Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          K62SptT3qZH+XkUiVZalwvri93S4AblZSmt+zqP05BU=
Subject key identifier:   E3:01:00:F4:D4:E4:C5:6C:8E:83:22:22:8A:20:C4:F1:C1:37:12:D3
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          6B
Signing time:             Sun 19 Oct 2025 10:18:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:18:49 +0000
Manifest next update:     Sun 26 Oct 2025 10:18:49 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: +FsemAhKzPQ11xwbUUCzVUnpuE2Q5TTVfSQncSNSiPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Oct 19 10:18:49 2025 GMT
            Not After : Oct 26 10:18:49 2025 GMT
        Subject: CN=68f4bb09-5fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:97:4b:ea:2d:74:da:74:a1:1b:14:dc:d9:
                    ad:23:d1:d7:88:19:75:dd:3f:98:c8:51:13:e1:d1:
                    29:24:14:cc:11:b1:7b:91:39:93:19:cd:61:c0:3b:
                    96:63:1a:cf:59:89:fa:63:2d:2a:e3:b9:2b:2e:62:
                    11:a5:9f:33:8f:80:1b:8c:ff:a8:73:d8:2a:a2:2c:
                    8a:47:35:2c:2c:d0:38:df:56:60:48:ce:39:19:ec:
                    eb:1f:de:44:d2:ad:80:a0:17:70:cc:ef:4b:7a:48:
                    98:9b:80:e4:54:17:5b:c8:45:97:52:1c:00:3d:6b:
                    ad:04:c6:49:26:a6:1d:2f:f0:d7:1e:72:52:35:53:
                    5d:6f:64:ac:1e:bd:a6:d9:0d:73:b2:6b:d6:05:e5:
                    79:ac:c6:0d:cd:78:23:8f:08:ed:eb:54:62:4a:59:
                    05:f5:6d:8a:c1:1e:17:8c:d4:9c:aa:49:aa:55:b1:
                    17:ca:4a:11:b1:97:f3:55:e0:e2:9c:38:10:c5:aa:
                    fe:7f:25:5b:68:25:5b:d1:4c:69:5a:76:3e:60:ef:
                    23:8d:ea:ed:11:8d:46:64:f7:7c:57:ab:9a:69:14:
                    d8:28:41:31:47:60:11:ab:1c:c0:64:58:40:8c:10:
                    58:6a:5b:bd:24:e4:6b:d7:28:42:35:f2:6a:47:3b:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:00:F4:D4:E4:C5:6C:8E:83:22:22:8A:20:C4:F1:C1:37:12:D3
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:c6:dc:55:60:33:f5:36:e1:66:98:a9:59:5e:e8:16:71:
         d0:fa:f7:d6:e8:f3:cc:39:8c:c6:3c:c8:3e:f4:c3:c1:51:a0:
         0f:47:9d:30:f7:c8:8f:01:e7:7c:35:62:0e:cc:f6:62:0e:d7:
         66:82:87:a9:72:5d:21:e4:4c:19:49:f3:01:1b:be:80:1e:ac:
         d2:80:19:56:81:15:8e:d6:78:8f:64:ea:ef:20:53:93:d6:94:
         92:37:83:53:45:2d:14:38:d7:e3:53:65:ab:df:9b:d5:71:da:
         8e:e5:fb:64:bc:9a:af:0d:2c:e1:70:21:3d:62:b4:c0:97:9b:
         1a:31:8d:0f:63:ee:10:ca:40:23:4d:fb:04:ee:df:fd:60:f8:
         1e:36:1e:29:f2:d6:59:57:e4:1d:89:d3:d2:3f:39:f2:15:9d:
         3e:5d:93:b9:57:17:8d:46:e7:a6:dd:1a:c8:a7:94:ff:67:ef:
         be:af:37:96:6a:2e:37:81:dd:86:b4:dd:d3:c1:e5:5d:1c:a8:
         83:54:44:ae:ae:26:1c:5e:39:6f:49:c6:74:53:18:b9:ae:ea:
         3b:06:6b:e4:c6:73:b5:03:99:67:6b:b8:6b:f0:d7:e0:80:a9:
         ee:cb:6b:02:70:d9:4c:a9:8b:b1:cc:93:c9:e9:dc:e8:fe:84:
         e4:ed:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:53 2025 by rpki-client