:09:4f:ff:3a:26:a9:9e:44:
                    7c:fb:51:d5:8f:10:52:da:35:fa:38:91:d8:c7:dd:
                    eb:b3:a6:4c:1d:de:28:be:f3:a8:05:9b:57:56:91:
                    90:e0:cf:a9:2b:ff:e2:75:50:b9:eb:a0:4b:90:5a:
                    a9:bb:13:ca:75:0e:9b:5c:c1:0f:be:41:54:d2:95:
                    dd:03:f4:bf:5f:ff:f0:c1:dd:6e:c9:b5:56:13:16:
                    29:63:d3:21:84:0a:e6:78:d5:5e:2e:95:f2:5c:5e:
                    4b:4e:dd:f5:84:cc:ae:4e:3d:01:8e:5d:85:96:9d:
                    a7:17:1f:dc:b0:12:fa:e2:7f:c4:55:d7:c5:40:e2:
                    57:a3:45:62:1f:f2:f1:fa:58:f2:b1:70:97:24:6d:
                    89:e4:1a:dc:01:8b:39:cd:8a:74:cc:23:43:83:b5:
                    9e:64:99:88:fa:04:c8:f4:79:ec:9e:ec:6d:4c:b1:
                    e7:04:c4:76:5c:68:76:3f:7f:77:39:e5:23:14:0c:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:A4:43:0D:6D:E7:D2:25:03:E4:87:08:6F:CE:BB:89:D4:7F:7D
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:2b:da:0c:b4:57:07:87:83:7b:6a:d4:5d:84:81:9a:b6:
         60:5b:33:c6:55:9c:81:38:55:a3:af:b2:ba:51:b1:38:fc:63:
         cf:f8:bc:f1:bf:11:f9:e6:04:25:cc:9d:ba:b8:50:61:b1:26:
         7d:d6:67:21:8c:97:02:6d:8e:a0:1f:04:9a:f3:02:5f:43:0b:
         4d:db:8b:81:3c:7a:0c:78:d6:65:80:f6:15:83:67:03:ca:7e:
         fc:bd:43:58:0d:39:e4:7b:6f:a9:7e:9d:a7:92:9f:cc:59:06:
         21:8c:c1:60:31:8b:d4:36:8b:f1:89:4f:82:de:fd:b4:dc:80:
         a2:32:16:07:8a:82:97:9c:96:40:2f:af:1c:09:fd:52:0c:cf:
         8d:81:02:a4:99:b3:b5:bb:98:47:89:5c:8f:a0:f7:6f:61:4d:
         ec:94:a3:3e:9e:0c:b1:28:31:29:43:22:21:74:fb:25:b9:06:
         94:a3:12:67:fb:41:76:02:6b:00:a5:88:0b:c6:85:a8:93:d6:
         77:25:bb:87:f0:77:0f:6f:b1:dc:39:57:4f:0f:6b:36:a5:71:
         b9:be:e0:77:5d:2d:83:0b:6d:1d:09:a5:9a:a1:a0:ae:ef:d5:
         9d:d7:a0:f4:a4:a5:00:f1:31:09:eb:02:09:c2:45:77:93:d4:
         d6:cc:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:09:11 2025 by rpki-client