Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          OSjRhmNcqPx/5s38q5L7BbL3rY9lQh0BE5JbevTdn+Y=
Subject key identifier:   80:9C:BD:F7:19:F4:49:3E:D7:24:53:8A:00:07:42:8D:22:33:BE:5A
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0496
Signing time:             Sun 19 Oct 2025 01:49:41 +0000
Manifest this update:     Sun 19 Oct 2025 01:49:41 +0000
Manifest next update:     Sun 26 Oct 2025 01:49:41 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: es8mTnLwTEsBtuEzxql5bpytzd7JSmeKilTi9pH0Xmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: Oct 19 01:49:41 2025 GMT
            Not After : Oct 26 01:49:41 2025 GMT
        Subject: CN=68f443b5-f8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:2f:76:4b:f1:39:d3:46:b9:49:3f:98:b8:
                    63:25:ab:3f:07:cc:50:ea:00:ce:d9:ac:a5:06:30:
                    20:77:ac:11:a0:65:6c:18:c2:20:a6:70:7e:db:06:
                    15:b2:ae:3d:99:31:ab:57:92:a1:08:84:1f:ac:9c:
                    52:ab:76:b8:a0:06:0c:d7:ad:49:97:97:ab:a8:c8:
                    ad:00:f2:f4:ea:b2:2d:c4:63:43:24:7b:ec:db:ff:
                    ad:37:7b:df:f3:f2:5c:df:9d:72:6f:40:2c:70:32:
                    6b:e5:d3:7b:c8:d3:58:f6:23:0d:98:13:0d:7a:dc:
                    a1:de:16:b4:f6:ba:9f:ec:d2:13:52:9e:12:ef:c5:
                    c5:e5:e9:ce:a2:4b:ae:83:a5:b1:d9:7b:4c:75:a5:
                    49:e6:26:ae:fe:46:0f:f1:52:c6:72:ad:de:62:45:
                    62:5e:64:fb:3e:10:4e:38:5f:c4:62:9c:3d:0b:3c:
                    eb:5a:81:9a:91:fa:1d:31:98:ba:57:0c:b9:61:98:
                    07:3f:db:2c:0a:7f:e7:8a:62:e4:a0:9e:1b:70:95:
                    4c:ee:f4:f5:c9:f8:93:93:d0:54:62:0c:4b:d2:e0:
                    70:64:b8:b3:90:52:f8:1b:fb:e2:60:f1:77:db:db:
                    cd:e1:b8:2c:fd:55:3b:99:4b:cf:b7:eb:39:f3:73:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:BD:F7:19:F4:49:3E:D7:24:53:8A:00:07:42:8D:22:33:BE:5A
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d3:8a:5b:40:8f:da:b3:70:f3:2d:35:66:11:6a:72:9a:8f:
         59:10:37:9e:ff:dd:b7:e8:6a:7f:ff:85:a5:44:2f:4a:96:20:
         4a:ba:c3:0a:4b:89:75:8b:27:c4:12:83:86:62:4a:50:de:f1:
         49:52:ef:93:01:3b:f6:91:6b:33:04:cb:e7:dd:9f:0b:3e:5c:
         54:13:c7:15:b8:cd:7f:97:ae:93:35:ea:fa:c3:8a:31:47:1e:
         ce:66:29:d8:57:96:d7:47:0e:0b:ab:f9:9b:7b:6e:73:17:ae:
         1c:95:d4:a6:da:13:6d:a9:c5:33:1e:57:1f:a4:25:f1:3e:de:
         aa:33:7b:5e:2c:fc:0e:78:f0:3a:16:e0:96:46:17:8e:94:9d:
         57:f0:82:ff:aa:f4:d8:ce:b1:c8:39:2d:cd:11:37:4c:be:49:
         5d:6b:87:29:fa:89:d3:9a:7f:1c:06:06:2d:f5:18:68:8f:3f:
         a5:32:22:57:b7:76:87:11:86:89:84:dd:99:7c:31:72:d9:8f:
         15:e1:f3:34:c5:a4:47:65:70:e7:3c:dc:99:6f:3e:2b:ad:1c:
         f5:d5:f4:32:f8:2a:db:1d:6d:7b:0d:f7:89:87:51:38:df:ae:
         3a:01:25:5b:19:41:19:95:6b:10:02:8b:e0:07:42:70:98:9d:
         01:9c:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:09 2025 by rpki-client