Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File:                     pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier:          EemU9PU2j5f/JvuIFnUBiiHALMdOheO8SzHQJw+1CVw=
Subject key identifier:   CC:15:E6:28:10:DF:74:BD:F1:2E:76:4D:3D:A9:2D:BE:04:21:AD:1D
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer:       /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number:          061C
Signing time:             Sun 19 Oct 2025 00:21:00 +0000
Manifest this update:     Sun 19 Oct 2025 00:20:59 +0000
Manifest next update:     Sun 26 Oct 2025 00:20:59 +0000
Files and hashes:         1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: 2C4uO+Wht3FvJYF4uq3b0LOlAn6JQshATSQ1ZmIQDp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
                          rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
        Validity
            Not Before: Oct 19 00:20:59 2025 GMT
            Not After : Oct 26 00:20:59 2025 GMT
        Subject: CN=68f42eec-5eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:fb:0d:99:91:a5:da:cb:7a:c4:aa:39:62:
                    a2:64:2c:28:ae:9b:55:64:cb:e7:4c:4e:16:13:35:
                    a5:da:11:7b:57:c4:79:03:d5:99:d1:90:bb:19:ab:
                    b0:6c:e2:58:78:4c:1a:b6:8a:fe:c5:b2:0f:5a:0f:
                    a9:14:53:4e:73:a2:8b:f4:b5:ef:03:a5:07:97:72:
                    34:d5:be:c1:aa:f1:4a:fd:b1:f5:b5:59:c0:37:3f:
                    06:11:0d:8b:e2:a7:21:ef:09:18:47:b2:71:43:53:
                    f7:d6:e5:7a:9b:1c:bc:80:8d:13:ad:ef:87:87:f7:
                    db:f1:6e:ba:6a:e3:e3:42:ba:89:da:5e:91:b9:bd:
                    8b:3f:db:7b:cb:e8:9a:f8:ee:9f:8f:f3:76:c9:b9:
                    61:7f:2d:d0:ea:4f:e1:db:c7:b4:cf:a2:cb:26:3f:
                    70:d4:31:8a:da:a0:59:c1:f8:7e:03:b3:80:95:0c:
                    d6:eb:e7:97:0f:80:d4:cf:53:10:a0:2d:c1:cc:e5:
                    ab:70:49:33:5d:93:ef:a2:ef:ac:0e:ec:cd:56:28:
                    89:68:7b:45:d9:77:f4:1e:1e:ea:c1:17:fd:ed:d3:
                    a9:24:d3:2f:31:ca:df:c6:57:af:88:54:48:f3:1d:
                    6f:8e:4e:bf:8d:5b:d6:79:e5:3a:ad:21:2b:9d:74:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:E6:28:10:DF:74:BD:F1:2E:76:4D:3D:A9:2D:BE:04:21:AD:1D
            X509v3 Authority Key Identifier:
                keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ac:f6:0e:2e:ea:6e:be:e9:8e:bb:f5:35:85:79:00:ab:f0:
         0e:01:06:50:34:ed:eb:1f:60:d9:4e:5a:14:04:dd:39:ca:2b:
         d9:b9:db:dc:f8:23:f7:06:29:dd:f1:e9:b6:d2:79:d6:e6:c9:
         af:5b:24:a0:3c:5f:01:25:82:27:48:0e:a5:ca:47:70:f1:b9:
         5e:6f:b1:e0:31:cc:aa:f0:09:1d:31:49:d4:52:0e:e8:9e:02:
         ab:fa:3a:d4:e2:48:98:1f:05:f2:39:63:f9:76:06:7b:b7:94:
         9b:e9:6b:ee:82:e0:a3:dd:59:8b:5e:7b:fa:3a:de:c2:67:ef:
         d5:eb:8a:59:0c:96:c7:27:3a:ff:9e:92:9d:ea:ae:d3:26:26:
         5d:e1:75:bb:02:e0:f6:92:8e:23:c4:b5:3f:e2:3d:bf:e8:06:
         35:9b:f2:25:49:eb:fb:73:a8:7e:aa:fc:7a:7f:08:52:0d:06:
         f6:c2:ec:d7:d9:61:52:0f:3f:8f:31:dd:1c:d3:54:19:d9:61:
         9d:88:55:e8:79:e6:db:32:fb:bc:e0:df:6c:e3:8d:41:20:07:
         a7:f7:4c:60:b1:ed:cf:ed:07:22:a3:b9:0d:81:3c:9f:c9:ab:
         80:8e:56:72:0c:32:d7:46:dc:fc:05:f9:c8:22:6b:72:67:40:
         8c:9e:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:12 2025 by rpki-client