Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
File:                     F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json)
Hash identifier:          iD983SdlOrehNIiMRVwJWjyyBU1VWLu+0ES8+8Y0rXY=
Subject key identifier:   8D:21:4A:28:20:21:42:5D:92:AA:D9:18:CC:59:FD:B3:08:A9:F0:9C
Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1
Certificate issuer:       /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
Certificate serial:       34CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
Manifest number:          34CF
Signing time:             Sat 18 Oct 2025 14:16:53 +0000
Manifest this update:     Sat 18 Oct 2025 14:16:52 +0000
Manifest next update:     Sat 25 Oct 2025 14:16:52 +0000
Files and hashes:         1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: OI6SzotPhdGrP9J1i09zpyCqk/NXroDOxP42ieWa2gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl
                          rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13519 (0x34cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
        Validity
            Not Before: Oct 18 14:16:52 2025 GMT
            Not After : Oct 25 14:16:52 2025 GMT
        Subject: CN=68f3a154-6065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:f7:46:7c:c9:ce:90:6f:10:3b:4c:97:84:
                    f3:e1:5d:9a:da:85:da:d1:44:69:74:16:f7:78:a0:
                    32:11:0d:86:fa:2b:77:66:b1:d4:1d:aa:73:53:9d:
                    b0:0c:da:bf:a2:32:cc:a8:6c:30:1c:c5:63:27:d5:
                    fb:dd:4c:48:b9:c0:e6:98:08:65:f3:ab:97:9e:93:
                    21:ce:0b:da:78:e5:8d:76:c6:ed:1e:23:84:e0:4b:
                    f7:08:d1:8f:77:90:84:6e:82:40:52:77:6f:27:44:
                    cb:e2:0c:16:b0:5e:99:5c:29:8b:59:71:72:6b:ff:
                    33:0c:d9:a8:39:6c:41:cf:c8:db:28:1b:d5:0f:80:
                    eb:61:7d:7c:eb:aa:21:01:2e:87:84:aa:3a:8d:ca:
                    fd:5f:55:6b:83:4b:ab:c1:c8:18:90:61:0c:09:3c:
                    64:e2:ac:2b:2b:58:f3:9b:3d:ed:65:1a:e5:74:03:
                    29:6a:46:4f:d0:6a:c3:2f:b1:e2:df:d7:db:92:90:
                    37:36:de:dc:07:03:b9:03:7e:d2:81:65:f4:61:ea:
                    49:b2:3f:d7:d3:fa:10:81:83:fd:5c:94:38:af:87:
                    cf:a6:18:65:2e:f5:2d:5c:7e:ed:bf:3d:70:dd:94:
                    57:97:8c:04:02:b5:b4:9e:6c:84:7d:7e:e6:36:5d:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:4A:28:20:21:42:5D:92:AA:D9:18:CC:59:FD:B3:08:A9:F0:9C
            X509v3 Authority Key Identifier:
                keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:79:f6:ae:90:f6:a7:7d:11:7f:d2:1c:1f:b7:61:65:89:e6:
         36:39:5f:47:b6:8d:e3:ae:67:c4:d1:46:fa:f1:d9:60:a6:11:
         47:9b:ac:a4:ee:41:bb:3d:b3:a7:19:10:f6:28:72:39:86:92:
         39:ce:0a:15:25:d1:36:3f:94:e4:88:b4:5b:9d:0f:89:d4:96:
         45:39:e6:d8:59:14:12:50:a5:ad:eb:ca:b1:20:16:d8:ea:f9:
         a4:47:22:4a:a6:59:c5:fc:38:4d:48:d4:c8:83:b6:8f:7c:22:
         c1:93:2a:39:54:72:be:2e:46:f1:ca:f6:31:be:49:18:4a:f6:
         93:dc:89:8e:67:f0:06:bc:4d:8c:01:43:d3:25:a6:80:c3:20:
         16:60:b7:b2:7f:0b:10:9e:e8:75:a5:78:71:e0:41:b7:12:94:
         b6:3b:51:dd:cd:94:8f:32:8d:06:2d:0f:52:7c:b9:fe:73:64:
         11:04:cb:9a:92:a7:01:22:c4:c4:97:25:87:57:9d:72:8e:03:
         06:88:5a:41:1e:36:8e:d1:65:42:6d:97:9e:57:33:c3:00:01:
         f4:00:ce:71:86:e2:85:89:a9:69:ce:de:ce:b0:d6:e8:1f:d1:
         41:b5:b0:cd:0e:0b:f5:9c:9e:3b:ec:de:6b:f9:7a:45:dc:3b:
         28:00:7b:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx
RTNDNUJCRjEwHhcNMjUxMDE4MTQxNjUyWhcNMjUxMDI1MTQxNjUyWjAYMRYwFAYD
VQQDEw02OGYzYTE1NC02MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAve/3RnzJzpBvEDtMl4Tz4V2a2oXa0URpdBb3eKAyEQ2G+it3ZrHUHapzU52w
DNq/ojLMqGwwHMVjJ9X73UxIucDmmAhl86uXnpMhzgvaeOWNdsbtHiOE4Ev3CNGP
d5CEboJAUndvJ0TL4gwWsF6ZXCmLWXFya/8zDNmoOWxBz8jbKBvVD4DrYX1866oh
AS6HhKo6jcr9X1Vrg0urwcgYkGEMCTxk4qwrK1jzmz3tZRrldAMpakZP0GrDL7Hi
39fbkpA3Nt7cBwO5A37SgWX0YepJsj/X0/oQgYP9XJQ4r4fPphhlLvUtXH7tvz1w
3ZRXl4wEArW0nmyEfX7mNl30RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0hSigg
IUJdkqrZGMxZ/bMIqfCcMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE
NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V
b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADefaukPanfRF/0hwft2FlieY2OV9Hto3jrmfE0Ub68dlgphFHm6yk
7kG7PbOnGRD2KHI5hpI5zgoVJdE2P5TkiLRbnQ+J1JZFOebYWRQSUKWt68qxIBbY
6vmkRyJKplnF/DhNSNTIg7aPfCLBkyo5VHK+LkbxyvYxvkkYSvaT3ImOZ/AGvE2M
AUPTJaaAwyAWYLeyfwsQnuh1pXhx4EG3EpS2O1HdzZSPMo0GLQ9SfLn+c2QRBMua
kqcBIsTElyWHV51yjgMGiFpBHjaO0WVCbZeeVzPDAAH0AM5xhuKFialpzt7OsNbo
H9FBtbDNDgv1nJ477N5r+XpF3DsoAHts
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:56 2025 by rpki-client