Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          e5YFBAZhDHPoe5Y9OQZ9O99w0N3Gq67vsc30WgCtzEQ=
Subject key identifier:   63:C1:D0:1F:23:22:62:C7:2C:89:AA:31:2D:5A:74:9F:60:69:8C:4D
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       34CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          34CA
Signing time:             Sat 18 Oct 2025 15:23:22 +0000
Manifest this update:     Sat 18 Oct 2025 15:23:21 +0000
Manifest next update:     Sat 25 Oct 2025 15:23:21 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: s2A7W1QqdSOdh7gpeO0uP1FA4/Qtmt9fIyhIKdAlVWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13514 (0x34ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: Oct 18 15:23:21 2025 GMT
            Not After : Oct 25 15:23:21 2025 GMT
        Subject: CN=68f3b0ea-cefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:4e:0d:7e:88:03:be:1a:93:1d:9d:67:27:
                    5d:d0:97:3b:a2:e4:d1:05:49:7d:21:52:bf:df:23:
                    77:f0:77:31:8c:76:05:3d:3f:70:35:50:eb:c9:07:
                    56:cc:54:70:90:8b:22:c3:a2:6d:a1:de:5c:f1:bb:
                    9c:5f:45:fd:08:73:1f:6c:c8:c1:37:7d:41:09:3d:
                    1f:9c:7d:71:1f:7e:68:8c:1e:ec:7a:e5:ab:34:89:
                    c3:ad:70:74:29:4e:16:b8:21:37:1a:17:cc:db:e2:
                    cd:63:07:b8:f1:83:c6:97:96:0d:32:0e:6b:1c:c5:
                    10:4d:43:31:97:3e:1c:78:df:1e:81:df:a0:64:81:
                    07:21:a4:b6:f7:fe:fd:db:92:a7:85:0f:5b:b9:98:
                    a1:2d:a7:44:e2:a3:c1:d1:32:51:cf:33:fa:ee:ba:
                    38:76:18:d5:9e:2f:43:73:19:b2:3c:0b:d2:9e:09:
                    7a:c8:cf:ad:dd:c4:9a:0e:5a:49:d6:6a:00:d6:d2:
                    c8:ce:4f:22:de:04:80:7a:bc:b1:35:d3:db:ea:68:
                    03:dd:3a:dc:d3:d3:07:e3:95:52:f5:b9:58:72:a5:
                    3a:6b:d7:ea:14:d2:ea:a0:0a:85:5f:75:68:82:c9:
                    d3:62:1c:84:c5:82:ac:8a:8f:89:c4:e9:95:dd:9d:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:D0:1F:23:22:62:C7:2C:89:AA:31:2D:5A:74:9F:60:69:8C:4D
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:70:51:b3:9d:6c:20:29:2d:6f:84:f3:03:a3:82:d9:56:
         e3:d2:99:ba:d7:4c:e7:c0:3d:ff:fb:71:f8:d6:5f:fc:35:63:
         a2:63:9b:35:ed:22:14:2d:b1:30:e4:80:b8:43:49:c1:9a:86:
         79:e8:87:e9:29:43:cf:d0:a4:2b:ef:c5:b3:18:a8:d0:e1:46:
         f9:61:98:b7:f5:ba:62:5a:aa:2d:35:39:b9:5c:b5:bf:53:2e:
         57:3c:3f:79:62:fa:bd:11:40:e9:a7:25:21:eb:c0:6b:3e:34:
         e6:cc:fb:fb:0e:43:d2:c4:72:9e:6e:d0:72:bb:f0:a3:30:4a:
         d9:b2:22:40:f2:f7:a7:22:08:31:f4:51:6d:7a:97:ea:b0:6a:
         d3:2f:f6:98:a8:df:ce:d6:72:2e:da:9e:0b:8f:40:7a:9f:3c:
         8d:0b:ae:00:c1:9c:d9:ad:56:0f:fe:8e:79:0a:5c:cb:bd:c2:
         f4:1b:94:19:c0:24:a0:8b:19:a9:3a:8b:22:58:ba:eb:42:2d:
         52:39:8a:ee:64:ef:dd:d9:92:6c:2f:af:0b:a5:5c:90:96:ed:
         b4:7a:96:87:9a:b0:77:84:fb:58:60:79:7f:5a:6b:b0:58:e0:
         b5:4a:f4:62:82:e7:c0:14:5c:4e:0c:a7:ce:58:c3:29:c4:e7:
         67:15:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:06 2025 by rpki-client