Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
File:                     RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json)
Hash identifier:          EyHe62VGEQ4K54nG7TfI0VEdyKOkI5u9B3351xBWtlk=
Subject key identifier:   3D:E5:D0:D0:A9:C7:6E:77:E3:B8:E5:B9:B9:71:6A:CC:2F:0E:F8:20
Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
Certificate issuer:       /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Certificate serial:       0830
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
Manifest number:          1E83
Signing time:             Sat 18 Oct 2025 17:13:07 +0000
Manifest this update:     Sat 18 Oct 2025 17:13:07 +0000
Manifest next update:     Sat 25 Oct 2025 17:13:07 +0000
Files and hashes:         1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: 2wdgceFkHse72PvUDdWIfNTQjszfvvY6x6H1l4hPNOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
        Validity
            Not Before: Oct 18 17:13:07 2025 GMT
            Not After : Oct 25 17:13:07 2025 GMT
        Subject: CN=68f3caa3-c469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:b0:30:d5:a0:77:46:a3:7b:5c:47:5d:32:
                    a6:2f:a1:6d:e9:2f:89:e4:4b:2c:86:de:8b:2d:cb:
                    80:32:5c:fa:70:f0:45:cc:97:9f:f1:c0:bc:93:b4:
                    19:32:ae:26:cc:9f:29:07:44:46:17:cd:ed:28:97:
                    0a:ba:d4:a5:4f:2c:64:da:ac:7d:11:9e:7d:1e:ca:
                    f7:32:9d:45:b6:57:5b:e1:3b:21:7a:81:6d:ba:c8:
                    87:b0:3a:d4:98:05:a0:d1:38:f7:23:85:64:47:f0:
                    6f:4b:b7:6e:cd:bc:23:c1:23:52:e8:24:a3:14:73:
                    97:40:47:a8:9f:49:4e:06:4c:16:83:a8:26:57:99:
                    a7:1d:bf:a9:1d:75:30:b3:de:0f:6b:a9:88:e9:c1:
                    77:67:e3:06:e9:2e:19:9b:9a:d2:56:b4:bf:f7:01:
                    ae:89:4d:c8:64:79:5e:92:f9:01:ca:eb:8d:25:a7:
                    3e:8e:21:c4:58:84:43:3b:84:e5:c9:85:b8:15:71:
                    31:11:24:df:3a:e7:4c:6e:ba:54:ef:4b:ab:9f:e9:
                    e3:45:2c:24:5e:33:38:91:48:f1:18:b8:40:b0:df:
                    75:4b:b1:af:ed:aa:3e:f3:e5:d5:c9:54:8b:61:52:
                    d9:90:d3:ab:eb:6a:d1:ba:1e:ff:4e:c7:2b:6b:31:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:D0:D0:A9:C7:6E:77:E3:B8:E5:B9:B9:71:6A:CC:2F:0E:F8:20
            X509v3 Authority Key Identifier:
                keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:f7:52:f4:e7:33:33:8f:fb:ef:44:3e:fb:5a:f0:9d:1e:
         db:00:49:58:d5:71:10:bd:c1:e0:e1:f1:f4:00:0c:96:4d:d3:
         51:80:f7:fc:30:00:51:99:45:2c:83:c6:f9:4c:e2:a9:cf:e3:
         a4:d7:e3:d8:cd:8c:b8:37:42:97:ea:66:ca:99:2c:2e:1c:da:
         11:48:0c:b1:b8:15:a3:a8:a7:32:ce:bf:e0:c6:d4:12:8a:50:
         6a:81:0f:fb:44:dd:1f:4e:17:35:ee:3c:e5:af:f5:f9:5a:95:
         58:74:0f:1d:aa:0b:fa:94:c3:2c:f5:33:e5:d0:29:d9:1a:96:
         b3:ed:c6:f4:e5:53:63:8e:58:e2:0a:34:52:b0:10:58:a3:37:
         01:1c:0a:e3:da:6b:ef:2f:e7:b5:fa:32:bb:cf:77:fb:43:05:
         2e:78:29:d2:a2:92:26:58:3e:ac:b2:86:52:5d:ca:48:62:a5:
         95:45:93:7d:cd:54:24:0f:f0:92:a9:8d:72:be:25:a5:28:0a:
         e3:c0:d6:7c:6f:ec:92:8f:eb:17:5d:99:51:ac:7b:c0:17:a6:
         83:89:68:29:21:c9:84:3e:7a:46:71:bd:f7:1a:6d:d5:38:12:
         5c:55:c0:37:3e:f1:47:39:08:b0:c6:90:5e:54:dc:cf:2e:cb:
         f6:bb:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:09 2025 by rpki-client