Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
File:                     AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json)
Hash identifier:          t5qQUtdkQbMaBnSY5lLpUL7zGU72svvFoKgX61FBNuM=
Subject key identifier:   F8:E0:44:CB:D0:9B:D8:33:C6:69:A5:D5:83:2B:C1:B8:08:37:E5:D3
Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
Certificate issuer:       /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
Manifest number:          05B7
Signing time:             Sun 19 Oct 2025 00:46:58 +0000
Manifest this update:     Sun 19 Oct 2025 00:46:57 +0000
Manifest next update:     Sun 26 Oct 2025 00:46:57 +0000
Files and hashes:         1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: O8TC0cZt2NtYqwrhOOzpc0RK9SRlGCWKYdKK7bfT3LI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl
                          rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297
        Validity
            Not Before: Oct 19 00:46:57 2025 GMT
            Not After : Oct 26 00:46:57 2025 GMT
        Subject: CN=68f43501-30cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:8d:40:0a:17:db:ba:0b:4b:50:22:23:a1:
                    61:3d:c3:2a:a5:84:9f:6b:28:a8:47:d9:24:7c:5a:
                    2a:c8:e4:7b:f3:e3:05:bd:46:a9:dc:92:37:3d:ba:
                    5a:ce:fc:ae:7c:7e:4b:3f:74:6e:1d:9b:2d:37:04:
                    e3:56:70:03:77:ab:9c:ef:1a:d1:fb:1d:4e:4c:54:
                    cb:3d:2c:64:0c:a3:4e:c1:af:d7:2f:f9:d6:c2:af:
                    04:f1:48:cc:1b:0c:00:9e:3d:f6:e3:76:68:ff:f3:
                    8a:f1:7e:2c:b9:93:24:c9:fa:73:4f:11:15:21:9a:
                    9a:65:e1:f4:10:49:e5:d7:69:c0:3a:22:39:87:d5:
                    32:26:04:45:2e:96:76:d9:5d:72:27:39:28:e3:51:
                    75:0f:25:80:6e:dd:46:5f:4f:89:e1:57:29:27:d1:
                    14:2d:13:05:87:3f:0d:d9:e3:46:79:ee:fe:d0:d8:
                    10:1b:93:29:2f:c4:0c:f4:06:d1:d0:1f:74:bd:7f:
                    ac:ab:f5:38:83:b0:4b:ce:4d:7d:74:57:b4:2b:52:
                    86:ad:23:d6:88:b7:18:3c:3c:a4:fb:79:c0:18:bc:
                    68:4e:d0:58:f6:37:c7:39:5a:b6:de:63:da:d5:9f:
                    1a:eb:f2:f2:4e:7d:2e:c6:18:a4:43:5e:93:92:ac:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:44:CB:D0:9B:D8:33:C6:69:A5:D5:83:2B:C1:B8:08:37:E5:D3
            X509v3 Authority Key Identifier:
                keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:51:af:a6:32:9e:8e:2f:bf:4f:4c:42:0d:72:5a:33:69:
         6b:44:aa:37:7a:40:d3:d5:d5:1f:5f:a1:c9:a6:94:f1:e1:bb:
         4c:25:d2:76:56:2c:13:01:46:d5:6a:3c:1c:18:54:dc:2b:f8:
         0c:fc:37:6a:8b:f6:e3:f1:82:79:19:f4:9a:9c:09:4e:b7:6f:
         12:2d:10:00:f9:7c:28:58:a2:4d:26:17:aa:4c:c0:89:52:88:
         a3:4b:f3:fd:4c:a5:50:f2:b6:86:9f:b3:75:1c:33:ad:ea:b2:
         ac:5c:d2:a6:eb:29:e9:d1:1d:65:0d:7d:24:86:80:1a:7a:d6:
         20:25:a7:c3:b7:32:69:48:18:22:be:7b:3a:3e:1f:d4:b2:c8:
         55:d5:4d:73:ef:9a:fa:f7:9b:f3:ef:ff:3c:0f:31:7a:f9:17:
         15:ba:20:d7:af:d3:fa:0f:ee:56:f2:f9:93:dd:7c:5d:bc:c3:
         73:64:6c:ca:96:69:65:53:9e:95:42:08:d6:65:26:12:13:00:
         df:6a:9f:96:76:9a:d2:19:cb:20:8d:8c:20:68:11:89:c7:11:
         bc:9e:0b:db:18:a1:90:27:fb:b0:85:69:a7:b8:0b:ba:90:b5:
         ce:53:3d:eb:dc:fc:f9:8f:07:01:36:39:59:72:9c:44:eb:8f:
         81:c4:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:49 2025 by rpki-client