Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
File:                     MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json)
Hash identifier:          oye7u7Bn7gplTTcBVCmHRJenBRDuXXmoWXwHu+M5SoU=
Subject key identifier:   9B:4D:B7:E0:39:7E:6B:62:DB:80:B9:51:5B:40:1B:B2:6D:42:1B:2C
Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC
Certificate issuer:       /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
Manifest number:          8B
Signing time:             Sun 19 Oct 2025 09:50:37 +0000
Manifest this update:     Sun 19 Oct 2025 09:50:37 +0000
Manifest next update:     Sun 26 Oct 2025 09:50:37 +0000
Files and hashes:         1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: 1Qlk7+sqLdLSThl9EH0E+Ijyhn6mBGNPuVaaiaXRRpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl
                          rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC
        Validity
            Not Before: Oct 19 09:50:37 2025 GMT
            Not After : Oct 26 09:50:37 2025 GMT
        Subject: CN=68f4b46d-1d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:37:d7:3d:30:30:4c:24:2f:b9:6a:fd:19:
                    9b:9e:00:58:3b:70:47:b4:d6:7b:ea:f5:2c:b6:64:
                    5e:a6:6b:ec:b5:72:92:d3:6f:56:bd:59:d6:81:ef:
                    68:94:62:f7:08:d6:8d:be:95:84:8e:65:10:7c:6f:
                    02:30:21:2c:64:3c:b7:5b:e4:c0:54:0d:e6:48:05:
                    4e:9a:b8:ff:e8:13:1f:cf:08:08:c4:f0:cc:fa:27:
                    e6:ee:d6:97:44:7f:c5:91:8e:df:e9:b1:6d:6e:ed:
                    f3:50:10:05:0e:11:48:f2:4c:e2:c8:43:be:9b:50:
                    42:e0:35:06:5e:53:4d:19:eb:fa:58:e4:64:97:b5:
                    d4:40:27:e4:8d:41:b8:c9:3f:ac:e0:6e:86:2b:24:
                    b8:70:d3:01:e6:a5:54:70:75:12:6b:5b:c9:57:df:
                    b7:7a:61:49:87:ed:c5:78:27:14:59:78:54:5c:cd:
                    7c:b8:56:c6:e1:7a:72:d9:c5:02:73:54:ff:b6:95:
                    92:00:fd:7a:a3:f4:26:f7:a9:9d:6a:6b:1e:7f:77:
                    78:cf:6f:c3:5d:b2:7e:64:21:43:fb:38:02:4b:b8:
                    6c:b7:f9:52:53:0e:e3:dc:1d:38:6f:8a:f9:b6:3e:
                    40:7c:da:eb:4d:4e:d8:77:c9:be:0d:33:45:1f:fd:
                    0f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:B7:E0:39:7E:6B:62:DB:80:B9:51:5B:40:1B:B2:6D:42:1B:2C
            X509v3 Authority Key Identifier:
                keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:98:3e:fd:03:fe:86:ef:87:1c:db:bf:67:f3:da:0b:5a:
         4b:b9:96:b5:a7:59:69:7f:93:b9:ae:fd:b4:ca:2a:8f:97:7c:
         1f:89:fe:33:0c:84:41:56:47:b1:e6:68:d5:d5:19:a8:7c:22:
         6a:50:25:38:90:08:54:af:02:8c:00:3d:d5:e1:14:07:04:dc:
         63:30:85:11:8b:23:59:e9:7a:2e:35:81:f5:d3:80:6b:d5:2c:
         c9:4d:7f:7a:82:d6:27:74:03:ca:36:3b:cc:28:ba:c4:27:a9:
         12:2a:dc:52:19:aa:84:b9:ca:df:00:40:c5:9c:3c:88:e7:4f:
         05:47:6e:03:89:e4:4d:3e:30:dd:74:36:69:84:64:9f:51:62:
         8d:75:e5:36:7a:7d:59:15:43:aa:11:5b:a5:ff:1e:a5:38:dd:
         6a:13:00:b7:a0:df:98:d3:2a:14:13:7d:0d:ca:3a:23:ef:fe:
         8c:17:b6:a0:43:4c:52:58:db:1a:e3:9d:4f:d5:4d:2d:ca:c4:
         07:f6:0d:a9:de:07:78:e6:d2:da:84:2e:9c:03:8d:1c:e9:34:
         7d:e4:58:82:ed:21:d6:ba:7f:e8:74:00:59:43:2e:b4:91:8b:
         ad:a8:a3:14:6a:26:ae:21:f8:3f:cd:19:f6:76:ab:8e:a3:bc:
         36:53:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:55 2025 by rpki-client